A Remote User Authentication Scheme with Anonymity for Mobile Devices

Abstract

With the rapid growth of information technologies, mobile devices have been utilized in a variety of services such as e-commerce. When a remote server provides such e-commerce services to a user, it must verify the legitimacy of the user over an insecure communication channel. Therefore, remote user authentication has been widely deployed to verify the legitimacy of remote user login requests using mobile devices like smart cards. In this paper we propose a smart card-based authentication scheme that provides both user anonymity and mutual authentication between a remote server and a user. The proposed authentication scheme is a simple and efficient system applicable to the limited resource and low computing performance of the smart card.

The proposed scheme provides not only resilience to potential attacks in the smart card-based authentication scheme, but also secure authentication functions. A smart card performs a simple one-way hash function, the operations of exclusive-or and concatenation in the authentication phase of the proposed scheme. The proposed scheme also provides user anonymity using a dynamic identity and key agreement, and secure password change.

Keywords

Authentication Scheme User Anonymity Mobile Device,Smart Card

1. Introduction

The main aim of the remote authentication scheme using smart cards is to identify and verify the smart card holder with valid access rights and access to the remote server. It has been widely accepted that the smart card-based remote user authentication is one of the most reliable and secure forms of electronic identification for authentication. Therefore, a variety of password-based authentication schemes have been proposed for remote authentication using smart cards. In a traditional remote authentication scheme, a user has to register her own identity and password to the server in advance, and she has to submit the identity and password information to the server during a login process. On receiving a login request, the remote server authorizes the user to access facilities provided by the remote server, if the pair of identity and password is equivalent to the one stored in the server's password table. Otherwise, the access request is rejected.

The desirable security requirements of an authentication scheme using smart cards are as follows. The scheme should resist malicious insider, replay, guess, stolen-verifier and impersonation attacks. Also, the scheme should provide both forward secrecy and known-key security, guaranteeing user anonymity.

The desirable functionality requirements of an authentication scheme are as follows. A user chooses her identity and password freely and changes her password securely, and a remote server does not maintain a verification table to authenticate the user in the server. Due to the power constraints of smart cards, the computational cost of the scheme has to be low and the scheme should provide mutual authentication, user anonymity and session key agreement between a user and a server without requesting time-synchronization between user and server.

In this paper we propose an enhanced authentication scheme using smart cards. Our scheme satisfies the security requirements and functions.

The remainder of this paper is organized as follows: section 2 reviews related works; section 3 details the proposed authentication scheme; section 4 analyses its security; section 5 analyses its performance and functionality. Finally, Section 6 draws brief conclusions.

2. Related Works

A number of remote authentication schemes have been suggested by researchers from time to time. When a server authenticates a user, the server verifies the user with the entered user's identity and password, and the corresponding values in the verification table of the server. In 1981, Lamport [1] presented a remote authentication scheme using password tables, but security holes and maintenance responsibilities for the verification table exist because it must always maintain the verification table. Also, a stolen verification table may cause many security threats, therefore, in 1990, Hwang [2] presented a remote authentication scheme without password tables. Many other studies have also proposed a scheme that does not maintain the verification table to authenticate the remote user.

Numerous studies [7 –16] have proposed a scheme using the one-way hash function and exclusive-or operation due to the constrained resources and computing power of a smart card.

After the user's authentication is completed, the communication channel for a message may be insecure. If the message is not encrypted, then the message is revealed to an adversary. Therefore, previous studies [11 –14, 16] have proposed session key generation schemes using key agreement between user and server, and researchers have also pointed to the weaknesses of other schemes [3, 4].

Because the user's anonymity is very important in many e-commerce applications, several schemes [5, 6, 9, 12-13, 15, 16] have been proposed to achieve user anonymity in the authentication phase.

Table 1.

The notations used in the proposed scheme.

Notations	Description
U _i	User i
PW _i	The password of U_i
S	The remote server
K _s	The secret key of server
K _u	The common key of user for S
TID _i	The transformed identity of U_i
CTID _i	The changed identity of U_i
DID _i	The dynamic identity of U_i
DID _s	The dynamic identity of S
SK _i	The generated session key of U_i
SK _u	The generated session key of S
h(·)	A one-way hash function
h^k(A)	Perform hash function of k times
⊕	Bitwise exclusive-or operation
‖	The string concatenation
A ⇒ B: M	A sends M to B through a secure channel
A → B: M	A sends M to B through a common channel
ESK_i {M}	Encrypted message by the session key, SK_i

