A secure three factor-based fully anonymous user authentication protocol for multi-server environment. (28th May 2020)

• Record Type: Journal Article
• Authors: Mahor, Vinod Kumar; Padmavathi, R.; Chatterjee, Santanu; Dewangan, Sanshray Kumar; Kumar, Manish
• Is Part Of: International journal of ad hoc and ubiquitous computing. Volume 34:Number 1(2020)
• Page Start: 45
• Page End: 60
• Publication Date: 2020-05-28
• Subjects: authentication -- multi-server authentication -- security -- smart card -- Lagrange interpolation -- single sign-on -- AVISPA -- BAN logic; Ubiquitous computing -- Periodicals; Embedded computer systems -- Periodicals; Electronic data processing -- Distributed processing -- Periodicals; Wireless communication systems -- Periodicals; Computer architecture -- Periodicals; 004.2
• Languages: English
• ISSNs: 1743-8225

Abstract

A single sign-on authentication scheme is required protocol in multi-server environment. Recently, an authentication protocol based on Lagrange interpolation polynomial to satisfy multi-server environment with low computational and communication cost is proposed. In this paper, we have analysed the above scheme and show that their scheme is vulnerable to various attacks like insider attack, server impersonation attack, user impersonation attack and stolen smart card attack. We also show that their scheme fails to provide server anonymity, user revocation in case smart card is lost/stolen or users authentication parameters are revealed. We have also proposed enhanced multi-server authentication protocol using biometric-based smart card and Lagrange interpolation which is more secure. The proposed protocol is analysed using BAN logic to show that the proposed protocol provides secure authentication. In addition, we have simulated our scheme using widely accepted and used AVISPA tool to prove that our scheme is secure against passive and active attacks. The proposed protocol provides high security and anonymity along with low communication and computational cost and various security functions.