A new password authentication and user anonymity scheme based on elliptic curve cryptography and smart card. Issue 1 (1st March 2013)

• Record Type: Journal Article
• Authors: Li, Chun‐Ta
• Is Part Of: IET information security. Volume 7:Issue 1(2013)
• Page Start: 3
• Page End: 10
• Publication Date: 2013-03-01
• Subjects: data privacy -- public key cryptography; password authentication -- user anonymity scheme -- elliptic curve cryptography -- smart card -- computer networks -- secure remote access control -- offline password guessing -- stolen verifier -- client privacy -- security threats; Computer security -- Periodicals; Cryptography -- Periodicals; Computer networks -- Security measures -- Periodicals; Database security -- Periodicals; 005.8
• DOI: 10.1049/iet-ifs.2012.0058
• Languages: English
• ISSNs: 1751-8709

Abstract

Abstract : Password authentication has been widely used in computer networks to provide secure remote access control. In this study, the authors show that the improved password authentication and update scheme based on elliptic curve cryptography proposed by Islam and Biswas is vulnerable to offline password guessing, stolen‐verifier and insider attacks. We propose an advanced smart card‐based password authentication and update scheme and extend the scheme to provide the privacy of the client. By comparing the criteria with other related schemes, our scheme not only solves several hard security threats but also satisfies more functionality features.