Bindu et al. [6] showed the possibility of insider attack, Main-in-Middle attack, in the scheme of Chien et al. [5] and presented an improved scheme preserving user anonymity. However, the scheme does not provide a password change phase and uses time-stamp to resist replay attack. Lin et al. [8] presented a new strong-password authentication protocol that can withstand a stolen-verifier attack and other possible attacks, but the scheme cannot change passwords and does not provide mutual authentication, session key agreement and user anonymity. Juang [10] presents a simple authentication scheme, but the scheme cannot change passwords and does not provide mutual authentication. Recently, Khan et al. [13] and Tseng et al. [16] presented authentication schemes providing user anonymity and mutual authentication. With the scheme proposed by Tseng et al. [16] the user can freely choose the password and securely change the password, however, both schemes require time synchronization to protect from replay attack.

Here, we point to security issues related to Das et al.'s scheme [15] and Liao et al.'s scheme [14].

1) Both schemes submit a user password directly to the server in the registration phase. Thus, their schemes are vulnerable to insider attacks. If a malicious insider obtains a user password in the registration phase, she may be able to access the other server over a network, because generally, a user is apt to use the same password for convenience, even for most other servers.

2) Neither scheme provides user anonymity. Although Das et al.'s scheme uses a dynamic identity in the verification phase as the user login in the remote server, she always sends the user specific value, Ni. Therefore, the user's location is revealed to the adversary. In Liao et al.'s scheme, a user sends her identity directly via a common channel. Thus, an adversary can know the user's location.

3) Neither scheme provides secure password change as their password change phase is insecure. When a user inputs the wrong password by mistake, the smart card's password is changed to the wrong password.

4) Das et al.'s scheme does not provide mutual authentication. The server can authenticate a user, but a user cannot authenticate the remote server.

5) Das et al.'s scheme does not have a session key agreement. After mutual authentication between user and server, important messages have to be protected from adversaries, thus, session key agreement is needed. However, Das et al.'s scheme does not provide session key agreement.

6) Das et al.'s scheme requires time synchronization and uses time-stamp for replay attack. Thus, it requires time synchronization between user and server.

3. Proposed Authentication Scheme

In this section, we propose an enhanced security scheme for mutual authentication and user anonymity using a smart card. The proposed scheme overcomes the weaknesses of Das et al.'s scheme and Liao et al.'s scheme, while it enhances security compared to the existing schemes. The proposed scheme is composed of four phases: registration, login and authentication, key agreement and secure password update. Table 1 is the notation used in the proposed scheme.

3.1 Registration Phase

When user U_i wants to access a remote server for a service legitimately, U_i should perform the following registration steps before the access. The procedure is as follows:

Step 1. U_i ⇒ S: ID_i, h(PW_i)

U_i chooses her identity, ID_i, and password, PW_i, for registration and submits ID_i and, h(PW_i) hashed value of PW_i, to the remote server via a secure communication channel. Both ID_i and PW_i are selected by the user freely.

Step 2. After receiving ID_i and h(PW_i) from U_i, the remote server, S performs the following steps:

S generates transform identity TID_i = h(ID_i ‖ h(PW_i)), and checks the existence of the transformed identity in the database. If the identity already exists in the database, S requests U_i to re-initiate the registration procedure with a different ID_i or PW_i. Otherwise, S stores TID_i in the database. This process ensures the uniqueness of the user's transformed identity.

Compute A_i = (h(K_u)⊕K_s), where K_s is a secret key of S and K_u is a common key of user for S. K_u is used to generate a dynamic identity, DID_i in the login and authentication phase.

Compute B_i = (g^A_i mod p)⊕h(PW_i), where g is a primitive element in Galoisfield GF(p) and p is a large prime positive integer.

Store the values DID_i, B_i, h(·) and K_u in a smart card and issue the smart card to U_i.

Figure 1.

Registration phase.

3.2 Login and Authentication Phase

After U_i registers to S, when U_i wants to log into the server, U_i will send a, login message to S. The login message contains a dynamic identity, DID_i to guarantee user anonymity. After successful verification of the login message, U_i can authenticate S and S can authenticate U_i. That is, our scheme provides mutual authentication. The login and the authentication phases work as follows:

User, U_i, connects her smart card to a reader She inputs her identity, ID_i and password, PW_i. The smart card performs the following processes:

Generate nonces, n_i and k_i.

Compute CTID_i = TID_i⊕n_i.

Compute C_i = h(B_i⊕h(PW_i))⊕n_i.

