Impersonation Attack on a Dynamic ID-Based Remote User Authentication Scheme Using Smart Cards(Fundamental Theories for Communications)

• KU Wei Chi

  Department of Computer Science and Information Engineering, Fu Jen Catholic University

• CHANG Shen Tien

  Department of Computer Science and Information Engineering, Fu Jen Catholic University

抄録

Recently, Das et al. proposed a dynamic ID-based verifier-free password authentication scheme using smart cards. To resist the ID-theft attack, the user's login ID is dynamically generated and one-time used. Herein, we demonstrate that Das et al.'s scheme is vulnerable to an impersonation attack, in which the adversary can easily impersonate any user to login the server at any time. Furthermore, we also show several minor weaknesses of Das et al.'s scheme.

収録刊行物

• IEICE transactions on communications

  IEICE transactions on communications 88 (5), 2165-2167, 2005-05-01

  一般社団法人電子情報通信学会

キーワード

• dynamic ID
• impersonation attack
• password authentication
• reparability
• smart card

詳細情報

• CRID: 1573105977154663040
• NII論文ID: 110003222893
• NII書誌ID: AA10826261
• ISSN: 09168516
• 本文言語コード: en
• データソース種別:
  • CiNii Articles