Challenges
Datasets
Workspaces
Papers
Discussions
Leaderboard
Log inSign up
Challenges
Datasets
Workspaces
Papers
Discussions
Leaderboard
Blog
Job Board
Q3AS

© 2026 Aqora Quantum S.A.S.

TermsPrivacyLegal Notice

Wireless Personal Communications

Security Enhancement of an Improved Remote User Authentication Scheme with Key Agreement

Sonam Devgan Kaul, Amit K. Awasthi

Published Apr 13, 2016• 56 citations
Publisher
DOI
10.1007/s11277-016-3297-6

Related papers

Password-based remote user authentication and key agreement protocol

Lihua Zhang, Liping Zhang, Youguang Zhang +1 more

Journal of Computer Applications•May 6, 2009•0 citations

Security Weakness of a Dynamic ID-Based User Authentication Scheme with Key Agreement

Mijin Kim, Namje Park, Dongho Won

Lecture notes in electrical engineering•Jan 1, 2012•7 citations

Attacks on Young-Hwa An’s Improved Dynamic ID-Based Remote User Authentication Scheme

Cheng Qiang Xu, Zhen Li Zhang

In 2011, Khan et al. analyzed and improved an enhanced secure dynamic ID-based remote user authentication scheme to overcome the weakness of Wang et al.’s scheme. In 2013, Young-Hwa An showed that Khan et al.’s scheme is not secure because Khan et al.’s scheme can not resist password guessing attack, forgery attack and does not provide user anonymity. After that he proposed a security improvement of dynamic ID-based remote user authentication scheme with session key agreement to remedy the weakness in Khan et al.’s scheme. Recently, through our study, we have found that Young-Hwa An’s mechanism is not secure enough. There still exists insider user’s attack, anonymity attack and forgery attack.

Applied Mechanics and Materials•May 1, 2014•0 citations

Robust and efficient remote authentication with key agreement protocol

H.B. Tang, Liu Xin-song

Journal of Computer Applications•Apr 24, 2013•0 citations

Efficient and Secure Dynamic ID-Based Remote User Authentication Scheme with Session Key Agreement for Multi-Server Environment

Rafael Martínez-Peláez, Francisco Rico-Novella, Cristina Satizábal +1 more

In 2007, Liao-Wang proposed a dynamic ID-based remote user authentication scheme for multi-server environment using smart cards.However, Hsiang-Shih demonstrated that Liao-Wang's scheme has security flaws.Moreover, Hsiang-Shih proposed an improvement scheme which resolves the security flaws of Liao-Wang scheme.In this paper, we propose an enhanced remote user authentication scheme which maintains the merits of Hsiang-Shih's scheme.Performance evaluation demonstrated the efficiency of the proposed scheme over related works.Security analysis proved that the proposed scheme is secure against known attacks.

International Journal of Network Security & Its Applications•Oct 22, 2010•9 citations

Cryptanalysis of a dynamic ID‐based remote user authentication with key agreement scheme

Hong‐bin Tang, Liu Xin-song

SUMMARY A dynamic user authentication scheme allows a user and a remote server to authenticate each other without leaking the user's identity. In 2011, Wen and Li proposed an improved dynamic ID‐based remote user authentication with key agreement scheme for mobile and home networks. They claimed that their scheme was more secure than the scheme of Wang et al. However, we demonstrate that their scheme is vulnerable to the privileged insider, off‐line password guessing, impersonation, and server spoofing attacks. At the same time, it does not provide any user anonymity and forward secrecy property. Thus, it is not feasible for real‐life implementation.Copyright © 2012 John Wiley & Sons, Ltd.

International Journal of Communication Systems•Sep 3, 2012•40 citations
In 2011, Khan et al. analyzed and improved an enhanced secure dynamic ID-based remote user authentication scheme to overcome the weakness of Wang et al.’s scheme. In 2013, Young-Hwa An showed that Khan et al.’s scheme is not secure because Khan et al.’s scheme can not resist password guessing attack, forgery attack and does not provide user anonymity. After that he proposed a security improvement of dynamic ID-based remote user authentication scheme with session key agreement to remedy the weakness in Khan et al.’s scheme. Recently, through our study, we have found that Young-Hwa An’s mechanism is not secure enough. There still exists insider user’s attack, anonymity attack and forgery attack.
In 2007, Liao-Wang proposed a dynamic ID-based remote user authentication scheme for multi-server environment using smart cards.However, Hsiang-Shih demonstrated that Liao-Wang's scheme has security flaws.Moreover, Hsiang-Shih proposed an improvement scheme which resolves the security flaws of Liao-Wang scheme.In this paper, we propose an enhanced remote user authentication scheme which maintains the merits of Hsiang-Shih's scheme.Performance evaluation demonstrated the efficiency of the proposed scheme over related works.Security analysis proved that the proposed scheme is secure against known attacks.
SUMMARY A dynamic user authentication scheme allows a user and a remote server to authenticate each other without leaking the user's identity. In 2011, Wen and Li proposed an improved dynamic ID‐based remote user authentication with key agreement scheme for mobile and home networks. They claimed that their scheme was more secure than the scheme of Wang et al. However, we demonstrate that their scheme is vulnerable to the privileged insider, off‐line password guessing, impersonation, and server spoofing attacks. At the same time, it does not provide any user anonymity and forward secrecy property. Thus, it is not feasible for real‐life implementation.Copyright © 2012 John Wiley & Sons, Ltd.