An improved dynamic ID-based remote user authentication with key agreement scheme

In 2011, Lee et al. improved Hsiang et al.'s scheme and proposed a security dynamic ID-based remote user authentication scheme for multi-server environment using smart cards. They claimed that their protocol is efficient and can resist several kinds of known attacks. However, we observe that Lee et al.'s scheme is still vulnerable to stolen smart card attack, malicious server attack. To remedy these security weaknesses, we propose an improved dynamic ID-based remote user authentication scheme which is immune to those attacks mentioned above. Besides, performance analysis shows that compared with other remote user authentication schemes, the proposed scheme possesses lower power consumption and lower computation cost. As a result, the proposed scheme seems to be more security and efficient, and more practical for users with portable mobile devices in multi-server environments. Keywords-Dynamic ID; authentication; key agreement; multi-server; smart card