期刊名称：International Journal of Security and Its Applications
印刷版ISSN：1738-9976
出版年度：2014
卷号：8
期号：5
页码：11-20
DOI：10.14257/ijsia.2014.8.5.02
出版社：SERSC
摘要：Liao et al.'s has recently announced the suitable authentication scheme for mobile device environment, which can authenticate remote users by using QR code. However, Liao et al.'s scheme cannot satisfy several important security requirements. The biggest drawback of Liao et al.'s scheme is that it is not able to satisfy the mutual authentication between remote users and SP since it is vulnerable to eavesdropping, man-in-the-middle, theft and loss of mobile devices and forgery attack. This paper aims to analyze the problems of Liao, et al., scheme and propose a safe authentication scheme using password based QR code that has fixed the aforementioned vulnerabilities.
关键词：mobile device; authentication scheme; QR Code; impersonation attack
