50 likes | 144 Views
Improved remote authentication scheme with smart card. Source: Computer Standards and Interfaces Volume: 27, Issue: 2, January, 2005, pp. 177-180 Authors: Lee, Narn-Yih; Chiu, Yu-Chung. Speaker: Mei-Yu Lin Date: 2005/05/19. Outline. Wu-Chieu ’ s scheme
E N D
Improved remote authentication scheme with smart card Source: Computer Standards and Interfaces Volume: 27, Issue: 2, January, 2005, pp. 177-180 Authors: Lee, Narn-Yih; Chiu, Yu-Chung Speaker: Mei-Yu Lin Date: 2005/05/19
Outline • Wu-Chieu’s scheme • Attack on the Wu-Chieu scheme • Lee et al.’s scheme
Wu-Chieu’sscheme Ui Server 1.Registration phase: Compute Ai=h(IDi, x) Store {IDi, Ai, Bi, h(), p, g} into Smart Card Select IDi, PWi 2.Login phase: 3.Verify phase: Compute C1=h(T1⊕Bi) m=(IDi, Bi*, C1 , T1) Check IDi Verify T’-T1 <= ΔT Compute C1*= h(T1⊕ Bi*) Verify C1*?=C1
Wu-Chieu’sweakness Ui Server 1.Registration phase: Compute Ai=h(IDi, x) Store {IDi, Ai, Bi, h(), p, g} into Smart Card Select IDi, PWi 2.Login phase: 3.Verify phase: Compute C1=h(T1⊕Bi) m=(IDi, Bi*, C1 , T1) m=(IDi, Bi*, C1* , T1*) Check IDi Verify T’-T1 <= ΔT Compute C1*= h(T1⊕ Bi*) Verify C1*?=C1 forge attack
Lee et al.’s scheme Ui Server 1.Registration phase: Compute Ai=h(IDi, x) Store {IDi, Ai, Bi, h(), p, g} into Smart Card Select IDi, PWi 2.Login phase: 3.Verify phase: Compute Zi=Bi*Ai mod p C1=h(T1⊕Bi*) m=(IDi, Bi*, C1 , T1) Check IDi Verify T’-T1 <= ΔT Ai=h(IDi, x) Compute C1*= h(T1⊕ (Zi/Ai mod p)) Verify C1*?=C1 m=(IDi, Zi, C1 , T1)