Security Analysis of a Nonce-Based User Authentication Scheme Using Smart Cards
Junghyun Nam, Seungjoo Kim, Seung‐Young Park, Dongho Won · IEICE Transactions on Fundamentals of Electronics Communications and Computer Sciences · 2007
A remote user authentication scheme is a two-party protocol whereby an authentication server in a distributed system confirms the identity of a remote individual logging on to the server over an untrusted, open network. Recently, Lee et al. have proposed an efficient nonce-based scheme for remote user authentication using smart cards. This work reviews Lee et al.'s authentication scheme and provides a security analysis on the scheme. Our analysis shows that Lee et al.'s scheme does not achieve its basic aim of authenticating remote users and furthermore has a very hazardous method for changing passwords. In addition, we recommend some changes to the scheme so that it can attain at least its main security goal.