{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,1,28]],"date-time":"2026-01-28T06:24:29Z","timestamp":1769581469053,"version":"3.49.0"},"reference-count":48,"publisher":"Wiley","license":[{"start":{"date-parts":[[2017,1,1]],"date-time":"2017-01-01T00:00:00Z","timestamp":1483228800000},"content-version":"unspecified","delay-in-days":0,"URL":"http:\/\/creativecommons.org\/licenses\/by\/4.0\/"}],"funder":[{"DOI":"10.13039\/501100001809","name":"National Natural Science Foundation of China","doi-asserted-by":"publisher","award":["61401038"],"award-info":[{"award-number":["61401038"]}],"id":[{"id":"10.13039\/501100001809","id-type":"DOI","asserted-by":"publisher"}]},{"DOI":"10.13039\/501100001809","name":"National Natural Science Foundation of China","doi-asserted-by":"publisher","award":["2016B010110002"],"award-info":[{"award-number":["2016B010110002"]}],"id":[{"id":"10.13039\/501100001809","id-type":"DOI","asserted-by":"publisher"}]},{"name":"Guangdong Provincial Science and Technology Department Frontier and Key Technology Innovation Project","award":["61401038"],"award-info":[{"award-number":["61401038"]}]},{"name":"Guangdong Provincial Science and Technology Department Frontier and Key Technology Innovation Project","award":["2016B010110002"],"award-info":[{"award-number":["2016B010110002"]}]}],"content-domain":{"domain":[],"crossmark-restriction":false},"short-container-title":["Security and Communication Networks"],"published-print":{"date-parts":[[2017]]},"abstract":"<jats:p>Remote user authentication is the first step to guarantee the security of online services. Online services grow rapidly and numerous remote user authentication schemes were proposed with high capability and efficiency. Recently, there are three new improved remote user authentication schemes which claim to be resistant to various attacks. Unfortunately, according to our analysis, these schemes all fail to achieve some critical security goals. This paper demonstrates that they all suffer from offline dictionary attack or fail to achieve forward secrecy and user anonymity. It is worth mentioning that we divide offline dictionary attacks into two categories: (1) the ones using the verification from smart cards and (2) the ones using the verification from the open channel. The second is more complicated and intractable than the first type. Such distinction benefits the exploration of better design principles. We also discuss some practical solutions to the two kinds of attacks, respectively. Furthermore, we proposed a reference model to deal with the first kind of attack and proved its effectiveness by taking one of our cryptanalysis schemes as an example.<\/jats:p>","DOI":"10.1155\/2017\/1619741","type":"journal-article","created":{"date-parts":[[2017,7,17]],"date-time":"2017-07-17T17:02:12Z","timestamp":1500310932000},"page":"1-14","source":"Crossref","is-referenced-by-count":22,"title":["Cryptanalysis of Three Password-Based Remote User Authentication Schemes with Non-Tamper-Resistant Smart Card"],"prefix":"10.1155","volume":"2017","author":[{"ORCID":"https:\/\/orcid.org\/0000-0002-6527-2897","authenticated-orcid":true,"given":"Chenyu","family":"Wang","sequence":"first","affiliation":[{"name":"School of CyberSpace Security, Beijing University of Posts and Telecommunications, Beijing 100876, China"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Guoai","family":"Xu","sequence":"additional","affiliation":[{"name":"School of CyberSpace Security, Beijing University of Posts and Telecommunications, Beijing 100876, China"}],"role":[{"role":"author","vocabulary":"crossref"}]}],"member":"311","reference":[{"key":"1","doi-asserted-by":"publisher","DOI":"10.1109\/TCC.2015.2491933"},{"key":"2","doi-asserted-by":"publisher","DOI":"10.1109\/tpds.2015.2506573"},{"key":"4","doi-asserted-by":"crossref","first-page":"37","DOI":"10.1016\/j.jnca.2016.10.001","volume":"76","year":"2016","journal-title":"Journal of Network & Computer