Improved remote login scheme based on ECC

Password based remote user authentication over unreliable network is the traditional method in the Internet. A variety of password authentication schemes have been published in literature for electronic commerce environment; however, none of them is secure against various types of attack. In 2008, Zhu et al. proposed an improved remote login scheme over the Hwang and Yah´s scheme. In this paper we show the Zhu et al.´s scheme still has some security flaws and then we proposed an improved remote login scheme on elliptic curve cryptosystem. The proposed technique supports remote user mutual authentication with session key agreement and secure password change scheme. Moreover, the proposed scheme provides different relevant security attributes and bears less computational cost and low storage space.