A Novel Approach for Biometric Based Remote User Authentication Scheme using Smart Card

摘要

In the remote authentication scheme, a remote user and the server mutually authenticates each other and draws a common session key over insecure channel. The smart card of user contains the parameters based on the biometric data of user itself. Indeed in ICISS'13 Ankita et al. presented the efficient scheme for the biometric based remote user authentication. In this paper we identify that Ankita et al.'s scheme is susceptible to man-in-middle attack. Additionally it fails to provide user anonymity. We used the concept of hybrid attack in which values from one attack scenario is used to launch another attacks in the future. This is visualization of the attacker exist in the real time scenario. Additionally, we present the scheme to overcome the proposed attacks.