A Robust and Efficient Smart Card Oriented Remote User Authentication Protocol

Authentication and key agreement protocols are foundation for the security of distributed applications. In 2010, Yeh et al. proposed two authenticated key agreement protocols. The second protocol in Yeh et al. features user´s anonymity. However, we found that the second scheme is vulnerable to replay attack, masquerade attack, and off-line password attack. In this paper, we first analyze Yeh et al.´s security flaws; then, we propose a protocol that overcomes all the weaknesses of the aforementioned protocol.