A novel smart card mutual authentication scheme for session transfer among registered devices

The goal of this paper is to design a mutual authentication scheme that supports secure data service migration among multiple registered devices (like PC, Laptop, Smartphone, etc.) so that each user can use the most suitable device whenever he/she feels. Authentication based on single factor depends on user's knowledge of some secret i.e. a password or a PIN. However, it is not secure enough. Two factor authentication is one which can be used as strong authentication scheme. This paper proposes mutual authentication scheme for session transfer among registered devices using smart card. Its security relies on the hardness of solving discrete logarithm problem and one way hash function. Random nonce is employed as a replacement for timestamp so as to avoid the cost of implementing clock synchronization between user and the server. Security analysis proves that this scheme is immune to the presented attacks and provides essential security features.