Security analysis and improvement of a mutual authentication scheme under trusted computing. (6th March 2015)

• Record Type: Journal Article
• Authors: Muhaya, Fahad T. Bin
• Is Part Of: International journal of ad hoc and ubiquitous computing. Volume 18:Number 1/2(2015)
• Page Start: 37
• Page End: 44
• Publication Date: 2015-03-06
• Subjects: user authentication -- passwords -- stolen smart cards -- cryptanalysis -- trusted computing -- trust -- cryptography -- security analysis -- mutual authentication -- unauthorised login -- wrong identity -- wrong password; Ubiquitous computing -- Periodicals; Embedded computer systems -- Periodicals; Electronic data processing -- Distributed processing -- Periodicals; Wireless communication systems -- Periodicals; Computer architecture -- Periodicals; 004.2
• Languages: English
• ISSNs: 1743-8225

Abstract

Recently, Yang et al. proposed a smart card and password–based mutual authentication scheme under trusted computing, and they claimed that their scheme can resist kinds of attacks. But they did not consider the stolen smart card attack which is an important attack in smart card–based authentication scheme. In this paper, we first analyse the stolen smart card attack to Yang et al.'s scheme, and then propose an enhanced mutual authentication scheme for trusted computing. Our scheme can resist the stolen smart card attack and other attacks, and can quickly detect the unauthorised login at the beginning when the user input the wrong identity or wrong password.