2017•Proceedings of the 3rd International Conference on Communication and Information ProcessingRequires access
On the security of a smartcard-based authentication system for multiserver environments
Xianping Mao, Jing Zhao, Xuefeng Li, Huanyu Ma, Xiaochuan Wu, Qiushan Liu
Open publisher page 0 citations
Abstract
Password-based authentication and key agreement protocols for multiserver environments have drawn much attention due to their simplicity and efficiency. Very recently, Amin et al. introduced a password-based authentication and key agreement protocol using smart cards. We review this protocol and point out that it has some security drawbacks. This protocol cannot resist replay attack, server masquerading attack, user impersonation attack and session key computation attack. Besides, this protocol does not provide user anonymity.