Analysis and Improvement on a Hash-Based Authentication Scheme for Multi-Server Architecture  

作　　者：LI Rui KANG Baoyuan MAI Kaiqiang 

机构地区：[1]School of Computer Science and Technology,Tiangong University,Tianjin 300387,China

出　　处：《Wuhan University Journal of Natural Sciences》2021年第5期394-404,共11页武汉大学学报（自然科学英文版）

基　　金：Supported by the Applied Basic and Advanced Technology Research Programs of Tianjin(15JCYBJC15900)。

摘　　要：In order to meet people’s demand for various types of network services,researchers have conducted extensive research on authentication schemes for multi-server architecture.Although various schemes have been proposed,most of them still have safety defects and fail to meet safety requirements.Recently,Haq et al presented an efficient Hash-based authenticated key agreement scheme for multi-server scheme and claimed that their scheme can withstand all well-known attacks.However,we find that their scheme is vulnerable to replay attack,tracking attack and malicious server impersonation user attack.Then we propose an improved scheme.We also analyze the security of the improved scheme and compare with Haq et al’s scheme in security and computational efficiency.Furthermore,we use the AVISPA(Automated Validation of Internet Security Protocols and Applications)tool to verify the security of the improved scheme.

关 键 词：multi-server architecture AUTHENTICATION SECURITY one-way hash function AVISPA 

分 类 号：TP309.2[自动化与计算机技术—计算机系统结构]