Security Analysis of a Remote User Authentication Scheme with Smart Cards

TL;DR

This paper critically examines Yoon et al.'s remote user authentication scheme with smart cards, revealing security vulnerabilities in the password change process and resistance to parallel session attacks.

Contribution

It provides a security analysis of Yoon et al.'s scheme, identifying specific weaknesses and demonstrating that the scheme remains vulnerable despite improvements.

Findings

Password change phase is insecure

Scheme vulnerable to parallel session attack

Security flaws persist in the proposed scheme

Abstract

Yoon et al. proposed a new efficient remote user authentication scheme using smart cards to solve the security problems of W. C. Ku and S. M. Chen scheme. This paper reviews Yoon et al. scheme and then proves that the password change phase of Yoon et al. scheme is still insecure. This paper also proves that the Yoon et al. is still vulnerable to parallel session attack.