A password authentication method for remote users based on smart card and biometrics. (3rd April 2017)

• Record Type: Journal Article
• Authors: Om, Hari; Banerjee, Subhasish
• Is Part Of: Journal of discrete mathematical sciences & cryptography. Volume 20:Number 3(2017)
• Page Start: 595
• Page End: 610
• Publication Date: 2017-04-03
• Subjects: Password -- Smart card -- Biometrics -- Session key; Computer science -- Mathematics -- Periodicals; Cryptography -- Periodicals; Computer science -- Mathematics; Cryptography; Periodicals; 004.0151
• DOI: 10.1080/09720529.2013.876780
• Languages: English
• ISSNs: 0972-0529

Abstract

Abstract: Das has improved the biometric-based remote user authentication using smart card [13]. This scheme is based on biometric, password, and the random nonce generated by the user and the server. It is very efficient as far as the computational cost is concerned. This scheme however has some security weaknesses such as replay and offline password guessing attacks. In this paper, we present a review of the Das's scheme and discuss its weaknesses. In this paper, we develop a new scheme that overcomes all its weaknesses.