Security Analysis and Improvement of a Multi-Factor Biometric-Based Remote Authentication Scheme

摘要

Since the advent of the Internet technology, many remote user authentication protocols have been designed and developed which makes secure communication between a user and a server possible over an insecure channel. One of the first multi-factor biometric-based authentication scheme is known as the Li-Hwang protocol. Since then, there have been many analyses and improvements on the protocol to make it more secure. The most recently enhanced multi-factor biometric-based authentication has been proposed by Park et al. However, this research shows that several weaknesses can still be found including an attack on the integrity of a protocol message, the possibility of a replay attack and the lack of proof of message authenticity. This research, therefore, proposes an improved multi-factor biometric-based authentication scheme which has also been proved secure, using the GNY logic, against the mentioned attacks.