A simple remote user authentication scheme

Abstract

In this article, we propose a simple remote user authentication scheme using smart cards. This scheme has the following features. First, it does not require any password or verification tables. Second, it can withstand the message replay attack. Third, any legal users can arbitrarily choose and change their own passwords at will. And finally, the password of a user is not revealed to the server. In addition, the computational costs of this scheme are less than those of any previously proposed schemes. (C) 2002 Elsevier Science Ltd. All rights reserved.