Smart Card-based Password Authentication Protocol

With the development of network technologies, various distributed information systems have been deployed, and authentication has been taken seriously. Identity authentication makes security system more powerful and authenticated key exchange technology makes more secure network services possible. As many secure pitfalls in the static password authentication technology, two-factor dynamic password authentication technology has been introduced. Comparing with the static password authentication technology, two-factor dynamic password authentication technology greatly improves the security of authentication systems by adding a physical factor and adding dynamic factor to generate random verification information. In this issue, deep research of password authentication with smart cards has been taken in symmetrical cryptosystem and bilinear pairings, and new schemes were presented.Firstly, Chien et al's scheme and relative improved schemes are reviewed, which provide mutual authentication. As these schemes are constructed by hash function, they are very effective. To exchange a session key between the service terminal and the remote server, Juang et al introduced a new scheme. After analysing the security weakness and unpracticality of Juang et al's scheme and Shieh et al's scheme, an effective password authenticated key agreement scheme was proposed. As it only executes exclusive-or operation and hash function operation, the proposed scheme is very effective but it doesn't provide perfect forward security. Moreover, the proposed scheme uses random numbers as the dynamic factor, the clock of the remote server needn't to be identical with the clock of the service terminal, which makes this scheme with great facility.Then, a remote user authentication scheme with smart cards using bilinear pairings is presented, which is based on the analysis of Das et al's scheme and improved schemes of Das et al's scheme. The security foundation of the new scheme is the difficulty of DLP and CDLP. As the login phase of the presented scheme only performs the addition and multiplication in the group, the new scheme provides more efficiency in terms of lower computation cost. Finally, based on Chien et al's scheme and the presented remote user authentication scheme with smart cards using bilinear pairings, a new scheme of password authenticated key agreement with smart cards for remote systems was proposed. The proposed scheme employs Diffie-Hellman key exchange algorithm, which makes perfect forward security possible.