@inproceedings{81dcfe6b0c664d8baf8180159a55dbde,
title = "Cryptanalysis and improvement of user authentication scheme using smart cards for multi-server environments",
abstract = "For providing the login service in multi-server environments, Fan, Xu, and Li presented a remote user authentication scheme using smart cards. In this paper, we demonstrate that Fan-Xu-Li's scheme is vulnerable to the parallel session attack. That is, when a legal user logs in a server, an adversary without knowing any secret information can easily impersonate the user to log in other authorized servers. It means that a serious security flaw exists in Fan-Xu-Li's scheme. In addition to being practical, it is desirable to avoid relying on timestamps for security in their scheme. We therefore propose an improved scheme to overcome above disadvantages. As a unilateral authentication mechanism, our improved scheme is more suitable for real-life cryptographic applications than Fan-Xu-Li's scheme.",
keywords = "Authentication, Multi-server, Parallel session attack, Smart card, Synchronization",
author = "Cao, \{Zhen Fu\} and Sun, \{Da Zhi\}",
year = "2006",
doi = "10.1109/ICMLC.2006.259062",
language = "英语",
isbn = "1424400619",
series = "Proceedings of the 2006 International Conference on Machine Learning and Cybernetics",
publisher = "IEEE Computer Society",
pages = "2818--2822",
booktitle = "Proceedings of the 2006 International Conference on Machine Learning and Cybernetics",
address = "美国",
note = "5th International Conference on Machine Learning and Cybernetics, ICMLC 2006 ; Conference date: 13-08-2006 Through 16-08-2006",
}