Authors: Wei-Chi KU, Hao-Chuan TSAI, Maw-Jinn TSAUR

Slides:

Advertisements

Similar presentations

1 東南技術學院九十二學年度第二學期資工系第一次論文發表會 Analysis of an Improved Version of S/KEY One-Time Password Authentication Scheme Speaker: Maw-Jinn Tsaur

Advertisements

多媒體網路安全實驗室 An efficient and security dynamic identity based authentication protocol for multi-server architecture using smart cards 作者 :JongHyup LEE 出處.

Further improvement on the modified authenticated key agreement scheme Authors: N.Y. Lee and M.F. Lee Source: Applied Mathematics and Computation, Vol.157,

1 Secure Credit Card Transactions on an Untrusted Channel Source: Information Sciences in review Presenter: Tsuei-Hung Sun ( 孫翠鴻 ) Date: 2010/9/24.

P RIVACY -P RESERVING A UTHENTICATION OF U SERS WITH S MART C ARDS U SING O NE -T IME C REDENTIALS Author: Jun-Cheol PARK Source: IEICE TRANS. INF&SYST.

Computer and Information Security 期末報告學號姓名莊玉麟.

1 Security analysis of an enhanced authentication key exchange protocol Authors ： H.Y. Liu, G.B. Horng, F.Y. Hung Presented by F.Y. Hung Date ： 2005/5/20.

A simple remote user authentication scheme 1. M. S. Hwang, C. C. Lee and Y. L. Tang, “A simple remote user authentication.

電子商務與數位生活研討會 1 Further Security Enhancement for Optimal Strong-Password Authentication Protocol Tzung-Her Chen, Gwoboa Horng, Wei-Bin Lee,Kuang-Long Lin.

A password authentication scheme with secure password updating SEC 期末報告學號：姓名：翁玉芬.

1 Improvement of the secure dynamic ID based remote user authentication scheme for multi-server environment Authors ： Han-Cheng Hsiang and Wei-Kuan Shih.

孫國偉 Efficient Password authenticated key agreement using smart cards Author : Wen-Shenq Juang* Date : in Computers & Security.

An Improved Smart Card Based Password Authentication Scheme with Provable Security Source:Computer Standards & Interfaces, Vol. 31, No. 4, pp ,

A more efficient and secure dynamic ID- based remote user authentication scheme Yan-yan Wang, Jia-yong Liu, Feng-xia Xiao, Jing Dan in Computer Communications.

An Enhanced Two-factor User Authentication Scheme in Wireless Sensor Networks DAOJING HE, YI GAO, SAMMY CHAN, CHUN CHEN, JIAJUN BU Ad Hoc & Sensor Wireless.

多媒體網路安全實驗室 A Strong User Authentication Framework for Cloud Computing Date ： Reporter : Hong Ji Wei Authors : Amlan Jyoti Choudhury, Mangal.

1 Further cryptanalysis of fingerprint-based remote user authentication scheme using smartcards Authors: W.C Ku, S.T. Chang,and M.H. Chiang Source: Electronics.

Cryptanalysis of Two Dynamic ID-based Authentication

多媒體網路安全實驗室 A novel user authentication and privacy preserving scheme with smartcards for wireless communications 作者 :Chun-Ta Li,Cgeng-Chi Lee 出處 :Mathematical.

Efficient remote mutual authentication and key agreement Improvement of Chien et al. ’ s remote user authentication scheme using smart cards An efficient.

Secure Authentication Scheme with Anonymity for Wireless Communications Speaker : Hong-Ji Wei Date :

Cryptanalysis and Improvement of an Access Control in User Hierarchy Based on Elliptic Curve Cryptosystem Reporter : Tzer-Long Chen Information Sciences.

A Secure Identification and Key Agreement Protocol with User Anonymity (SIKA) Authors: Kumar Mangipudi and Rajendra Katti Source: Computers & Security,

Enhanced secure anonymous authentication scheme for roaming service in global mobility networks Hyeran Mun, Kyusuk Han, Yan Sun Lee, Chan Yeob Yeun, Hyo.

Department of Computer Engineering, Kyungpook National University Author : Eun-Jun Yoon, Wan-Soo Lee, Kee-Young Yoo Speaker : Wan-Soo Lee

Secure Communication between Set-top Box and Smart Card in DTV Broadcasting Authors: T. Jiang, Y. Hou and S. Zheng Source: IEEE Transactions on Consumer.

SPEAKER: HONG-JI WEI DATE: Secure Anonymous Authentication Scheme with Roaming for Mobile Networks.

A flexible biometrics remote user authentication scheme Authors: Chu-Hsing Lin and Yi-Yi Lai Sources: Computer Standards & Interfaces, 27(1), pp.19-23,

User authentication schemes with pseudonymity for ubiquitous sensor network in NGN Authors: Binod Vaidya, Joel J. Rodrigues and Jong Hyuk Park Source:

MSN lab1 A novel deniable authentication protocol using generalized ElGamal signature scheme Source: Information Sciences, vol. 177, pp , 2007.

Password-based user authentication and key distribution protocols for client-server applications Authors: Her-Tyan Yeh and Hung-Min Sun Sources: The Journal.

Robust and Efficient Password- Authenticated Key Agreement Using Smart Cards Authors: Wen-Shenq Juang, Sian-Teng Chen and Horng-Twu Liaw Src: IEEE Transaction.

RSA-based password authenticated key exchange protocol Presenter: Jung-wen Lo( 駱榮問 )

1 Protecting Your Privacy with a Mobile Agent Device in RFID Environment Authors: Sang-Soo Yeo, Soo-Cheol Kim, Sung Kwon Kim, Gilcheol Park, Seok Soo Kim,

SPEAKER: HONG-JI WEI DATE: Efficient and Secure Anonymous Authentication Scheme with Roaming Used in Mobile Networks.

