Cryptanalysis and improvement of a biometric and smart card based remote user authentication scheme
Chunyi Quan, Jaewook Jung, Jiye Kim, Qimin Sun, Donghoon Lee, Dongho Won · 2017
In recent years, with the increasing amount of internet-connected devices, people tend to access the internet more frequently. User authentication protocol has become one of the most widely used techniques to construct communication between valid users and remote servers via a public network. In 2015, An proposed an enhanced smart card based remote user password authentication scheme and introduced biometric feature to it, he claimed that his scheme can resist off-line password guessing attack, user impersonation attack, etc. However, in this paper, we demonstrate that his scheme is still vulnerable to several attacks. We then propose a security improved scheme based on cryptanalysis of An's scheme and achieve robust biometric protection and user anonymity. Moreover, the comparison between our proposed scheme and other related schemes shows that the presented scheme has more security properties.