Security Analysis of a Secure Dynamic ID based Remote User Authentication Scheme for Multi-server Environment
Hyung-Kyu Yang · 한국인터넷방송통신학회 논문지 · 2013
Recently, user authentication schemes using smart cards for multi-server environment have been proposed for practical applications. In 2009, Liao-Wang proposed a secure dynamic ID based remote user authentication scheme for multi-server environment that can withstand the various possible attacks and provide user anonymity. In this paper, we analyze the security of Liao-Wang`s scheme, and we show that Liao-Wang`s scheme is still insecure against the forgery attack, the password guessing attack, the session key attack, and the insider attack. In addition, Liao-Wang`s scheme does not provide user anonymity between the user and the server.