Improvement on A Password Authentication Scheme for Multi-server Environments

Abstract

Since each user needs to have different passwords with different remote servers in the multi-server environment, it is impossible to apply the authentication methods in a single server environment to the multi-server environment. Recently, Ren-Chiun Wang, Wen-Shenq Juang, and Chin-Laung Lei proposed an ID based remote user authentication scheme for multi-server environments. However, we demonstrate that their ID based authentication scheme lacks the authenticity of the Registration Center to the server. Moreover, their ID based authentication scheme does not satisfy perfect forward security. In this paper, an improved multi-server password based smart card authentication scheme is proposed. Our scheme can remove their security flaws. Compared with the previous password based smart card authentication schemes for the multi-server environments, our proposed scheme can hold more security advantages.