NDLI: Improvement upon Mutual Password Authentication Scheme

Content Provider	IEEE Xplore Digital Library
Author	Lu Zhu Sheng Yu Xing Zhang
Copyright Year	2008
Description	Author affiliation: Sch. of Comput., Wuhan Univ., Wuhan (Lu Zhu)
Abstract	Many password authentication schemes have been proposed for electronic commerce environment; however, none of them is secure enough. Hwang and Yeh proposed an improvement on the Peyravian-Zunic password authentication scheme including protected password transmission and password change. We demonstrate that the Hwang-Yeh scheme is also vulnerable to several kinds of attacks though the scheme has repaired some security problems of the Peyravianis-Zunic scheme. Furthermore, we propose an improved scheme to enhance security of their scheme in the paper. Based on collision-resistant hash function, the proposal employs techniques of salting, time stamp and trusted computing to be free from worries of possible common attacks, such as replay attack, guessing attack, stolen-verifier attack, denial of service attack, impersonation attack, and server spoofing attack. According to security analysis over insecure networks, the proposed scheme is the most secure scheme among the Peyravian-Zunic scheme, the Hwang-Yeh scheme, the Peyravian-Jeffries scheme, and the Wang-Zhang scheme.
Sponsorship	Eng. Technol. Press, Hong Kong
Starting Page	400
Ending Page	403
File Size	483722
Page Count	4
File Format	PDF
ISBN	9780769535609
DOI	10.1109/ISBIM.2008.138
Language	English
Publisher	Institute of Electrical and Electronics Engineers, Inc. (IEEE)
Publisher Date	2008-12-19
Publisher Place	China
Access Restriction	Subscribed
Rights Holder	Institute of Electrical and Electronics Engineers, Inc. (IEEE)
Subject Keyword	Data security Information management Proposals Electronic commerce secure Computer crime Seminars password hash function Authentication Public key attack Public key cryptography Protection trusted computing authentication
Content Type	Text
Resource Type	Article

Sl.	Authority	Responsibilities	Communication Details
1	Ministry of Education (GoI), Department of Higher Education	Sanctioning Authority	https://www.education.gov.in/ict-initiatives
2	Indian Institute of Technology Kharagpur	Host Institute of the Project: The host institute of the project is responsible for providing infrastructure support and hosting the project	https://www.iitkgp.ac.in
3	National Digital Library of India Office, Indian Institute of Technology Kharagpur	The administrative and infrastructural headquarters of the project	Dr. B. Sutradhar bsutra@ndl.gov.in
4	Project PI / Joint PI	Principal Investigator and Joint Principal Investigators of the project	Dr. B. Sutradhar bsutra@ndl.gov.in Prof. Saswat Chakrabarti will be added soon
5	Website/Portal (Helpdesk)	Queries regarding NDLI and its services	support@ndl.gov.in
6	Contents and Copyright Issues	Queries related to content curation and copyright issues	content@ndl.gov.in
7	National Digital Library of India Club (NDLI Club)	Queries related to NDLI Club formation, support, user awareness program, seminar/symposium, collaboration, social media, promotion, and outreach	clubsupport@ndl.gov.in
8	Digital Preservation Centre (DPC)	Assistance with digitizing and archiving copyright-free printed books	dpc@ndl.gov.in
9	IDR Setup or Support	Queries related to establishment and support of Institutional Digital Repository (IDR) and IDR workshops	idr@ndl.gov.in

Further Analysis and Improvement of Yoon et al.'s Hash-Based User Authentication Scheme

A secure hash-based strong-password authentication protocol using one-time public-key cryptography

A Trusted Third Party Based Secure Authentication Scheme of E-Commerce

Abstract a one-time password authentication method (2003).

A simple attack on a recently introduced hash-based secure

Privacy Protection Smartcard Authentication Scheme in Cloud Computing

Cryptanalysis and Improvement of Efficient Password-Based User Authentication Scheme using Hash Function

Analysis and improvement of a user authentication improved protocol.

An Online User Authentication Scheme for Web-Based services

Improvement upon Mutual Password Authentication Scheme

Similar Documents

Further Analysis and Improvement of Yoon et al.'s Hash-Based User Authentication Scheme

A secure hash-based strong-password authentication protocol using one-time public-key cryptography

A Trusted Third Party Based Secure Authentication Scheme of E-Commerce

Abstract a one-time password authentication method (2003).

A simple attack on a recently introduced hash-based secure

Privacy Protection Smartcard Authentication Scheme in Cloud Computing

Cryptanalysis and Improvement of Efficient Password-Based User Authentication Scheme using Hash Function

Analysis and improvement of a user authentication improved protocol.

An Online User Authentication Scheme for Web-Based services

Improvement upon Mutual Password Authentication Scheme