Smartcard-based remote authentication scheme preserving user anonymity

Abstract

Since Lamport designed the authentication scheme, remote user authentication methods has been continuously developed on the basic of the various researches. Recently the study providing user's anonymity on communications channel has been carried out actively for privacy protection. In 2009, Xu et al. suggested the authentication scheme by smart card that was proved possible and safe. But it couldn't guarantee anonymity because identifier was exposed and it also was vulnerable to several blows of attackers because of the vulnerability in login and authentication information. In this paper, We will analyze the scheme of Xu et al.'s and suggest an improved scheme that is safe against anonymity, Session key's vulnerability to impersonation attacks, dictionary attack, impersonation attack, restricted replay attack.