Secure protected password change scheme

Abstract

Recently, Lin-Hwang proposed a password authentication scheme with secure password updating. The current paper demonstrates the vulnerability of Lin-Hwang's scheme to server data eavesdropping and presents improvements to resolve this problem. In contrast to Lin-Hwang's scheme, the proposed scheme can simply update user passwords without a complicated process and provide explicit key authentication in the case of a session key agreement. © Springer-Verlag Berlin Heidelberg 2005.