• DocumentCode
    3362488
  • Title

    Security enhancement for two remote user authentication schemes

  • Author

    Peng Shuanghe ; Zhen, Han ; JiQiang, Liu

  • Author_Institution
    Res. Center of Inf. Security Archit., Beijing Jiaotong Univ., China
  • Volume
    3
  • fYear
    2004
  • fDate
    31 Aug.-4 Sept. 2004
  • Firstpage
    2628
  • Abstract
    In 2002, Lee, Li, and Hwang proposed a hash-based password authentication scheme that is efficient and can be easily implemented. Recently Ku, Chen, and Lee demonstrated that Lee-Li-Hwang´s hash-based password authentication scheme is vulnerable to the off line guessing attack, the denial of service attack, and the stolen verifier attack. In 2003, Chih-Wei Lin et al. proposed a security enhancement for optimal strong password authentication protocol. This paper, however, will demonstrate that Chih-Wei Lin´s scheme is vulnerable to the denial of service attack. In this article, we shall propose improved schemes to these two remote user authentication schemes, which make them able to withstand denial of service attack and have about the same computational cost as originals.
  • Keywords
    message authentication; telecommunication security; telecommunication services; denial of service attack; hash-based password authentication scheme; off line guessing attack; password authentication protocol; security enhancement; stolen verifier attack; user authentication scheme; Authentication; Computational efficiency; Computer crime; Databases; Information security; Protocols; Random number generation; Resists;
  • fLanguage
    English
  • Publisher
    ieee
  • Conference_Titel
    Signal Processing, 2004. Proceedings. ICSP '04. 2004 7th International Conference on
  • Print_ISBN
    0-7803-8406-7
  • Type

    conf

  • DOI
    10.1109/ICOSP.2004.1442321
  • Filename
    1442321