dynamic identity based authentication protocol for two-server architecture动态的基于身份的认证协议包含两个服务器的体系结构.pdfVIP

Journal of Information Security, 2012, 3, 326-334 /10.4236/jis.2012.34040 Published Online October 2012 (http://www.SciRP.org/journal/jis) Dynamic Identity Based Authentication Protocol for Two-Server Architecture Sandeep K. Sood Department of Computer Science Engineering, Regional Campus Gurdaspur, Gurdaspur, India Email: san1198@ Received July 17, 2012; revised August 23, 2012; accepted September 3, 2012 ABSTRACT Most of the password based authentication protocols make use of the single authentication server for user’s authentica- tion. User’s verifier information stored on the single server is a main point of susceptibility and remains an attractive target for the attacker. On the other hand, multi-server architecture based authentication protocols make it difficult for the attacker to find out any significant authentication information related to the legitimate users. In 2009, Liao and Wang proposed a dynamic identity based remote user authentication protocol for multi-server environment. However, we found that Liao and Wang’s protocol is susceptible to malicious server attack and malicious user attack. This paper presents a novel dynamic identity based authentication protocol for multi-server architecture using smart cards that re- solves the aforementioned flaws, while keeping the merits of Liao and Wang’s protocol. It uses two-server paradigm by imposing different levels of trust upon the two servers and the user’s verifier information is distributed between these two servers known as the service provider server and the control server. The proposed protocol is practical and compu- tational efficient because only nonce, one-way hash function and XOR operations are used in i