naa a22 4500 51079176X CHVBK 20180411083322.0 cr unu---uuuuu 180411e20130801xx s 000 0 eng 10.1007/s11277-012-0918-6 doi (NATIONALLICENCE)springer-10.1007/s11277-012-0918-6 A New Password-Based Multi-server Authentication Scheme Robust to Password Guessing Attacks [Elektronische Daten] [Jia-Lun Tsai, Nai-Wei Lo, Tzong-Chen Wu] A multi-server authentication scheme is a useful authentication mechanism in which a remote user can access the services of multiple servers after registering with the registration center (RC). This study shows that the password-based multi-server authentication scheme proposed by Yeh and Lo is vulnerable to undetectable password-guessing attack and offline password-guessing attack. This study proposes a new password-based multi-server authentication scheme to overcome these vulnerabilities. The proposed protocol introduces a new mechanism for protecting user password. The RC sends an alternative key to help the server verify the legitimacy of user instead of the user's password. The values of these keys are changed with a random large nonce in each session. Therefore, the password-guessing attack cannot work successfully on the proposed scheme. Springer Science+Business Media New York, 2012 Password nationallicence Multi-server nationallicence Authentication scheme nationallicence Undetectable on-line password-guessing attack nationallicence Tsai Jia-Lun Department of Information Management, National Taiwan University of Science and Technology, 106, Taipei, Taiwan aut Lo Nai-Wei Department of Information Management, National Taiwan University of Science and Technology, 106, Taipei, Taiwan aut Wu Tzong-Chen Department of Information Management, National Taiwan University of Science and Technology, 106, Taipei, Taiwan aut Wireless Personal Communications Springer US; http://www.springer-ny.com 71/3(2013-08-01), 1977-1988 0929-6212 71:3<1977 2013 71 11277 https://doi.org/10.1007/s11277-012-0918-6 text/html Onlinezugriff via DOI 1 research-article jats NATIONALLICENCE 856 40 https://doi.org/10.1007/s11277-012-0918-6 text/html Onlinezugriff via DOI NATIONALLICENCE 700 1- Tsai Jia-Lun Department of Information Management, National Taiwan University of Science and Technology, 106, Taipei, Taiwan aut NATIONALLICENCE 700 1- Lo Nai-Wei Department of Information Management, National Taiwan University of Science and Technology, 106, Taipei, Taiwan aut NATIONALLICENCE 700 1- Wu Tzong-Chen Department of Information Management, National Taiwan University of Science and Technology, 106, Taipei, Taiwan aut NATIONALLICENCE 773 0- Wireless Personal Communications Springer US; http://www.springer-ny.com 71/3(2013-08-01), 1977-1988 0929-6212 71:3<1977 2013 71 11277 Metadata rights reserved Springer special CC-BY-NC licence nationallicence BK010053 XK010053 XK010000 NATIONALLICENCE NATIONALLICENCE NL-springer