A secure dynamic ID based remote user authentication scheme for multi-server environment using smart cards

TLDR: An improved scheme to solve the weaknesses of Liao-Wang’s dynamic ID based remote user authentication scheme for multi-server environment, which is vulnerable to insider attack, masquerade attack, server spoofing attack, registration center attack and is not easily reparable.

Abstract: Recently, Hsiang et al. pointed out that Liao-Wang’s dynamic ID based remote user authentication scheme for multi-server environment is vulnerable to insider attack, masquerade attack, server spoofing attack, registration center attack and is not easily reparable. Besides, Liao-Wang’s scheme cannot achieve mutual authentication. For this, Hsiang et al. proposed an improved scheme to overcome these weaknesses and claimed that their scheme is efficient, secure, and suitable for the practical application environment. However, we observe that Hsiang et al.’s scheme is still vulnerable to a masquerade attack, server spoofing attack, and is not easily reparable. Furthermore, it cannot provide mutual authentication. Therefore, in this paper we propose an improved scheme to solve these weaknesses.