Cryptanalysis of an Improvement of a Biometrics-Based Remote User Authentication Scheme using Smart Cards

Abstract

ABSTRACT:-In the past few years, biometrics-based remote user authentication has become a topic of interest for cryptographers. Given the fact that applying biometrics in a remote user authentication scheme increases the security, several biometrics-based authentication schemes have been proposed. In 2011, Li et al. proposed an improvement for Li-Hwang’s biometrics-based remote user authentication scheme using a smart card. In their paper they have claimed that their scheme removes the weaknesses of Li-Hwang’s efficient scheme. This paper reviews and analyzes Li et al.’s scheme and demonstrates the flaws in its login, authentication and password change phases. It shows that this scheme has infrastructural deficiencies in its phases when the user enters a wrong password. It is also shown that these flaws could be removed with the verification of the entered password. Improvements in login phase, authentication phase and password change phase are proposed in this paper in order to remove these weaknesses