A smart card-based remote scheme for password authentication in multi-server Internet services
ISO 10202 standards have been established for the security architecture of financial transaction systems using integrated circuit cards (IC cards or smart cards). A smart card originates from an IC memory card used in the industry about 10 years ago. The main characteristics of a smart card are small size and low-power consumption. The smart card plays an important role in our proposed scheme. In this paper, we will present a smart card-based remote log-in authentication scheme for multi-server Internet environments, which can verify a single password for logging-in multiple authorized servers without using any password verification table at all. Using a smart card together with a user's preferred password, the log-in request message is transmitted securely and the verification can be performed easily. The objective of the new scheme emphasizes that any client can get service granted from multiple servers without repeating registration to every single server. Moreover, security analyses about the impersonation, replay, and off-line guessing attacks on the proposed scheme consolidate the feasibility of the scheme.
smart card password authentication internet networks security lagrange interpolating polynomial