Improvement of Li-Hwang's biometrics-based remote user authentication scheme using smart cards
Cheng‐Chi Lee, Rui‐Xiang Chang, Lung Albert Chen · WSEAS TRANSACTIONS on COMMUNICATIONS archive · 2011
Recently, Li and Hwang proposed an efficient biometrics-based remote user authentication scheme without storing the password tables. Their scheme uses random numbers to solve the problem of synchronized clocks. It also enables the user to freely choose or change their passwords. At the same time, they claimed that their scheme provides security, reliability and efficiency. However, we found that Li and Hwang's scheme is vulnerable to denial of service attacks. Therefore, in this paper we propose an improved scheme to solve this weakness.