To authenticate a remote user over an insecure channel, which widely deployed in e-commerce, e-government, information security, business management and many more, we propose a scheme without using smartcards. Due to the elliptic curve discrete logarithm problem, the proposed scheme is safe and efficient. Moreover, it achieves the following merits: no verification table, user friendly property, mutual authentication, no time-synchronization problem, suitable for multi-server environment and simple storage device.