期刊名称：International Journal of Future Generation Communication and Networking
印刷版ISSN：2233-7857
出版年度：2012
卷号：5
期号：4
出版社：SERSC
摘要：Secure user authentication without repeating registration is one of the important issues in multi-server networks that needs to be adequately addressed. Recently, two-factor (smart card and password) based remote user authentication protocols have been widely introduced due to their low constructional cost and convenient usability for the authentication purpose. In 2011, Chang and Cheng proposed a smart card and password based remote login mechanism for multi-server environments. However, in this paper, we found that Chang-Cheng's mechanism suffers from susceptibility to security attacks. As a result, we introduced an improved version of smart card based password authentication mechanism in multi-server networks. Compared with other related protocols, performance analysis shows that our proposed mechanism is still cost-efficient for the real application in multi-server environments.
关键词：Information and network security; Multi-server networks; Password verification; Remote user authentication; Smart card
