Cryptanalysis And Further Improvement Of A Biometric-Based Remote User Authentication Scheme Using Smart Cards

摘要

Recently, Li et al. proposed a secure biometric-based remote userauthentication scheme using smart cards to withstand the security flaws ofLi-Hwang's efficient biometric-based remote user authentication scheme usingsmart cards. Li et al.'s scheme is based on biometrics verification, smart cardand one-way hash function, and it also uses the random nonce rather than asynchronized clock, and thus it is efficient in computational cost and moresecure than Li-Hwang's scheme. Unfortunately, in this paper we show that Li etal.'s scheme still has some security weaknesses in their design. In order towithstand those weaknesses in their scheme, we further propose an improvementof their scheme so that the improved scheme always provides properauthentication and as a result, it establishes a session key between the userand the server at the end of successful user authentication.