A secure user-friendly authentication scheme with anonymity for wireless communications
Woongryul Jeon, Yunho Lee, Dongho Won · 2013
As anonymity becomes a essential security goal in many applications, a number of authentication schemes which provide anonymity have been announced over the years. However, many of them were confirmed that did not provide the user anonymity. Recently, in 2011, Yoon et al. presented an authentication scheme that provides user anonymity in wireless communications. Compared with previous schemes, Yoon et al. not only provides the user anonymity, but also provides an user friendly password instead of the random value. However, contrary to Yoon et al.'s claim, their scheme is still vulnerable to an off-line password guessing attack. Furthermore, an adversary, who obtains the user's password, can also retrieve the real identity of the user under the reasonable assumptions. Thus, in this paper, we show these security problems and how to address it.