Abstract
It is convenient to obtain the information resources via intelligent devices over cloud systems. The user authentication mechanism is a fundamental tool for ensuring the validity of communicating parties and securing communications among the communicating party. Recently, Zhang et al. proposed a new remote authentication scheme for anonymous users using an elliptic curve cryptosystem. Their scheme could achieve the mutual authentication and forward security. They claimed that their scheme could withstand various attacks by employing BAN-logic formal methods. They claimed that their scheme could withstand the preserving anonymity and non-traceability, perfect forward secrecy, offline password guessing attacks, forgery attacks, server impersonating attacks, known key attacks, and reply attacks. However, we will show that their scheme is vulnerable to forgery attacks, server impersonating attacks, and man-in-the-middle attacks. In this article, we also propose an improved anonymous user authentication scheme proposed by Zhang et al. to withstand the vulnerability in their scheme.
Talk to us
Join us for a 30 min session where you can share your feedback and ask us any queries you have
Disclaimer: All third-party content on this website/platform is and will remain the property of their respective owners and is provided on "as is" basis without any warranties, express or implied. Use of third-party content does not indicate any affiliation, sponsorship with or endorsement by them. Any references to third-party content is to identify the corresponding services and shall be considered fair use under The CopyrightLaw.