摘要：

Identity authentication is the precondition for secure communication between the client and the server. Kim and Chung presented a mutual authentication scheme for client/server scene. The authors realized the mutual authentication with the lower computational cost. Based on the security analysis in this paper, it finds Kim-Chung scheme is not secure because of the off-line password guessing attack, unlimited on-line password guessing attack and server impersonation attack. To solve these security problems, it improves this protocol and discusses the security and efficiency of the novel scheme, it also proves the correctness of the protocol using BAN logic.

展开