Security vulnerabilities of an remote password authentication scheme with smart card

摘要

The two-factor authentication scheme combined password with smart card is one of the most widely used methods. This paper analyzes the security performance of a latest proposed remote user authentication scheme and simulates the attacks it suffers: it's vulnerability to the password guessing attack, the server masquerade attack and lacks of password backward security. Based on the detailed security analysis, this paper would propose some useful suggestions for designing the secure scheme.