By Topic

A New Low Cost One Time ID and Password Authentication Protocol Using Popular Removable Storage Devices

Sign In

Cookies must be enabled to login.After enabling cookies , please use refresh or reload or ctrl+f5 on the browser for the login options.

The purchase and pricing options are temporarily unavailable. Please try again later.
2 Author(s)
Li TongLiang ; Sch. of Comput. Sci. & Technol., Tianjin Univ., Tianjin, China ; Jin ZhiGang

User authentication is very important to information security. In this paper, we present an economical hash-based strong password authentication scheme by using of a popular removable storage device. With the help of the new scheme, the user can ¿remember¿ a random number that is not only a part of the user's ID but also a part of user's password, which makes the scheme to be one-time ID and one-time password with user identity protection. Mutual authentication is supported, which makes the scheme has the ability of message freshness and principal liveness. In this scheme, no plain text transferred, and data are protected each other by using hash functions, and most of the common attacks can be avoided. Furthermore, the server and the user exchange two random numbers that can be used to build a session key after authentication. Different methods of constructing the key influence the scheme security, an analysis of it is also be given.

Published in:

Intelligent Networks and Intelligent Systems, 2009. ICINIS '09. Second International Conference on

Date of Conference:

1-3 Nov. 2009