Compute M_i = K_u mod k_i.

Compute DID_i = h^M_i(TID_i⊕B_i⊕h(PW_i)).

U_i sends DID_i, CTID_i, C_i and k_i with the login request message to S.

Authentication phase:

The proposed scheme provides mutual authentication. U_i and S perform the following processes to achieve this, after U_i sends the request message to S.

Step 1. S → U_i: DID_s, CTID_s

S does the following processes to authenticate U_i:

Compute A_i = h(K)⊕K_s.

Compute g^A_i mod p and execute the hash operation for this value, h(g^A_i mod p).

Execute exclusive-or operation the received C_i and the value, h(g^A_i mod p) for the value n_i′ = C_i⊕h(g^A_i mod p).

To compute TID_i′, S executes exclusive-or operation with the received value, CTID_i and the generated value n_i′, TID_i′ = CTID_i⊕n_i′. Then, S checks that TID_i′ is the registered transform identity in the database. If the value is not valid, terminate the connection, otherwise, continue the process.

Compute M_i = K_u mod k_i.

S computes DID_i′ = h^M_i(TID_i⊕h(g^A_i mod p)) and compares the received value, DID_i and the generated value, DID_i′ by the server. If DID_i′ = DID_i, S authenticates the legitimate user, U_i. Otherwise, S fails authentication of U_i and S terminates the connection with U_i.

Generate nonce n_s.

Compute DID_s = h(DID_i⊕n_i⊕n_s) and CTID_s = CTID_i⊕n_s.

S sends DID_s and CTID_s to U_i.

Step 2. U_i → S : DID_is

User, U_i, authenticates S and mutual authentication is completed according to the following processes:

Compute n_s′= CTID_s⊕CTID_i.

U_i computes DID_s′ = h(DID_s⊕n_i⊕n_s′) and compares the received value, DID_s and the generated value, DID_s′. If DID_s′ = DID_s, the user, U_i authenticates the remote server, S. Otherwise, U_i fails server authentication and terminates connection with S.

U_i computes the value, DID_is = DID_s⊕n_i⊕(n_s+1) and sends DID_is to S.

S computes (n_s+1)′ = DID_is⊕n_i⊕DID_s, compares the value, (n_s+1) and the generated value, (n_s+1)′. If (n_s + 1′ = (n_s+1) mutual authentication is complete. Otherwise, S terminates connection with U_i.

Figure 2.

3.3 Key Agreement Phase

After U_i and S bring mutual authentication to completion, they generate the session keys for secure transmission of messages to each other. Then the session key is generated using information (values) in the authentication phase.

Step 1. User, U_i, generates session key, SK_i.

U_i computes SK_i = h(B_i⊕h(PW_i)⊕n_i⊕n_s), SK_i is the session key generated by the user. Then, values, B_i, h(PW_i), n_i and n_s are not revealed in transmission via a common channel.

Step 2. Remote server, S, generates session key, SK_s.

S computes SK_s = h((g^A_i mod p)⊕n_i⊕n_s). SK_s is the session key generated by the remote server In addition, values g^A_i mod p, n_i and n_s are not revealed in transmission via a common channel.

SK_i and SK_s are the same values, since (g^A_i mod p) = B_i⊕h(PW_i), Thus, the session key is created safely between the user, U_i and the remote server, S.

3.4 Secure Password Update Phase

When user U_i wants to change her password for personal reasons or for the sake of security, U_i can change her password freely. The proposed scheme provides secure password change The procedure is as follows:

U_i →S : DID_i, CTID_i, C_i, k_i, M_{request-change-PWi} U_i inserts the smart card into a reader and sends DID_i, CTID_i, C_i, and k_i with the request message, M_{request-change-PWi} to S.

Mutual authentication is performed between U_i and S, as in the login and authentication phase, mentioned earlier.

U_i generates new password, PW_i^* and computes TID_i^* = h(ID_i⊕h(PW_i^*))

U_i → S : E_SKi {TID_i^*} U_i encrypts new transform identity TID_i^* using session key SK_i and sends the encrypted message to the server.

S decrypts the received message using SK_s and then replaces the value, TID_i with the received value TID_i^*. S sends the response message to U_i.

After receiving the response message from S, U_i computes B_i^* = B_i⊕h(PW_i)⊕h(PW_i^*) and replaces stored values in the smart card TID_i and B_i with TID_i^* and B_i with each other.

Figure 3.

Secure password update phase.

