Analysis and design of a smart card based authentication protocol

Kuo-Hui YEH; Kuo-Yu TSAI; Jia-Li HOU

doi:10.1631/jzus.C1300158

Your Location：

Home >

Browse articles >

Analysis and design of a smart card based authentication protocol

计算机工程 | Updated：2022-12-09

- Analysis and design of a smart card based authentication protocol
- Analysis and design of a smart card based authentication protocol
- 信息与电子工程前沿（英文） 2013年14卷第12期页码：909-917
- Affiliations：
  
  1.Department of Information Management, National Dong Hwa University, Taiwan 974, Hualien
  2.Department of Management Information Systems, Hwa Hsia Institute of Technology, Taiwan 235, New Taipei City
- Author bio：
  
  [ "Kuo-Hui YEH, E-mail: khyeh@mail.ndhu.edu.tw" ]
  Kuo-Yu TSAI, E-mail: kytsai@cc.hwh.edu.tw
- Funds：
  
  Project (Nos. 102-2218-E-259-004, 102-2218-E-146-002, and 102- 2218-E-011-012) supported by Taiwan Information Security Center (TWISC) and National Science Council, Taiwan
- DOI：10.1631/jzus.C1300158
  中图分类号： TP309
- 收稿：2013-06-04，
  
  修回：2013-11-18，
  
  纸质出版：2013-12
- Accepted：
Scan QR Code
Analysis and design of a smart card based authentication protocol[J]. 信息与电子工程前沿（英文）, 2013,14(12):909-917.

Kuo-Hui YEH, Kuo-Yu TSAI, Jia-Li HOU. Analysis and design of a smart card based authentication protocol[J]. Frontiers of Information Technology & Electronic Engineering, 2013, 14(12): 909-917.
Analysis and design of a smart card based authentication protocol[J]. 信息与电子工程前沿（英文）, 2013,14(12):909-917. DOI： 10.1631/jzus.C1300158.

Kuo-Hui YEH, Kuo-Yu TSAI, Jia-Li HOU. Analysis and design of a smart card based authentication protocol[J]. Frontiers of Information Technology & Electronic Engineering, 2013, 14(12): 909-917. DOI： 10.1631/jzus.C1300158.

摘要

Abstract

Numerous smart card based authentication protocols have been proposed to provide strong system security and robust individual privacy for communication between parties these days. Nevertheless

most of them do not provide formal analysis proof

and the security robustness is doubtful. Chang and Cheng (2011) proposed an efficient remote authentication protocol with smart cards and claimed that their proposed protocol could support secure communication in a multi-server environment. Unfortunately

there are opportunities for security enhancement in current schemes. In this paper

we identify the major weakness

i.e.

session key disclosure

of a recently published protocol. We consequently propose a novel authentication scheme for a multi-server environment and give formal analysis proofs for security guarantees.

关键词

Keywords

references

A. Armando , , , L. Compagna . . SATMC: a SAT-based model checker for security protocols . . Log. Artif. Intell. , , 2004 . . 3229 730 - - 733 . . DOI: 10.1007/978-3-540-30227-8_68 http://doi.org/10.1007/978-3-540-30227-8_68 . .

Project AVISPA . . Automated Validation of Internet Security Protocols and Applications . . Available from , , http://www.avispa-project.org http://www.avispa-project.org , , 2003 . . .

D. Basin , , , S. Mdersheim , , , L. Viganò . . OFMC: a symbolic model-checker for security protocols . . Int. J. Inf. Secur. , , 2005 . . 4 ( ( 3 ): ): 181 - - 208 . . DOI: 10.1007/s10207-004-0055-7 http://doi.org/10.1007/s10207-004-0055-7 . .

Y. Boichut , , , P.C. Héam , , , O. Kouchnarenko , , , F. Oehl . . Improvements on the Genet and Klay Technique to Automatically Verify Security Protocols . . Proc. 3rd Int. Workshop on Automated Verification of Infinite States Systems , , 2004 . . p.1 - - 11 . . . .

M. Burrows , , , M. Abadi , , , R. Needham . . A logic of authentication . . ACM Trans. Comput. Syst. , , 1990 . . 8 ( ( 1 ): ): 18 - - 36 . . DOI: 10.1145/77648.77649 http://doi.org/10.1145/77648.77649 . .

C.C. Chang , , , T.F. Cheng . . A robust and efficient smart card based remote login mechanism for multi-server architecture . . Int. J. Innov. Comput. Inf. Control , , 2011 . . 7 ( ( 8 ): ): 4589 - - 4602 . . . .

C.C. Chang , , , J.S. Lee . . An Efficient and Secure Multi- server Password Authentication Scheme Using Smart Card . . Int. Conf. on Cyberworlds , , 2004 . . p.417 - - 422 . . DOI: 10.1109/CW.2004.17 http://doi.org/10.1109/CW.2004.17 . .

C.C. Chang , , , H.C. Tsai . . An anonymous and self- verified mobile authentication with authenticated key agreement for large-scale wireless networks . . IEEE Trans. Wirel. Commun. , , 2010 . . 9 ( ( 11 ): ): 3346 - - 3353 . . DOI: 10.1109/TWC.2010.092410.090022 http://doi.org/10.1109/TWC.2010.092410.090022 . .

C.L. Chen , , , Y.L. Lai , , , C.C. Chen , , , Y.L. Chen . . A smart card-based mobile secure transaction system for medical treatment examination reports . . Int. J. Innov. Comput. Inf. Control , , 2011 . . 7 ( ( 5 ): ): 2257 - - 2267 . . . .

W.S. Juang . . Efficient multi-server password authenticated key agreement using smart cards . . IEEE Trans. Consum. Electron. , , 2004 . . 50 ( ( 1 ): ): 251 - - 255 . . DOI: 10.1109/TCE.2004.1277870 http://doi.org/10.1109/TCE.2004.1277870 . .

J.S. Lee , , , Y.F. Chang , , , C.C. Chang . . A novel authentication protocol for multi-server architecture without smart cards . . Int. J. Innov. Comput. Inf. Control , , 2008 . . 4 ( ( 6 ): ): 1357 - - 1364 . . . .

H.T. Liaw , , , J.F. Lin , , , W.C. Wu . . An efficient and complete remote user authentication scheme using smart cards . . Math. Comput. Modell. , , 2006 . . 44 ( ( 1-2 ): ): 223 - - 228 . . DOI: 10.1016/j.mcm.2006.01.015 http://doi.org/10.1016/j.mcm.2006.01.015 . .

I.C. Lin , , , M.S. Hwang , , , L.H. Li . . A new remote user authentication scheme for multi-server architecture . . Fut. Gener. Comput. Syst. , , 2003 . . 19 ( ( 1 ): ): 13 - - 22 . . DOI: 10.1016/S0167-739X(02)00093-6 http://doi.org/10.1016/S0167-739X(02)00093-6 . .

M. Turuani . . The CL-Atse Protocol Analyser . . LNCS , , 2006 . . 4098 277 - - 286 . . DOI: 10.1007/11805618_21 http://doi.org/10.1007/11805618_21 . .

浏览量

Downloads

CSCD

文章被引用时，请邮件提醒。

Submit

工具集

关联资源

Efficient password authentication schemes based on a geometric approach for a multi-server environment

Efficient and secure three-party authenticated key exchange protocol for mobile environments

An eﬃcient and DoS-resistant user authentication scheme for two-tiered wireless sensor networks

A three-level authenticated conference key establishment protocol for UMTS networks