Weaknesses of a Dynamic ID-Based Remote User Authentication Scheme with Session Key Agreement for Multi-server Environment

摘要

In 2010, Martinez-Pelaez et al. proposed an remote user authentication scheme with session key agreement for multi-server environment. They claimed that their scheme is efficient and secure against known attacks. However, this work shows that Martinez-Pelaez et al.'s scheme is exposed to various attacks. In this paper, we describe that Martinez-Pelaez et al.'s scheme is vulnerable to masquerade attack, server spoofig attack, stolen smart card attack, and is not easily repairable.