Analysis and improvement of a multi‐factor biometric authentication scheme1. Issue 4 (7th May 2014)

• Record Type: Journal Article
• Authors: Cao, Liling; Ge, Wancheng
• Is Part Of: Security and communication networks. Volume 8:Issue 4(2015)
• Page Start: 617
• Page End: 625
• Publication Date: 2014-05-07
• Subjects: Computer networks -- Security measures -- Periodicals; Computer security -- Periodicals; Cryptography -- Periodicals; 005.805
• DOI: 10.1002/sec.1010
• Languages: English
• ISSNs: 1939-0114

Abstract

<abstract abstract-type="main"> <title>Abstract</title> <p>In order to enhance the security in wireless communication, authentication schemes come to be more crucial and widely deployed recently, especially those which are referred to as multi‐factor biometric authentication that base on password, biometrics, and smart card protections. A new scheme in this way was proposed in 2010 by Li and Hwang. Then Das extended the work of Li <italic>et al</italic>. and made an improvement of their weak scheme in 2011. However, in 2012, Younghwa An demonstrated that Das's protocol failed to achieve mutual authentication for the server and the user. In this paper, it is described that Younghwa An's scheme cannot withstand the following two attacks. (i) It is still vulnerable to replay attack, then an adversary can masquerade as the legal server. (ii) It cannot provide user anonymity and resistance to user masquerading attack, because an adversary can execute the re‐registration process by intercepting the <italic>ID_i</italic> in the login phase. Therefore, an improvement to Younghwa An's scheme is presented in this paper. Then, security formal analysis of the modified scheme using the Burrows–Abadi–Needham logic is given, which demonstrates that the modified scheme with slight high computation costs can protect against the several possible attacks. Copyright © 2014 John Wiley &amp; Sons, Ltd.</p> </abstract>