arrow
Return

DoS-resistant ID-based password authentication scheme using smart cards

delete2010-01-01
delete35
PRE
AI
M
Min‐Shiang Hwang *
T
Te-Yu Chen
DOI:10.1016/j.jss.2009.07.050delete
deleteOriginal
deleteOriginal request for help
deleteShare
deleteSave
Abstract

Abstract

En 中文
In this paper, we provide a defense mechanism to Kim-Lee-Yoo's ID-based password authentication scheme, which is vulnerable to impersonation attacks and resource exhaustion attacks. Mutual authentication and communication privacy are regarded as essential requirements in today's client/server-based architecture: therefore, a lightweight but secure mutual authentication method is introduced in the proposed scheme. Once the mutual authentication is successful, the session key will be established without any further computation. The proposed defense mechanism not only accomplishes the Mutual authentication and the session key establishment, but also inherits the security advantages of Kim-Lee-Yoo's scheme, e.g. it is secure against password guessing attacks and message replay attacks. (C) 2009 Elsevier Inc. All rights reserved.
Keywords:
ID-based scheme
Client puzzles
Password authentication
Resources exhaustion attack
Smart card

Journal

Journal of Systems and Software cover
Journal of Systems and Software
IF:
4.1
Papers:
5.4K
Citations:
8.4K

Organization

N
National Cheng Kung University
Scholars:
2.6W
Papers: 2.3W
Citations: 1.7W
N
National Chung Hsing University
Scholars:
1.1W
Papers: 9.4K
Citations: 9