An Improved Smart Card based Anonymous Multi-Server Remote User Authentication Scheme

Abstract

As computer networks become an essential part of our daily life, therefore, protecting the resources from unauthorized users come forward with more challenging and complicated task for the researchers. From the last few decades, many number of password-based authentication schemes have been adopted in multi-server environment to protect the resources from any adversary means. Recently, Li et al. has proposed a dynamic-id based remote user authentication scheme and claimed that their scheme can provide more security than existing schemes and is suitable for practical applications. But, in this paper, we have shown that their scheme is not too much secured as they have claimed and it can suffer from stolen smart card attack, user impersonate attack and lack of some important features of smart card as well. To overcome these security flaws, we have further proposed an improved anonymous authentication scheme.