Search

Remote systems authentication schemes need more research and investigation due to increasing of hackers and attacks with the population of wired and wireless traffic. All of the popular remote user and system authentication schemes are fixed authentication and provides only entity authentication, not provides any data authentication. Recently Das proposed a flexible remote systems authentication scheme using smart card (8) that checks authenticity of user as well as remote system. In this paper, we show that Das's scheme is not withstand the modification attack, reverse XOR attack and adversary system attack. We have proposed Modified Das's scheme which serves as entity authentication as well as data authentication. We have applied Automatic Variable Password technique (AVP) to make the password unbreakable by changing it session to session. Application of AVP made the Das's scheme a Time Variant Authentication scheme that checks the authenticity of remote user time to time. We show that how Modified Das's scheme defenses modification attack, reverse XOR attack and adversary system attack.

Authentication of mobile subscribers and network is a challenging issue to the researchers, since hacking and threats are increasing with the enhanced population of wireless traffic. Now mobile communication system (3-G or advanced) has been developed to speed up the data communication. 3-G mobile communication uses two different switching techniques: circuit switching for voice and low speed data communications, and packet switching mainly for data communication, but can afford voice communication like VoIP (Voice Over Internet Protocol), video telephony, multimedia service etc. Generally high speed data communication uses packet switching process through PDSN (Packet Data Serving Node) servers. In circuit switching (3-G network), authentication is mutual where both MS and network (MSC) authenticate each other, but in packet switching only network (servers in PDSN) examines the authenticity of MS. In this paper, we propose a mutual authentication technique that verifies the authenticity of the subscriber as well as the network (MSC or PDSN) by subscriber's password, SIM and biometric property of the subscriber. Two biometric parameters are used in which one biometric parameter is stored in SIM and the other biometric parameter taken as frequency of Flipping or Clapping sound of the subscriber, called certified document (CD), is stored at server (MSC or PDSN). An algorithm is developed by these four entities to check this authentication process, termed biometric entity based mutual authentication technique for 3-G mobile communications.

Authentication of mobile subscriber is a challenge of future researchers due to increasing security threats and attacks with the enhanced population of wireless traffic. 3G mobile communication system has been developed to speed up the data communication. In general the authentication technique in 2G mobile communication is solely dependent on checking the authenticity of MS (Mobile Station or Subscriber) by challenge/response mechanism. Here authenticity is one-way for which MSC (Mobile or Main Switching Center) checks the validity of MS. 3G mobile communication works on two different switching techniques. One is circuit switching for voice and low speed data communications. The other one is packet switching mainly for data communication, but can afford voice communication like VoIP (Voice Over Internet Protocol), video telephony, multimedia service etc. Generally high speed data communication is established by packet switching process through PDSN (Packet Data Serving Node) servers. In circuit switching (3G network) authentication is mutual where both MS and MSC or network authenticate each other, but in packet switching only network (servers in PDSN) examines the authenticity of MS. In this paper, we enlighten different new approaches that can be effectively used as an authentication tool in 3G mobile communications.

Authentication of remote user and server is a great research challenge in today’s advanced wired and wireless communication. Recently Das proposed a flexible remote system authentication using smart card [7]. Xu et al. proved that Khan et al.’s fingerprint based remote user authentication is vulnerable to the impersonation and parallel session attack [10]. In this paper, we show that Das’s scheme is not withstand the reverse XOR and adversary system attack. We also propose an improved remote user and server authentication that verifies the authenticity of user by user’s password, smart card and biometric property of user. The technique is insulated from the reverse XOR, adversary system, impersonation and parallel session attacks INDEXING TERMS: Authentication, Remote System, Password, Smart card, Biometric.