Abstract:

A remote user authentication scheme based on dynamic ID can achieve mutual authentication between remote users and the server under the premise of ensuring anonymity and untraceability of remote user identity. We analyze the security of Yang’s remote user authentication scheme based on dynamic ID, and point out that Yang’s scheme cannot resist replay attack, sever masquerade attack, user masquerade attack or provide mutual authentication. Aiming at the defects of Yang’s scheme, we propose a multifactor remote user authentication scheme and analyze its security and efficiency. The analysis results show that the improved scheme can overcome the shortcomings of Yang’s scheme and has higher security performance

Key words: dynamic ID, identity authentication, smart card, password, Hash function