A Secure Password-Based Authentication Scheme Against Guessing Attack

摘要

Password-based authentication is an important security mechanism to identify users and prevent databases from unauthorized access. Unfortunately, people usually choose short passwords and many protocols have security flaws such that many password authentication schemes suffer from various attacks. In 2000, Sandirigama et al. used a one-way hash function to propose a simple password authentication scheme. In this chapter, we will show that their scheme cannot resist guessing attack. We propose an improved scheme to enhance the security. The improved scheme provides mutual authentication and can resist guessing attack, denial-of-service attack, and replay attack.