The week's pick
Random Articles
Reseach Article
A Secure SCAM (Smart Card based Authentication Mechanism)
| International Journal of Computer Applications |
| Foundation of Computer Science (FCS), NY, USA |
| Volume 72 - Number 5 |
| Year of Publication: 2013 |
| Authors: Ravi Singh Pippal, Rajesh Ahirwar, Shivpratap Singh Kushwah, Pradeep Yadav |
10.5120/12491-8480
|
Ravi Singh Pippal, Rajesh Ahirwar, Shivpratap Singh Kushwah, Pradeep Yadav . A Secure SCAM (Smart Card based Authentication Mechanism). International Journal of Computer Applications. 72, 5 ( June 2013), 26-31. DOI=10.5120/12491-8480
Abstract
Recently, Tsai et al. proposed dynamic ID based smart card authentication scheme. This paper demonstrates that Tsai et al. 's scheme fails to provide early wrong password detection, secure password change and protection against insider attack. To overcome, we propose a secure SCAM (Smart Card based Authentication Mechanism) which keeps all previous merits and achieves security and functionality requirements. The performance of both the schemes has been analyzed in terms of various metrics. Comparing with Tsai et al. 's scheme, our scheme provides higher security with nearly same cost. For network where clock synchronization is tough, nonce based scheme is additionally offered.
References
- http://en. wikipedia. org/wiki/Smart_card.
- W. H. Yang, and S. P. Shieh, "Password authentication schemes with smart cards," Computers & Security 18 (8) (1999) 727-733.
- C. K. Chan, and L. M. Cheng, "Cryptanalysis of timestamp-based password authentication scheme," Computers & Security 21 (1) (2002) 74-76.
- M. S. Hwang, L. H. Li, A new remote user authentication scheme using smart cards, IEEE Transactions on Consumer Electronics 46 (1) (2000) 28-30.
- C. K. Chan, L. M. Cheng, Cryptanalysis of a remote user authentication scheme using smart cards, IEEE Transactions on Consumer Electronics 46 (4) (2000) 992-993.
- H. M. Sun, An efficient remote user authentication scheme using smart cards, IEEE Transactions on Consumer Electronics 46 (4) (2000) 958-961.
- C. L. Hsu, Security of two remote user authentication schemes using smart cards, IEEE Transactions on Consumer Electronics 49 (4) (2003) 1196-1198.
- H. Y. Chien, J. K. Jan, Y. M. Tseng, An efficient and practical solution to remote authentication: smart card, Computers & Security 21 (4) (2002) 372-375.
- M. S. Hwang, C. C. Lee, Y. L. Tang, A simple remote user authentication scheme, Mathematical and Computer Modelling 36 (1-2) (2002) 103-107.
- E. J. Yoon, E. K. Ryu, K. Y. Yoo, An improvement of Hwang-Lee-Tang's simple remote user authentication scheme, Computers & Security 24 (1) (2005) 50-56.
- W. C. Ku, S. M. Chen, Weaknesses and improvements of an efficient password based remote user authentication scheme using smart cards, IEEE Transactions on Consumer Electronics 50 (1) (2004) 204-207.
- E. J. Yoon, E. K. Ryu, K. Y. Yoo, Further improvement of an efficient password based remote user authentication scheme using smart cards, IEEE Transactions on Consumer Electronics 50 (2) (2004) 612-614.
- X. M. Wang, W. F. Zhang, J. S. Zhang, M. K. Khan, Cryptanalysis and improvement on two efficient remote user authentication scheme using smart cards, Computer Standards and Interfaces 29 (5) (2007) 507-512.
- E. J. Yoon, E. J. Lee, K. Y. Yoo, Cryptanalysis of Wang et al. 's remote user authentication scheme using smart cards, 5th International Conference on Information Technology: New Generations (ITNG-2008) (2008) 575 - 580.
- M. L. Das, A. Saxena, V. P. Gulati, A Dynamic ID-based remote user authentication scheme, IEEE Transactions on Consumer Electronics 50 (2) (2004) 629-631.
- I. E. Liao, C. C. Lee, M. S. Hwang, Security enhancement for a dynamic ID-based remote user authentication scheme, International Conference on Next Generation Web Services Practices (2005).
- Y. Y. Wang, J. Y. Liu, F. X. Xiao, J. Dan, A more efficient and secure dynamic ID-based remote user authentication scheme, Computer Communications 32 (4) (2009) 583-585.
- Z. Hao, N. Yu, A security enhanced remote password authentication scheme using smart card, 2nd International Symposium on Data, Privacy, and E-Commerce (ISDPE-2010) (2010) 56-60.
- H. Zhang, M. Li, Security vulnerabilities of an remote password authentication scheme with smart card, 2011 International Conference on Consumer Electronics, Communications and Networks (CECNet-2011) (2011) 698-701.
- J. L. Tsai, T. C. Wu, K. Y. Tsai, New dynamic ID authentication scheme using smart cards, International Journal of Communication Systems 23 (12) (2010) 1449--1462.
- S. Wu, Y. Zhu, Q. Pu, Robust smart-cards-based user authentication scheme with user anonymity, Security and Communication Networks (2011). doi: 10. 1002/sec. 315
Index Terms
Keywords