Abstract
Recently, Shen et al. proposed an improvement on Yang-Shieh’s timestamp-based password authentication scheme using smart cards. Then they claimed that their scheme cannot withstand a forged login attack, but also eliminate a problem of Yang-Shieh’s. However, their scheme is still susceptible to forged login attack. In this paper, we show how the forged login attack can be worked out on Shen et al.’s scheme and present an enhancement to resolve such a problem.
This is a preview of subscription content, log in via an institution to check access.
Access this chapter
Tax calculation will be finalised at checkout
Purchases are for personal use only
Preview
Unable to display preview. Download preview PDF.
References
Yang, W.H., Shieh, S.P.: Password authentication scheme with smart cards. Computers & Security 18(8), 727–733 (1999)
Chan, C.K., Cheng, L.M.: Cryptanalysis of timestamp-based password authentication scheme. Computers & Security 21(1), 74–76 (2002)
Fan, L., Li, J.H., Zhu, H.W.: An enhancement of timestamp-based password authentication scheme. Computers & Security 21(7), 665–667 (2002)
Sun, H.M., Yeh, H.T.: Further cryptanalysis of a password authentication scheme with smart cards. IEICE Transactions on Communications E86-B(4), 1412–1415 (2003)
Shen, J.J., Lin, C.W., Hwang, M.S.: Security enhancement for the timestampbased password authentication scheme using smart cards. Computers & Security 22(7), 591–595 (2003)
Chen, K.F.: Attacks on the (enhanced) Yang-Shieh authentication. Computers & Security 22(8), 725–727 (2003)
Author information
Authors and Affiliations
Editor information
Editors and Affiliations
Rights and permissions
Copyright information
© 2004 Springer-Verlag Berlin Heidelberg
About this paper
Cite this paper
Yoon, EJ., Ryu, EK., Yoo, KY. (2004). Security of Shen et al.’s Timestamp-Based Password Authentication Scheme. In: Laganá, A., Gavrilova, M.L., Kumar, V., Mun, Y., Tan, C.J.K., Gervasi, O. (eds) Computational Science and Its Applications – ICCSA 2004. ICCSA 2004. Lecture Notes in Computer Science, vol 3046. Springer, Berlin, Heidelberg. https://doi.org/10.1007/978-3-540-24768-5_71
Download citation
DOI: https://doi.org/10.1007/978-3-540-24768-5_71
Publisher Name: Springer, Berlin, Heidelberg
Print ISBN: 978-3-540-22060-2
Online ISBN: 978-3-540-24768-5
eBook Packages: Springer Book Archive