An efficient dynamic ID-based remote user authentication scheme using self-certified public keys for multi-server...

Area of Science:

• Computer Science
• Information Security
• Cryptography

Background:

• Existing dynamic ID-based remote user authentication schemes for multi-server environments often lack robust security.
• Li et al.'s recent scheme, while claiming security, is vulnerable to several critical attacks including stolen smart card and offline dictionary attacks.

Purpose of the Study:

• To identify and address the security vulnerabilities in Li et al.'s multi-server authentication scheme.
• To propose a novel, secure, and efficient dynamic ID-based remote user authentication scheme for multi-server environments.

Main Methods:

• Critical analysis of Li et al.'s proposed scheme to identify security flaws.
• Development of a new authentication scheme utilizing pairing-based cryptography and self-certified public keys.
• Rigorous security and performance evaluation of the proposed scheme against known attacks.

Main Results:

• Li et al.'s scheme was found to be susceptible to stolen smart card, offline dictionary, replay, impersonation, and server spoofing attacks.
• The proposed scheme demonstrates enhanced security features and resilience against various sophisticated attacks.
• Performance analysis indicates the proposed scheme is efficient for practical deployment in multi-server settings.

Conclusions:

• Schemes relying solely on hash functions without a registration center struggle with security and efficiency in dynamic ID-based multi-server authentication.
• The novel pairing and self-certified public key-based scheme offers a secure and efficient alternative for remote user authentication in multi-server environments.