An improved Hwang-Lee-Tang remote user authentication scheme

Abstract

In this paper, we present a secure and efficient remote authentication scheme by improving Hwang-Lee-Tang's scheme. The security of our scheme is based on the onewayness and collision-resistance properties of the hash functions being used. The proposed scheme is able to withstand all commonly known attacks against remote authentication schemes. In addition, the scheme does not store a password table on the server, provides mutual authentication between the user and the server, does not reveal user's password to the server, allows the user to freely choose a password of her choice, and allows the user to change her password by running a simple protocol with the server.