An efficient and secure 3‐factor user‐authentication protocol for multiserver environment |
| |
| Authors: | Min Luo Aiying Sun Debiao He Xiaohong Li |
| |
| Affiliation: | 1. Key Laboratory of Aerospace Information Security and Trusted Computing, Ministry of Education, School of Cyber Science and Engineering, Wuhan University, China, and the Co‐Innovation Center for Information Supply and Assurance Technology, Anhui University, Hefei, China;2. Key Laboratory of Aerospace Information Security and Trusted Computing, Ministry of Education, School of Cyber Science and Engineering, Wuhan University, China;3. School of Computer Science, Wuhan University, China |
| |
| Abstract: | In the last decade, the number of web‐based applications is increasing rapidly, which leads to high demand for user authentication protocol for multiserver environment. Many user‐authentication protocols have been proposed for different applications. Unfortunately, most of them either have some security weaknesses or suffer from unsatisfactory performance. Recently, Ali and Pal proposed a three‐factor user‐authentication protocol for multiserver environment. They claimed that their protocol can provide mutual authentication and is secure against many kinds of attacks. However, we find that Ali and Pal's protocol cannot provide user anonymity and is vulnerable to 4 kinds of attacks. To enhance security, we propose a new user‐authentication protocol for multiserver environment. Then, we provide a formal security analysis and a security discussion, which indicate our protocol is provably secure and can withstand various attacks. Besides, we present a performance analysis to show that our protocol is efficient and practical for real industrial environment. |
| |
| Keywords: | biometrics Ellipse Curve Cryptography (ECC) multiserver user authentication |
|
|
