A Three-Factor Remote Authentication Scheme for Multi-server Environment

摘要

In this paper, we investigate Chen et al. biometrics-based remote user authentication scheme and find that it cannot validate the correctness of the password, complete the storage and verification of the password, and vulnerable to anonymity attacks, smart card stolen attacks and forgery attacks. To remedy these flaws, we propose an improved three-factor remote authentication scheme based on smart cards. It can implement mutual authentication and generate session keys to effectively improve security in multi-server environments. The proposed scheme can resist smart card attack, anonymity attack, forgery attack and other attacks. In addition, the proposed scheme costs 5T_h more compare to Chen et al. work and less computation complexity compared with other schemes.