Anonymous and Authentication Protocol For Multi-Server

Abstract

In a multi-server environment, when a user wants to login toa different server to access services, he needs to registeranother user identity and password. Recently, thesingle sign-on authentication method was been proposed. The majorcharacteristic of this method is that a user only needs to rememberone identity and password which can login to different servers.This reduces user inconvenience and server resource usage.On other hand, anonymity is an important issue. If a user's identity is disclosed, an attacker can trace ormasquerade as the user to login servers. How to prevent disclosure of the user'sidentity is very important. In this paper, we will propose ananonymous and single sign-on authentication scheme based onLagrange interpolating polynomial for a multi-server environment.According to our security analysis, this proposed scheme maintains anonymity, provides mutual authentication and alsoresists many attacks such as lost smart card, insiderattack and replay attack.

DOI: http://dx.doi.org/10.5755/j01.itc.46.2.13781