An Enhanced Secure Authentication Scheme with Anonymity for Wireless Environments

Woongryul JEON  Jeeyeon KIM  Junghyun NAM  Youngsook LEE  Dongho WON 

Publication
IEICE TRANSACTIONS on Communications  Vol.E95-B  No.7  pp.2505-2508
Publication Date: 2012/07/01
Online ISSN: 1745-1345
Print ISSN: 0916-8516
Type of Manuscript: LETTER
Category: Terrestrial Wireless Communication/Broadcasting Technologies
Keyword: 
wireless communication,  anonymity,  user authentication,  password guessing attack, 

Full Text: PDF(201.9KB)

Summary: 
As anonymity increasingly becomes a necessary and legitimate aim in many applications, a number of anonymous authentication schemes have been suggested over the years. Among the many schemes is Lee and Kwon's password-based authentication scheme for wireless environments. Compared with previous schemes, Lee and Kwon's scheme not only improves anonymity by employing random temporary IDs but also provides user-friendliness by allowing human-memorable passwords. In this letter, we point out that Lee and Kwon's scheme, despite its many merits, is vulnerable to off-line password guessing attacks and a forgery attack. In addition, we show how to eliminate these vulnerabilities.