Robust Biometrics Based Three-Factor Remote User Authentication Scheme with Key Agreement

Recently, An pointed out the weaknesses of Das´s three-factor remote user authentication scheme, and proposed an improved biometric based three-factor remote user authentication scheme. An´s scheme improves the security problems of previous schemes while keeping the efficiency. However, after detailed analysis, we find that An´s scheme exists some weaknesses such as vulnerable to denial-of-service (DoS) attack and forgery attack, and does not provide session key agreement. In order to provide high-level of security and more useful functions, we design a new robust biometric based three-factor remote user authentication scheme with key agreement using elliptic curve cryptosystem.