4. Security Analysis

In this section, we analyse the security of the proposed scheme. The proposed scheme can resist insider, replay, guessing, stolen-verifier and impersonation attacks, and provide user anonymity, forward secrecy, known-key security and mutual authentication for enhanced security.

4.1 The proposed scheme can resist an insider attack

In the registration phase, U_i submits her identity, ID_i and the hashed value of password, h(PW_i) instead of PW_i for remote-access services. Due to the employment of the one-way hash function h(·), it is impossible for an insider to derive the user's password PW_i from the hashed value, h(PW_i). That is, even the server does not know PW_i. Therefore, the proposed scheme can prevent insider attack.

4.2 The proposed scheme can resist a replay attack

Assume that an adversary eavesdrops on the login message sent by U_i when logging into the server in a later session. However, the replay of U_i's previous login message will be detected by the server. In Step 2 of login and authentication, the adversary computes the value (DID_is = DID_s⊕n_i⊕(n_s+1)) for mutual authentication and the value is sent to the server. The adversary generates n_a and computes DID_as = DID_s⊕n_a⊕(n_s+1), because she does not know the value, n_i and sends DID_as to the server. The server will derive the value (n_s+1)′ from the value DID_as sent by the adversary. However, it is (n_s+1)′ ≠ (n_s+1), since DID_as⊕DID_s ≠ DID_is⊕DID_s. Therefore, the adversary cannot launch a replay attack.

4.3 The proposed scheme can resist a guessing attack

Suppose an adversary finds out the identity and the password of a legitimate user by guessing. She can compute valid values, TID_i = h(ID_i ‖PW_i) and CTID_i = TID_i⊕n_i*. However, she does not know B_i and K_u. Thus, she cannot compute valid values, C_i and DID_i. Hence, the adversary cannot generate a valid login message.

4.4 The proposed scheme can resist a stolen-verifier attack

The server stores only the transformed user's identity in the database and does not store the user's other secret information corresponding to her transformed identity in the proposed scheme. Thus, only the malicious insider or intruder gets the table of the user's transformed identity. Hence, the adversary cannot launch a stolen-verifier attack.

4.5 The proposed scheme can resist impersonation attack

If an adversary wants to impersonate U_i, she has to create a valid login message: DID_i, CTID_i, C_i and k_i. First, she has to choose a nonce n_i^* and compute CTID_i^* = TID_i⊕n_i^*, C_i* = h(B_i⊕h(PW_i))⊕n_i^*, M_i* = y mod k_i^*, DID_i* = h^_i*(TID_i⊕B_i⊕h(PW_i)). Next, she summits the login message : DID_i^*, CTID_i^*, C_i^*, k_i^* to the server. The adversary cannot forge a valid login message as she has no idea about B_i, PW_i, and y. Hence, she cannot launch an impersonation attack.

4.6 The proposed scheme can provide user anonymity

Consider an adversary eavesdrops on the login message, DID_i, CTID_i, C_i and k_i. Here, DID_i is the dynamic identity and as CTID_i and C_i are computed by nonce, n_i, they are different in the login phase. In addition, the value k_i is not the same in each login phase. Thus, the login messages submitted to the server are different in the login sessions. Hence, it is difficult for the adversary to discover a user's identity.

4.7 The proposed scheme can provide forward secrecy

Suppose, the long-term secret key material (e.g. server's secret key K_s and user's password PW_i) is revealed to an adversary. Although the adversary knows the secret key material, she cannot compromise the secrecy of the agreed keys in earlier runs because the session key is computed using the long-term secret key material and nonce n_i(j-th) and n_s(j-th). Thus, if the adversary does not know the values n_i(j-th) and n_s(j-th), she cannot derive the j-th session key. Hence, the proposed scheme provides forward secrecy.

4.8 The proposed scheme can provide known-key security

Suppose that in the j-th session, the session key SK_i(j-th) is compromised by an adversary. Then the adversary cannot further compromise other secret keys or session keys because the session key SK_i(k-th)(j≠k) uses nonce n_i(k-th) and n_s(k-th). Hence, the proposed scheme can achieve known-key security.

4.9 The proposed scheme can provide mutual authentication

In the login and authentication phase, U_i and the server securely exchange a nonce of user, n_i and a nonce of server, n_s respectively. Thus, U_i generates session key SK_i = h(B_i⊕h(PW_i)⊕n_i⊕n_s) and the server generates session key SK_s = h((g^A_i mod p)⊕n_i⊕n_s). (g^A_i mod p) = B_i⊕h(PW_i) and the values n_i and n_s are not revealed in a common channel. Thus, the values SK_i and SK_s are the same and are secure.