Threshold password authentication against guessing attacks in Ad hoc networks ► Chai, Zhenchuan; Cao, Zhenfu; Lu, Rongxing ► Ad Hoc Networks Volume: 5,

Threshold password authentication against guessing attacks in Ad hoc networks Authors: Zhenchuan Chai, Zhenfu Cao, Rongxing Lu Sources: Ad Hoc Networks,

A Secure Authentication Scheme with Anonymity for Wireless Communications IEEE COMMUNICATIONS LETTERS, VOL. 12, NO. 10, OCTOBER 2008 Chia-Chun Wu, Wei-Bin.

An Efficient and Practical Authenticated Communication Scheme for Vehicular Ad Hoc Networks Source: IEEE Transactions on Vehicular Technology, Reviewing.

Smart Card Based Authenticated Key Agreement Schemes

Non-PKI Methods for Public Key Distribution

A Dynamic ID-Based Generic Framework for Anonymous Authentication Scheme for Roaming Service in Global Mobility Networks Source: Wireless Personal Communications,

Cryptanalyses and improvements of two cryptographic key assignment schemes for dynamic access control in a user hierarchy Source: Computer & Security,

A lightweight authentication scheme based on self-updating strategy for space information network Source: International Journal Of Satellite Communications.

網路環境中通訊安全技術之研究 Secure Communication Schemes in Network Environments

A secure and traceable E-DRM system based on mobile device

Source : Future Generation Computer Systems, Vol. 68, pp , 2017

Efficient password authenticated key agreement using smart cards

A robust and anonymous patient monitoring system using wireless medical sensor networks Source: Future Generation Computer Systems, Available online 8.

Security of a Remote Users Authentication Scheme Using Smart Cards

Efficient Time-Bound Hierarchical Key Assignment Scheme

Chair Professor Chin-Chen Chang Feng Chia University

Source： Ad Hoc Networks, Vol. 71, pp , 2018

2018/7/28 GridMonitoring: Secured Sovereign Blockchain Based Monitoring on Smart Grid Authors: Jianbin Gao, Kwame Omono Asamoah, Emmanuel Boateng Sifah,

A Novel Latin Square-based Secret Sharing for M2M Communications

Lightweight IoT-based authentication scheme in cloud computing circumstance Source: Future Generation Computer Systems Volume 91, February 2019, Pages.

Lightweight IoT-based authentication scheme in cloud computing circumstance Source: Future Generation Computer Systems Volume 91, February 2019, Pages.

An efficient biometric based remote user authentication scheme for secure internet of things environment Source: Journal of Intelligent & Fuzzy Systems.

Authors：Debiao He, Sherali Zeadally, Neeraj Kumar and Wei Wu

A lightweight biometrics based remote user authentication scheme for IoT services Source: Journal of Information Security and Applications Volume 34, Part.

Controllable and Trustworthy Blockchain-based Cloud Data Management

Improvement of recently proposed Remote User Authentication Schemes

Authors: Yuh-Min TSENG, Tsu-Yang WU, Jui-DiWU

Source: Computer Networks Volume 149, 11 February 2019, Pages 29-42

II. REVIEW OF THE DAS ET AL. SCHEME

Improvement of Chien et al

Source: Sensors, Volume 19, Issue 9 (May )

Biometrics-based RSA Cryptosystem for Securing Real-Time Communication

Privacy Protection for E-Health Systems by

A lightweight authentication scheme with privacy protection for smart grid communications Source: Future Generation Computer Systems Volume 100, November.

Presentation transcript:

Stolen-Verifier Attack on an Efficient Smartcard-Based One-Time Password Authentication Scheme Authors: Wei-Chi KU, Hao-Chuan TSAI, Maw-Jinn TSAUR Source: IEICE transactions on Communications, Vol. E87-B, No.8, Aug. 2004, pp.2374- 2376 Speaker: Chih-Chiang Tsou Date: 2005.01.03

Outline Review of Yeh-Shen-Hwang’s Scheme Stolen-Verifier Attack on Yeh-Shen-Hwang’s Scheme Conclusion

Review of Yeh-Shen-Hwang’s Scheme Secure channel Common channel Review of Yeh-Shen-Hwang’s Scheme 1. Registration SEED: random number S: smart card (SEED) H():secure hash function S ( SEED⊕D0, H(D0), N) User (Ui) System Authenticates H(SEED⊕ (SEED⊕D0))= H(D0) D0: random number Computes p0= HN( K⊕SEED) ( p0 ⊕D0 ) Authenticates D0 ⊕ ( p0 ⊕D0 )

Review of Yeh-Shen-Hwang’s Scheme For the t th Login Request Dt: random number User (Ui) ( SEED⊕ Dt , H(Dt) ⊕pt-1, N-t ) System Computes pt-1= H( H N-t ( K⊕SEED)) Authenticates H(Dt) = Dt pt ⊕ Dt Authenticates H( pt )= pt-1 Replaces pt-1 with pt and t-1 with t in the database Computes pt= H N-t ( K⊕SEED))

Stolen-Verifier Attack on Yeh-Shen-Hwang’s Scheme The adversary stolen p1,p2,…,pi from the database. And in the user’s ith login, the adversary capture ( SEED⊕ Di , H(Di) ⊕pi-1, N-i ) and (pi ⊕ Di ). Adversary System Uses pi to compute Di and uses Di to compute SEED. He guesses the PW to derive the key K , and computes pi = H N-i ( K ⊕SEED)). If pi  = pi , then PW = PW.

Conclusion This attack scheme is not effective to impersonate the legal user or system.