http://msn.iecs.fcu.edu.tw/report/data/ori_paper/2006-6-22/a password authentication scheme over insecure networks .pdf

A password authentication scheme over insecure networks

Cryptanalysis and security enhancement of a 'more efficient & secure dynamic ID-based remote user authentication scheme'

Over the last few years, many researchers have paid a lot of attention to the user authentication problem. However, to date, there has been relatively little research suited for wireless sensor networks. Recently, Wong et al. proposed a dynamic user authentication scheme for WSNs that allows legitimate users to query sensor data at every sensor node of the network. We show that Wong et al.'s scheme is vulnerable to the replay and forgery attacks and propose a lightweight dynamic user authentication scheme for WSNs. The proposed scheme not only retains all the advantages in Wong et al.'s scheme but also enhances its security by withstanding the security weaknesses and allows legitimate users to change their passwords freely. In comparison with the previous scheme, our proposed scheme possesses many advantages, including resistance of the replay and forgery attacks, reduction of user's password leakage risk, capability of changeable password, and better efficiency.

An Improved Dynamic User Authentication Scheme for Wireless Sensor Networks

DoS-resistant ID-based password authentication scheme using smart cards

In 2005, Liao et al pointed out the weaknesses of Das et al.'s dynamic ID-based remote user authentication scheme using smart cards, and then proposed a slight modification thereof to overcome these weaknesses The current paper, however, demonstrates that Liao et al.'s scheme is still vulnerable to reflection attacks, privileged insider's attacks, and impersonation attacks by using lost or stolen smart card Then, we present an improvement to the scheme in order to isolate such problems.

Improving the dynamic ID-Based remote mutual authentication scheme

In 1981,Lamport proposed the first well-known remote password authentication scheme using smart cards.A number of remote password authentication schemes with smart cards have been present since then.Recently Shen,Lin and Hwang pointed out a different type of attack on this scheme and presented a modified scheme to remove these defects.In this paper we present a new remote user authentication scheme which is the modified form of the Shen-Lin-Hwang's scheme.In this scheme the password is controlled by the user,and at any time can be changer.The scheme can withstand attack that similar to Chan and Cheng's attack and Chang and Hwang' attack in registration phase and authentication phase.

YU Xiuyuan

Papers

A Modified Remote User Authentication Scheme Using Smart Cards