Some Forgery Attacks on a Remote User Authentication Scheme Using Smart Cards

Article type: Research Article

Authors: Chang, Chin‐Chen | Hwang, Kuo‐Feng

Affiliations: Department of Computer Science and Information Engineering, National Chung Cheng University, 160, Sanhsing, Minhsiung, Chaiyi 621, Taiwan, e‐mail: [email protected] | Department of Multimedia Desgin, National Taichung Institute of Technology, 129, Sec. 3, Sanming Rd., Taichung 404, Taiwan, e‐mail: [email protected]

Abstract: Smart card has been adopted to various applications. In 2000, Hwang and Li proposed a remote user authentication scheme, which is also using smart card. Nine months later, Chan and Cheng pointed out that there is a weakness in the remote authentication scheme proposed by Hwang and Li. In this paper, we show that Chan and Cheng's attack does not work well because they did not consider the format of user's identity. In addition, we propose several ways to solve the problem of Chan and Cheng's attack.

Keywords: cryptography, authentication, cryptanalysis

Journal: Informatica, vol. 14, no. 3, pp. 289-294, 2003