In 2005, Liu et al. proposed an improvement to Chien et al.＇s remote user authentication scheme, using smart cards, to prevent parallel session attack. This article, however, will demonstrate that Liu et al.＇s schem...In 2005, Liu et al. proposed an improvement to Chien et al.＇s remote user authentication scheme, using smart cards, to prevent parallel session attack. This article, however, will demonstrate that Liu et al.＇s scheme is vulnerable to masquerading server attack and has the system＇s secret key forward secrecy problem. Therefore, an improved scheme with better security strength, by using counters instead of timestamps, is proposed. The proposed scheme does not only achieve their scheme＇s advantages, but also enhances its security by withstanding the weaknesses just mentioned.展开更多
基金This work is supported by the National Natural Science Foundation of China （90604022）；Natural Science Foundation of Beijing （4062025）.
文摘In 2005, Liu et al. proposed an improvement to Chien et al.＇s remote user authentication scheme, using smart cards, to prevent parallel session attack. This article, however, will demonstrate that Liu et al.＇s scheme is vulnerable to masquerading server attack and has the system＇s secret key forward secrecy problem. Therefore, an improved scheme with better security strength, by using counters instead of timestamps, is proposed. The proposed scheme does not only achieve their scheme＇s advantages, but also enhances its security by withstanding the weaknesses just mentioned.
