Password authentication schemes with smart cards

Abstract

In this paper, two password authentication schemes with smart cards are proposed. In the schemes, users can change their pass-words freely, and the remote system does nor need the directory of passwords or verification tables to authenticate users. Once the secure network environment is see up, authentication can be handled solely by the two parries involved. For a network without synchronized clocks, the proposed nonce-based authentication scheme is able to prevent malicious reply attacks.