期刊名称:International Journal of Security and Its Applications
印刷版ISSN:1738-9976
出版年度:2012
卷号:6
期号:2
出版社:SERSC
摘要:Recently, Chang and Cheng proposed a robust mechanism for smart card based remote logins in a multi-server architecture. However, based on the security analyzes conducted by us, we find their mechanism is vulnerable against smart card lost problems, leak-of-verifier attack and session key disclosure attack. To eliminate all identified security threats in their mechanism, we further proposed an improved version of two-factor based user authentication protocol in multi-server networks.