Improving the dynamic ID-based remote mutual authentication scheme

Abstract

In 2005, Liao et al. pointed out the weaknesses of Das et al.'s dynamic ID-based remote user authentication scheme using smart cards, and then proposed a slight modification thereof to overcome these weaknesses. The current paper, however, demonstrates that Liao et al.'s scheme is still vulnerable to reflection attacks, privileged insider's attacks, and impersonation attacks by using lost or stolen smart card. Then, we present an improvement to the scheme in order to isolate such problems. © Springer-Verlag Berlin Heidelberg 2006.