Complementary Scheme of Remote User Access over Insecure Networks

Abstract

Password authentication over unreliable networks is the most popular method in the Internet and mobile communication environments. Lately, Peyravian and Jeffries proposed the password-based remote user authentication protocol, password change, and session key establishment over insecure networks without requiring and any additional privatekey or public-key infrastructure. However, Peyravian-Jeffries's protocols have the security flaws against off-line password guessing attacks and DOS attacks. In this paper we suggest a complementary protocol to solve the security flaws of PeyravianJeffries's protocol.