Robust Biometrics-Based Remote User Authentication Scheme Using Smart Cards

Communications in the wireless environments are more and more popular. Consequently, it is necessary to have a secure authentication scheme to protect transactions between users and servers from illegal adversaries. Especially, users are people vulnerable to attacks and there are many authentication schemes with smart cards proposed to guarantee them. Recently, Li et al have proposed a biometrics-based scheme to enhance security for authentication. They claimed that their scheme truly is more secure than previous ones and it can resist various attacks. However, it is not true. Their scheme is vulnerable to replay attack, man-in-the-middle attack, stolen-verifier attack and doesn´t have forward secrecy property. Furthermore, their scheme cannot protect user´s anonymity. So, adversaries can steal identity to re-register to obtain secret key to impersonate user. In this paper, we present an improvement to their scheme in order to isolate such problems.