A robust anonymous biometric-based authenticated key agreement scheme for multi-server environments.

Area of Science:

• Computer Science
• Information Security
• Cryptography

Background:

• Biometric-based authentication schemes using smart cards are crucial for remote authentication systems.
• Existing schemes, including Moon et al.'s, have demonstrated vulnerabilities.
• Addressing these weaknesses is essential for secure remote access.

Purpose of the Study:

• To identify and expose the security vulnerabilities in Moon et al.'s proposed authentication scheme.
• To propose a novel, robust, and anonymous multi-server authentication scheme.
• To ensure the proposed scheme meets essential security requirements and offers computational efficiency.

Main Methods:

• Analysis of Moon et al.'s scheme to identify weaknesses like insider, server spoofing, user impersonation, and guessing attacks.
• Development of a new multi-server authentication scheme leveraging public key encryption.
• Formal and informal security analysis to validate the proposed scheme's robustness and functionality.

Main Results:

• Moon et al.'s scheme was found vulnerable to several critical attacks.
• The proposed anonymous multi-server authentication scheme effectively mitigates identified weaknesses.
• The new scheme demonstrates strong mutual authentication and satisfies key security requirements.

Conclusions:

• The proposed scheme offers superior security and efficiency compared to previous methods.
• It provides a robust solution for secure remote authentication in multi-server environments.
• Public key encryption is a viable method for enhancing authentication security.