An Efficient Password Authentication Scheme Using Smart Card Based on Elliptic Curve Cryptography

Abstract

Recently, Li proposed a new password authentication and user anonymity scheme based on elliptic curve cryptography. In this paper, we will show that Li's scheme is vulnerable to the impersonation attack and the denial of service attack. Moreover, we also point out that there is an error in his scheme. To overcome the weaknesses of Li's scheme, we proposed an efficient password authentication scheme based on elliptic curve cryptography. The proposed scheme improves the security and efficiency of the authentication process.

A secure two-factor mutual authentication and session key agreement protocol using Elliptic curve cryptography

“…It may be noted that the proposed protocol is secure against various relevant security attacks and achieves several security attributes than other protocols. In Table 3, we summarized the communication cost, computation cost and storage cost of our proposed protocol and other relevant protocol [11,12,13,14]. The total communication cost of our proposed scheme and other relevant scheme [11,12,13,14] are 160*4+512*2=1664, 160*7=1120, 160*5+512=1312, 4*160+1024=1664 and 4*160+1024*2=2688 bits respectively.…”

“…In Table 3, we summarized the communication cost, computation cost and storage cost of our proposed protocol and other relevant protocol [11,12,13,14]. The total communication cost of our proposed scheme and other relevant scheme [11,12,13,14] are 160*4+512*2=1664, 160*7=1120, 160*5+512=1312, 4*160+1024=1664 and 4*160+1024*2=2688 bits respectively. Next, we will compare the memory requirements to store security parameters in the smartcard of the proposed scheme with some other relevant schemes [11,12,13,14].…”

“…In this section, we compare the performance of the proposed protocol with some other existing relevant schemes [11,12,13,14] in terms of several security functionalities, computation and communication cost. In Table 2, we have compared the functionality features of our protocol with other relevant protocols [11,12,13,14]. It may be noted that the proposed protocol is secure against various relevant security attacks and achieves several security attributes than other protocols.…”

“…To eliminate these pitfalls on Islam et al scheme, Li proposed a password authentication scheme with user anonymity based on ECC. However, In 2014 Zhang et al [12] pointed out that Li scheme is vulnerable to impersonation attack and denial of service attack. To overcome the weakness of Li et al's protocol, Zhang et al proposed an improved scheme for better security protection and performance.…”

“…In order to maintain less computation and communication overhead, recently many two-factor authentication schemes based on ECC have been proposed [7][8][9][10][11][12]. In 2013, Islam et al [7] proposed an ECC based password authentication and key agreement using smart card in remote login environment.…”