5. Performance and Functionality Analysis

The proposed scheme achieves mutual authentication using only a one-way hash function and bitwise exclusive-or operation in a smart card. We prefer to adopt modular exponentiation, a relatively expensive operation, in the registration phase. However, it is performed only at the remote server. Thus, the proposed authentication in this paper is pertinent to using a practical smart card. In addition, it provides session key agreement and a secure password change. Table 2 compares performance.

Table 2.

Performance comparisons of authentication schemes.

	Registration	Login and Authentication	Key Agreement	Password Update
Our scheme	1C, 3H, 2⊕, 1M	8H+, 16⊕, 1M, 1A, 3O	Yes	Yes
Das et al.[15]	2H, 1⊕	8H, 14⊕, 1A, 2O	No	Yes
Liao et al.[14]	1C, 1H, 2⊕, 1M	4C, 3H, 13⊕, 1M, 2A, 3O	Yes	Yes
Lin et al.[8]	3C, 3H 1⊕	3C, 7H, 6⊕, 1O	No	No
Bindu et al.[6]	4H, 3⊕	2H, 8⊕, 1M, 2E, 2D, 3A, 3O	Yes	No
Juang[10]	1H, 1⊕	1C, 2H, 1⊕, 3E, 3D	Yes	No
Khan et al.[13]	2C, 2H, 1⊕	8C, 6H, 5⊕, 2A, 3O	Yes	Yes
Tseng et al.[16]	5H, 4⊕, 1A	10H, 19⊕, 2M, 2E, 2D, 3A	Yes	Yes

C : Concatenation

H : One-way hash function

⊕: Bitwise exclusive-or

M : Modular exponentiation

E : Encryption

D : Decryption

A : Arithmetic operation, such as add, subtraction and absolute value.

O : Comparison operation

+ : More

We summarize the functionalities of our proposed scheme in this section. The crucial criteria in the user authentication scheme are listed below:

F1. Freely chosen password: in the registration phase, a user can choose her identity and password freely for remote-access services.

F2. Secure password change: the user can change her password when she wants to change her password for the sake of security. In our scheme, after the user and server are authenticated, the password change is securely accomplished. Then, the generated value TID_i^* is encrypted by the session key and transmitted to the server.

F3. No verification table: if the server maintains the verification table, when the verification table is revealed to an adversary, the overall authentication mechanism breaks down. Our scheme does not maintain the verification table with the user identity and corresponding password for user authentication. Only the server has a transformed identity table for user authentication.

F4. Low computation: computation overhead must be low in smart cards due to their constrained resources. Our scheme accomplishes mutual authentication merely by hash operation and bitwise exclusive-or operation.

F5. Mutual authentication: a malicious person can disguise herself as the server or can disguise herself as the user. However, our scheme can provide mutual authentication between user and server.

F6. Session key agreement: the user and the server communicate via a common channel after mutual authentication is accomplished. The session key agreement is provided for secure transmission of the important messages. The security of the session key is very important. Our scheme provides session key agreement and at the end of the key exchange, the session key is known to nobody but the user and the server.

F7. Avoiding time synchronization: our scheme adopts a nonce instead of using a time-stamp to prevent replay attacks and a synchronization problem. Thus, our scheme does not need time synchronization between user and server.

F8. User anonymity: our scheme uses dynamic identity for user anonymity. Whenever a user connects to the server for remote-access services, she sends a different identity. Thus, our scheme provides user anonymity.

Table 3 compares functionality. The proposed scheme satisfies the required functionalities.

Table 3.

Functionality comparisons of authentication schemes.

		F2	F3	F4	F5	F6	F7	F8
Our scheme	Yes	Yes	Yes	Yes	Yes	Yes	Yes	Yes
Das et al[15]	Yes	No	Yes	Yes	Yes	No	No	No
Liao et al[14]	Yes	No	Yes	Yes	Yes	Yes	Yes	No
Lin et al[8]	No	No	Yes	Yes	No	No	No	No
Bindu et al[6]	Yes	No	Yes	Yes	Yes	Yes	No	Yes
Juang[10]	Yes	No	Yes	Yes	Yes	Yes	Yes	No
Khan et al[13]	Yes	No	Yes	Yes	Yes	No	No	Yes
Tseng et al[16]	Yes	Yes	Yes	Yes	Yes	Yes	No	Yes

F1. Freely chosen password

F2. Secure password change

F3. No verification table

F4. Low calculation for authentication

F5. Mutual authentication

F6. Session key agreement

F7. Avoiding time synchronization

F8. User anonymity

6. Conclusion

In this paper we proposed a security enhancement scheme of mutual authentication and user anonymity using smart cards. The proposed scheme does not send the user specific value in the login and authentication phase. Thus, it achieves user anonymity. The proposed scheme can resist insider, replay, guessing, stolen-verifier and impersonation attacks, and provides forward secrecy, known-key security and mutual authentication to enhance security. A user can freely choose her password and can change the password safely. In addition, our scheme provides the following functionalities: no verification table, avoiding time synchronization, eviction mechanism, session key agreement and low computation.

