An improved and secure multiserver authentication scheme based on biometrics and smartcard  

作　　者：Ashish Kumar Hari Om 

机构地区：[1]Department of Compeer Science & Engineering, Indian Iustitute of Technology (ISM), Dhnnbad, dhnrkhand, 826004, India

出　　处：《Digital Communications and Networks》2018年第1期27-38,共12页数字通信与网络（英文版）

摘　　要：With the advancement in internet technologies, the number of servers has increased remarkably to provide more services to the end users. These services are provided over the public channels, which are insecure and susceptible to interception, modification, and deletion. To provide security, registered entities are authenticated and then a session key is established between them to communicate securely. The conventional schemes anow a user to access services only after their independent registration with each desired server in a multiserver system. Therefore, a user must possess multiple smartcards and memorize various identities and passwords for obtaining services from multiple servers. This has led to the adoption of multiserver authentication in which a user accesses services of multiple servers after registering himself at only one central authority. Recently, Kumar and Om discussed a scheme for multiserver environment by using smartcard. Since the user-memorized passwords are of low entropy, it is possible for an attacker to guess them. This paper uses biometric information of user to enhance the security of the scheme by Kumar and Ore. Moreover, we conducted rigorous security analyses （informal and formal） in this study to prove the security of the proposed scheme against all known attacks. We also simulated our scheme by using the automated tool, ProVerif, to prove its secrecy and authentication properties. A comparative study of the proposed scheme with the existing related schemes shows its effectiveness.

关 键 词：Smartcard Password Security Authentication Multi-server Biometric ProVerif 

分 类 号：TN4[电子电信—微电子学与固体电子学]