Efficient remote mutual authentication and key agreement

1
Efficient remote mutual authentication and key
agreement

• SourceComputers Security, 25(2006), pp. 72-77
• AuthorWen-Gong Shieh, Jian-Min Wang
• SpeakerBo-Yu Chen
• Date2009/7/22

2
Outline

• Related papers
• Our proposed scheme
• Conclusions

3
Hsu(2004)
Chien et al.(2002)
Cant withstand parallel session attack.
Juang(2004)
Chien et al.(2002)
Preserves all advantages of Chien et als
schem,but Juangs scheme is nonce based.
Our scheme
Not only preserves all advantages of Juangs
schem,but also improves efficiency.
Juang(2004)
4
Chien et al.s scheme
x secret key maintained by the server
Registration phase
Ui
server
IDi, PWi
Ri, h()
Smart card
Secure channel
5
Chien et al.s scheme (cont.)
T , T current time
Login and Verification phase
Ui
server
IDi, T, C2
C3, T
6
Hsus parallel session attack
Login and Verification phase
Ui
server
IDi, T, C2
T, C3
IDi, T, C2
T, C3,
7
Juangs scheme
x secret key maintained by the server
Registration phase
Ui
server
IDi, PWi
Wi, IDi, h()
Smart card
Secure channel
8
Juangs scheme (cont.)
N1,rujchosen by smart card
N2,rsjchosen by server
Login and session key agreement phase
Ui
server
IDi, N1, EVi(ruj, Ci)
EVi(rsj, N11, N2)
EKj(N21)
9
Our proposed scheme
x secret key maintained by the server
Registration phase
Ui
server
IDi, PWi
Ri, h()
Smart card
Secure channel
10
Our proposed scheme (cont.)
Tu, Ts current time
Login and session key agreement phase
Ui
server
IDi, Tu, MACu
Tu, Ts, MACs
Ts, MACu
11
Conclusions

• Propose a novel remote user authentication
  scheme using smart card
• No parallel session attack problem
• Not need the synchronized clock
• Generate a session key