A biometrics and smart cards‐based authentication scheme for multi‐server environments. Issue 17 (26th March 2015)

• Record Type: Journal Article
• Authors: Lu, Yanrong; Li, Lixiang; Peng, Haipeng; Yang, Yixian
• Is Part Of: Security and communication networks. Volume 8:Issue 17(2015)
• Page Start: 3219
• Page End: 3228
• Publication Date: 2015-03-26
• Subjects: Computer networks -- Security measures -- Periodicals; Computer security -- Periodicals; Cryptography -- Periodicals; 005.805
• DOI: 10.1002/sec.1246
• Languages: English
• ISSNs: 1939-0114

Abstract

<abstract abstract-type="main" id="sec1246-abs-0001"> <title>Abstract</title> <p id="sec1246-para-0001">With the rapid development of computer networks, multi‐server architecture has attracted much attention in many network environments. Moreover, in order to achieve non‐repudiation which both passwords and cryptographic keys cannot provide, several password authentication schemes combining a user's biometrics for multi‐server environments have been proposed in the past. In 2014, Chuang <italic>et al.</italic> presented a biometrics‐based multi‐server authenticated key agreement scheme and declared that their scheme was efficient and secure. Later, Mishra <italic>et al.</italic> commented that the scheme by Chuang <italic>et al.</italic> was susceptible to stolen smart card, impersonation and denial of service attacks. To conquer these weaknesses, Mishra <italic>et al.</italic> presented an efficient biometrics‐based multi‐server authenticated key agreement scheme using hash functions. However, we prove that the scheme by Mishra <italic>et al.</italic> is insecure against forgery, server masquerading and lacks perfect forward secrecy. The focus of this paper is to present a robust biometrics and public‐key techniques‐based authentication scheme, which is a significant enhancement to the scheme recently proposed by Mishra <italic>et al.</italic> The highlight of our scheme is that it not only conquers the flaws but also is efficient compared with other related authenticated key agreement schemes. Copyright © 2015 John Wiley & Sons, Ltd.</p> </abstract>