The Modified Scheme is still vulnerable to the parallel Session Attack

TL;DR

This paper analyzes a recent smart card-based remote authentication scheme and demonstrates that it remains vulnerable to parallel session attacks despite modifications aimed at improving security.

Contribution

The paper provides a security analysis showing that the modified scheme by Yoon et al. is still susceptible to parallel session attacks, highlighting ongoing vulnerabilities.

Findings

The modified scheme is vulnerable to parallel session attacks.

Previous security improvements did not eliminate all vulnerabilities.

The analysis emphasizes the need for more robust authentication protocols.

Abstract

In 2002, Chien–Jan–Tseng introduced an efficient remote user authentication scheme using smart cards. Further, in 2004, W. C. Ku and S. M. Chen proposed an efficient remote user authentication scheme using smart cards to solve the security problems of Chien et al.’s scheme. Recently, Hsu and Yoon et al. pointed out the security weakness of the Ku and Chen’s scheme Furthermore, Yoon et al. modified the password change phase of Ku and Chen’s scheme and they also proposed a new efficient remote user authentication scheme using smart cards. This paper analyzes that the modified scheme of Yoon et al. still vulnerable to parallel session attack.