Security enhanced anonymous multiserver authenticated key agreement scheme using smart cards and biometrics.

Area of Science:

• Computer Science
• Cybersecurity
• Information Security

Background:

• Anonymous user authentication enables secure access to remote servers without revealing identity.
• Combining biometrics and passwords enhances security but existing schemes are single-server limited.
• This necessitates repeated registration for users accessing multiple distinct application servers.

Purpose of the Study:

• To evaluate the security of Chuang and Chen's anonymous multiserver authenticated key agreement scheme.
• To identify vulnerabilities within the proposed scheme.
• To develop a more secure and robust anonymous multiserver authentication scheme.

Main Methods:

• Cryptographic analysis of the Chuang and Chen scheme.
• Identification of specific attack vectors including masquerade, smart card, user impersonation, and Denial of Service (DoS) attacks.
• Design and proposal of a novel, enhanced anonymous multiserver authenticated key agreement scheme.

Main Results:

• The Chuang and Chen scheme is found to be vulnerable to masquerade, smart card, user impersonation, and DoS attacks.
• The scheme fails to achieve perfect forward secrecy.
• A new scheme is proposed that rectifies these identified security weaknesses.

Conclusions:

• The analyzed anonymous multiserver authentication scheme has significant security flaws.
• The proposed enhanced scheme offers improved security and addresses the identified vulnerabilities.
• The new scheme provides a more secure solution for anonymous multiserver authenticated key agreement.