Password Authentication Schemes with Multi-Servers

Abstract

Password authentication is an essential ap-proach for users to access a network. Up to now, there are many password authentication schemes proposed. However, many schemes suffer from security risks such as impersonation, replay or guessing attacks, etc. In this paper, we propose two remote password authentication schemes with multi-servers. One scheme is based on geometric approach and the other is based on one-way hash function. Both of the schemes au-thenticate users without verification tables while the replay and guessing attacks are concealed. Since a one-time pad is used in the login phase, the proposed schemes can efficiently protect a lost smart card.