a smart card based user authentication scheme for multi-server environment
There are many severs that provide various services in the Internet. A user authentication scheme for these servers is a precondition. User authentication schemes are many studied by researchers for a multi-server environment. But user authentication doesn't secure safety in a multi-server environment that exist many servers by currently used authentication. Because we can't prove that all servers are safe, there are a variety of attacks like a Server spoofing, Password or Verification table attack, User Impersonation attack and Reply attack. To solve these problems, existing paper proposed various schemes using a public key algorithm, one-way hash function and mixed them together. And recently, more efficient authentication schemes are proposed by Tsai, Liao-Wang and Wang-Juang-Lei. However, Tsai's and Liao-Wang's scheme have an impersonation attack and a server spoofing. Wang-Juang-Lei's scheme has a password synchronization problem. And their's also can't ensure a forward secrecy. In this paper, we designed to be registered the unique value of its own into the Smart Card at the Registration phase for secure communication between the Smart card and user. This value SCV is encoded by operating the hash function. And because of this value, even if communication data is exposed between the Smart Card and User, however, can ensure safety. And also to solve a password synchronization problem, our scheme is designed safely, even if isn't continuously changed the password. And our proposed method use only one-way hash function. Thus, we can ensure more efficient and high safety than in the existing method.
smart card user authentication multi-server hash function