An Anti-phishing User Authentication Scheme without Using a Sensitive Key Table

Abstract

Phishing is a popular technique that attackers use for the obtainment of sensitive information about users. Last year, over 44 million users became victims of phishing websites. Mutual authentication between user and server is an essential part of anti-phishing mechanisms. Lee et al. proposed a scheme that achieves mutual authentication to protect users from phishing attacks. However, a sensitive key table is necessary if users want to achieve mutual authentication on different servers. This attracts attackers' attention and increases the cost of maintaining the key. In this paper, a novel anti-phishing authentication scheme without a sensitive key table is presented. No sensitive key table is needed if the user is present at that time. Moreover, the proposed scheme can prevent guessing and replay attacks, which are serious threats to user authentication.

Image Based Mutual Authentication to Enhance the Web Security

“…Wei-Bin Lee, et. al., [13] has proposed their work based on Anti Phishing scheme, where the mutual authentication was done between the user and the server. As we need a sensitive key table for achieving this, here, the system is developed without using the key table.…”