Robust Multiple Servers Architecture Based Authentication Scheme Preserving Anonymity

Area of Science:

• Computer Science
• Cybersecurity
• Information Technology

Background:

• Dynamic ID-based remote user authentication schemes are crucial for multi-server architectures.
• Existing schemes aim to enhance security against network attacks.
• Kumari and Om (2017) proposed an anonymous multi-server authenticated key agreement scheme.

Purpose of the Study:

• To reanalyze the security of the Kumari and Om (2017) scheme.
• To identify vulnerabilities such as impersonation and server spoofing attacks.
• To propose a new, secure, and anonymous biometric-based authentication scheme for multi-server environments.

Main Methods:

• Security reanalysis of the existing scheme.
• Identification of specific attack vectors (impersonation, server spoofing).
• Development and validation of a novel biometric-based authentication protocol using Burrows-Abadi-Needham (BAN)-logic.

Main Results:

• The Kumari and Om (2017) scheme is vulnerable to impersonation and server spoofing attacks.
• The proposed biometric-based scheme effectively preserves user anonymity.
• BAN-logic validation confirms the proposed scheme's completeness and security.

Conclusions:

• The analyzed scheme fails to provide adequate security and user privacy.
• The new biometric-based authentication scheme offers enhanced security and anonymity.
• Comparative analysis shows the proposed scheme provides superior security without compromising efficiency.