Footnotes

7. Acknowledgments

This research was supported by the MKE (The Mnistry of Knowledge Economy), Korea, under the Convergence-ITRC (Convergence Information Technology Research Center) support programme (NIPA-2011 C6150-1101-0004) supervised by the NIPA (National IT Industry Promotion Agency).

References

Lamport

, “Password authentication with insecure communication”, Communications of the ACM, vol. 24, No. 11, pp. 770–772, Nov, 1981

Hwang

Chen

Laih

C.S.

, “Non-interactive password authentications without password tables”, Proceedings of IEEE Region 10 Conference on Computer and Communication Systems, pp. 429–431, Sept, 1990.

W.C.

Chang

ST.

Chen

S.M.

Chiang

M.H.

, “Weaknesses of a Simple Remote User Authentication Scheme Using Smart Cards”, In IEICE Trans. Fundamentals, Vol. E79-A, No. 9, pp.1338–1353, Sep, 1996.

Lee

S.W.

Kim

H.S.

Yoo

K.Y.

, “Comment on ‘A Remote User Authentication Scheme using Smart Cards with Forward Secrecy’”, In IEEE Transaction on Consumer Electronics, Vol. 50, No. 2, pp. 576–577, May, 2004.

Chien

H. Y.

Chen

C. H.

, “A Remote Authentication Scheme Preserving User Anonymity”, Proceedings of the 19th International Conference on Advanced Information Networking and Applications (AINA05) 2005.

Bindu

C.S.

Reddy

P.C.S.

Satyanarayana

, “Improved Remote User Authentication Scheme Preserving User Anonymity”, IJCSNS International Journal of Computer Science and Network Security, Vol.8, No.3, pp. 62–65, Mar, 2008.

Chang

C.H.

Lee

J.S.

, “A Smart-Card-Based Remote Authentication Scheme”, Proceedings of the Second International Conference on Embedded Software and System (ICESS'05) 2005.

Lin

C.W.

Tsai

C.S.

Hwang

M.S.

, “A New Strong Password Authentication Scheme Using One-Way Hash Functions”, Journal of Computer and Systems Sciences International, Vol. 45, No. 4, pp. 623–626, 2006

Liao

I.E.

Lee

C.C.

Hwang

M.S.

, “Security Enhancement for a Dynamic ID-based Remote User Authentication Scheme”, Proceedings of the International Conference on Next Generation Web Service Practices (NWeSP'05) 2005.

10.

Juang

W.S.

, “Efficient password authentication key agreement using smart cards”, Computer & Security 23, pp. 167–173, 2004.

11.

Juang

W. S.

, “Efficient Multi-server Password Authentication Key Agreement Using Smart Cards”, Computer & Security 23, pp. 167–173, 2004.

12.

Liao

Y.P.

Wang

S.S.

“A secure dynamic ID based remote user authentication scheme for multi-server environment”, Computer Standards & Interface 31, pp. 24–29, 2009.

13.

Khan

M.K.

Kim

S.K.

Alghathbar

, “Cryptanalysis and security enhancement of a ‘more efficient & secure dynamic ID-based remote user authentication schemes’”, Computer Communications, pp. 1–5, 2010.

14.

Liao

C.H.

Chen

H.C.

Wang

C.T.

“An Exquisite Mutual Authentication Schemes with Key Agreement Using Smart Card”, Informatica 33, pp. 125–132, 2009.

15.

Das

M.L.

Saxena

Gulati

V.P.

, “A dynamic ID-based remote user authentication scheme”, IEEE Transactions Consumer Electronics, Vol. 50, No. 2, pp. 28–30, 2004

16.

Tseng

H.R.

Jan

R.H.

Yang

, “A bilateral remote user authentication scheme that preserves user anonymity”, Journal of Security and Communication Networks, Vol. 1, No. 4, pp. 301–308, Jul/Aug, 2008