School of Mathematics and Physical Science of Xuzhou Institute of Technology, 221008, Jiangsu Province, China

---

Abstract—Two-factor authentication using password and smart card could reduce the risk than the use of a password alone. Recently, Chen et al. proposed a two-factor remote user authentication protocol using password and smart card and provide the criteria of authentication protocols. They claimed their protocol is secure against certain known attacks. In this paper, the authors showed that Chen et al.’s scheme is still vulnerable to the off-line password guessing attack, privileged administrator attack, key control attack and lacks of forward security. To solve these security problems, we propose an efficient two-factor authentication and key agreement protocol.

Index Terms—authentication, smart card, forward secrecy, off-line password guessing attack, Privileged administrator

[PDF]

Cite: Fenghua Liu, "Efficient Two-Factor Authentication Protocol Using Password and Smart Card," Journal of Computers vol. 8, no. 11, pp. 3257-3263, 2013.