title: An Improvement of Robust Biometrics-Based Authentication and Key Agreement Scheme for Multi-Server Environments Using Smart Cards.
abstract: In multi-server environments, user authentication is a very important issue because it provides the authorization that enables users to access their data and services; furthermore, remote user authentication schemes for multi-server environments have solved the problem that has arisen from user's management of different identities and passwords. For this reason, numerous user authentication schemes that are designed for multi-server environments have been proposed over recent years. In 2015, Lu et al. improved upon Mishra et al.'s scheme, claiming that their remote user authentication scheme is more secure and practical; however, we found that Lu et al.'s scheme is still insecure and incorrect. In this paper, we demonstrate that Lu et al.'s scheme is vulnerable to outsider attack and user impersonation attack, and we propose a new biometrics-based scheme for authentication and key agreement that can be used in multi-server environments; then, we show that our proposed scheme is more secure and supports the required security properties.
authors.affiliation: Department of Computer Engineering, Sungkyunkwan University, Suwon, Gyeonggido 16419, Korea.
authors.forename: Jongho
authors.initials: J
authors.lastname: Moon
authors.affiliation: Department of Computer Engineering, Sungkyunkwan University, Suwon, Gyeonggido 16419, Korea.
authors.forename: Younsung
authors.initials: Y
authors.lastname: Choi
authors.affiliation: Department of Computer Engineering, Sungkyunkwan University, Suwon, Gyeonggido 16419, Korea.
authors.forename: Jaewook
authors.initials: J
authors.lastname: Jung
authors.affiliation: Department of Computer Engineering, Sungkyunkwan University, Suwon, Gyeonggido 16419, Korea.
authors.forename: Dongho
authors.initials: D
authors.lastname: Won
mesh_terms: D056667:Biometric Identification / Q000379:methods*; D016494:Computer Security; D003201:Computers; D003219:Confidentiality; D000069098:Health Smart Cards / Q000379:methods*; D006801:Humans; D014584:User-Computer Interface