Applications"},{"key":"5","doi-asserted-by":"publisher","DOI":"10.1145\/358790.358797"},{"key":"6","doi-asserted-by":"publisher","DOI":"10.1002\/scj.4690220704"},{"key":"7","doi-asserted-by":"publisher","DOI":"10.1109\/4234.585805"},{"key":"10","doi-asserted-by":"publisher","DOI":"10.1049\/ip-e.1991.0022"},{"key":"11","doi-asserted-by":"publisher","DOI":"10.1109\/TDSC.2016.2605087"},{"key":"12","doi-asserted-by":"publisher","DOI":"10.1109\/TPDS.2010.206"},{"key":"13","doi-asserted-by":"publisher","DOI":"10.1109\/TIFS.2015.2473820"},{"key":"14","doi-asserted-by":"publisher","DOI":"10.1016\/j.ins.2015.03.070"},{"key":"15","doi-asserted-by":"publisher","DOI":"10.1109\/TIFS.2015.2439964"},{"key":"16","doi-asserted-by":"publisher","DOI":"10.1109\/cc.2016.7559076"},{"key":"17","doi-asserted-by":"publisher","DOI":"10.1109\/JSYST.2014.2301517"},{"key":"18","doi-asserted-by":"publisher","DOI":"10.1109\/TCE.2004.1309441"},{"issue":"3","key":"19","doi-asserted-by":"crossref","first-page":"305","DOI":"10.1016\/j.comcom.2010.02.011","volume":"34","year":"2011","journal-title":"Computer Communications"},{"key":"20","doi-asserted-by":"publisher","DOI":"10.1002\/dac.2552"},{"key":"22","doi-asserted-by":"publisher","DOI":"10.1016\/j.comcom.2008.11.008"},{"key":"23","doi-asserted-by":"publisher","DOI":"10.1016\/j.jss.2012.06.063"},{"key":"25","doi-asserted-by":"publisher","DOI":"10.1109\/TC.2002.1004593"},{"key":"27","doi-asserted-by":"publisher","DOI":"10.1109\/TIE.2009.2028351"},{"key":"28","doi-asserted-by":"publisher","DOI":"10.1109\/tii.2012.2230639"},{"key":"29","doi-asserted-by":"publisher","DOI":"10.1109\/TDSC.2014.2355850"},{"key":"30","doi-asserted-by":"publisher","DOI":"10.1016\/j.csi.2010.03.008"},{"key":"31","doi-asserted-by":"publisher","DOI":"10.1016\/j.csi.2008.09.006"},{"key":"33","doi-asserted-by":"publisher","DOI":"10.1002\/dac.2368"},{"key":"34","doi-asserted-by":"publisher","DOI":"10.1002\/dac.2590"},{"key":"35","doi-asserted-by":"publisher","DOI":"10.1016\/j.jnca.2013.02.034"},{"key":"36","doi-asserted-by":"publisher","DOI":"10.1002\/dac.2468"},{"key":"38","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-642-30436-1_40"},{"key":"39","doi-asserted-by":"publisher","DOI":"10.1016\/j.jnca.2012.01.007"},{"issue":"2","key":"40","doi-asserted-by":"crossref","first-page":"763","DOI":"10.1016\/j.jnca.2011.11.009","volume":"35","year":"2012","journal-title":"Journal of Network & Computer Applications"},{"key":"41","doi-asserted-by":"publisher","DOI":"10.1109\/TIFS.2016.2573746"},{"key":"42","doi-asserted-by":"publisher","DOI":"10.1002\/dac.2853"},{"key":"43","doi-asserted-by":"publisher","DOI":"10.1631\/FITEE.1400232"},{"key":"44","year":"2016","journal-title":"Security & Communication Networks"},{"key":"45","doi-asserted-by":"publisher","DOI":"10.1002\/sec.1238"},{"key":"46","doi-asserted-by":"publisher","DOI":"10.1007\/s11277-016-3297-6"},{"key":"47","doi-asserted-by":"publisher","DOI":"10.1109\/JSYST.2016.2574719"},{"key":"48","doi-asserted-by":"publisher","DOI":"10.1109\/TDSC.2013.2297110"},{"key":"50","first-page":"111","year":"2016","journal-title":"Proceedings of ESORICS"},{"key":"51","doi-asserted-by":"publisher","DOI":"10.1002\/dac.2793"},{"key":"52","first-page":"114","volume-title":"Secure password-based remote user authentication scheme with non-tamper resistant smart cards","volume":"7371","year":"2012"},{"key":"53","doi-asserted-by":"publisher","DOI":"10.1007\/s11277-015-2896-y"},{"issue":"4","key":"54","first-page":"782","volume":"18","year":"2016","journal-title":"International Journal of Network Security"},{"key":"55","doi-asserted-by":"publisher","DOI":"10.1002\/dac.2767"},{"issue":"(4-5)","key":"56","first-page":"282","volume":"19","year":"2014","journal-title":"Journal of Information Security & Applications"},{"key":"57","doi-asserted-by":"publisher","DOI":"10.1002\/dac.3242"}],"container-title":["Security and Communication Networks"],"original-title":[],"language":"en","link":[{"URL":"http:\/\/downloads.hindawi.com\/journals\/scn\/2017\/1619741.pdf","content-type":"application\/pdf","content-version":"vor","intended-application":"text-mining"},{"URL":"http:\/\/downloads.hindawi.com\/journals\/scn\/2017\/1619741.xml","content-type":"application\/xml","content-version":"vor","intended-application":"text-mining"},{"URL":"http:\/\/downloads.hindawi.com\/journals\/scn\/2017\/1619741.pdf","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2017,7,17]],"date-time":"2017-07-17T17:02:18Z","timestamp":1500310938000},"score":1,"resource":{"primary":{"URL":"https:\/\/www.hindawi.com\/journals\/scn\/2017\/1619741\/"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2017]]},"references-count":48,"alternative-id":["1619741","1619741"],"URL":"https:\/\/doi.org\/10.1155\/2017\/1619741","relation":{},"ISSN":["1939-0114","1939-0122"],"issn-type":[{"value":"1939-0114","type":"print"},{"value":"1939-0122","type":"electronic"}],"subject":[],"published":{"date-parts":[[2017]]}}}