Attacks on Yang-Ahn's Fingerprint-Based Remote User Authentication Scheme Using Smart Cards

摘要

Recently, various biometrics-based user authentication schemes using smart cards have been proposed to improve security weaknesses in user authentication system. In 2012, Yang-Ahn proposed a fingerprint-based remote user authentication scheme using smart cards. Yang-Ahn claimed that their proposed scheme is secure against various known attacks. However, this paper points out that Yang-Ahn's scheme is still vulnerable to the forgery attack, the off-line password guessing attack, and the parallel session attack unlike their claim.