Improvement of Yen-Laih Dynamic Access Control Scheme with User Authentication

Abstract

The authors show that Yen and Laih's dynamic access control scheme with authentication does not achieve the security requirements as they claimed. That is, any legitimate user can successfully fool the system to act as another legitimate user and take over all access privileges granted by that user. The authors also present an improvement that can eliminate the security flaw inherent in the original Yen-Laih scheme.