{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2025,10,12]],"date-time":"2025-10-12T03:42:25Z","timestamp":1760240545075,"version":"build-2065373602"},"reference-count":30,"publisher":"MDPI AG","issue":"14","license":[{"start":{"date-parts":[[2019,7,17]],"date-time":"2019-07-17T00:00:00Z","timestamp":1563321600000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/creativecommons.org\/licenses\/by\/4.0\/"}],"content-domain":{"domain":[],"crossmark-restriction":false},"short-container-title":["Sensors"],"abstract":"<jats:p>Recently, many dynamic ID based remote user authentication schemes using smart card have been proposed to improve the security in multiple servers architecture authentication systems. In 2017, Kumari and Om proposed an anonymous multi-server authenticated key agreement scheme, which is believed to be secure against a range of network attacks. Nevertheless, in this paper we reanalyze the security of their scheme, and show that the scheme is vulnerable to impersonation attack and server spoofing attack launched by any adversary without knowing any secret information of the victim users. In addition, their protocol fails to achieve the claimed user privacy protection. For handling these aforementioned shortcomings, we introduce a new biometric-based authentication scheme for multi-server architecture preserving user anonymity. Besides, Burrows\u2014Abadi\u2014Needham (BAN)-logic validated proof and discussion on possible attacks demonstrate the completeness and security of our scheme, respectively. Further, the comparisons in terms of security analysis and performance evaluation of several related protocols show that our proposal can provide stronger security without sacrificing efficiency.<\/jats:p>","DOI":"10.3390\/s19143144","type":"journal-article","created":{"date-parts":[[2019,7,17]],"date-time":"2019-07-17T11:25:12Z","timestamp":1563362712000},"page":"3144","update-policy":"https:\/\/doi.org\/10.3390\/mdpi_crossmark_policy","source":"Crossref","is-referenced-by-count":2,"title":["Robust Multiple Servers Architecture Based Authentication Scheme Preserving Anonymity"],"prefix":"10.3390","volume":"19","author":[{"ORCID":"https:\/\/orcid.org\/0000-0002-6360-1116","authenticated-orcid":false,"given":"Huawei","family":"Wang","sequence":"first","affiliation":[{"name":"State Key Laboratory of Networking and Switching Technology, Beijing University of Posts and Telecommunications, Beijing 100876, China"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Dianli","family":"Guo","sequence":"additional","affiliation":[{"name":"The 6th Research Institute of China Electronics Corporation, Beijing 100083, China"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Hua","family":"Zhang","sequence":"additional","affiliation":[{"name":"State Key Laboratory of Networking and Switching Technology, Beijing University of Posts and Telecommunications, Beijing 100876, China"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Qiaoyan","family":"Wen","sequence":"additional","affiliation":[{"name":"State Key Laboratory of Networking and Switching Technology, Beijing University of Posts and Telecommunications, Beijing 100876, China"}],"role":[{"role":"author","vocabulary":"crossref"}]}],"member":"1968","published-online":{"date-parts":[[2019,7,17]]},"reference":[{"key":"ref_1","doi-asserted-by":"crossref","first-page":"665","DOI":"10.1109\/TCE.2004.1309441","article-title":"A dynamic ID-based remote user authentication scheme","volume":"50","author":"Das","year":"2004","journal-title":"IEEE Trans. Consum. Electron."},{"key":"ref_2","doi-asserted-by":"crossref","first-page":"311","DOI":"10.1002\/nem.1827","article-title":"An improved authentication with key agreement scheme on elliptic curve cryptosystem for global mobility networks","volume":"23","author":"Li","year":"2013","journal-title":"Int. J. Netw. Manag."},{"key":"ref_3","doi-asserted-by":"crossref","first-page":"62","DOI":"10.1007\/s10916-015-0245-z","article-title":"A Novel Authentication Scheme Using Self-certified Public Keys for Telecare Medical Information Systems","volume":"39","author":"Guo","year":"2015","journal-title":"J. Med. Syst."},{"key":"ref_4","doi-asserted-by":"crossref","first-page":"35","DOI":"10.1007\/s11277-015-2378-2","article-title":"Analysis and Improvement of \u2018Chaotic Map Based Mobile Dynamic ID Authenticated Key Agreement Scheme\u2019","volume":"83","author":"Guo","year":"2015","journal-title":"Wirel. Pers. Commun."},{"key":"ref_5","doi-asserted-by":"crossref","first-page":"86","DOI":"10.1109\/MIC.2017.33","article-title":"Continuous Authentication and Authorization for the Internet of Things","volume":"21","author":"Shahzad","year":"2017","journal-title":"IEEE Internet Comput."},{"key":"ref_6","doi-asserted-by":"crossref","first-page":"74260","DOI":"10.1109\/ACCESS.2018.2883426","article-title":"A Secure and Efficient Certificateless Authentication Scheme with Unsupervised Anomaly Detection in VANETs","volume":"6","author":"Tan","year":"2018","journal-title":"IEEE Access"},{"key":"ref_7","doi-asserted-by":"crossref","unstructured":"Tan, H., and Chung, I. (2018). A Secure and Efficient Group Key Management Protocol with Cooperative Sensor Association in WBANs. Sensors, 18.","DOI":"10.3390\/s18113930"},{"key":"ref_8","doi-asserted-by":"crossref","first-page":"241","DOI":"10.1109\/TNET.2014.2298039","article-title":"Fast and Accurate Estimation of RFID Tags","volume":"23","author":"Shahzad","year":"2015","journal-title":"IEEE\/ACM Trans. Netw."},{"key":"ref_9","doi-asserted-by":"crossref","first-page":"4081","DOI":"10.1109\/TII.2018.2834351","article-title":"Measuring Two-Factor Authentication Schemes for Real-Time Data Access in Industrial Wireless Sensor Networks","volume":"14","author":"Wang","year":"2018","journal-title":"IEEE Trans. Ind. Inf."},{"key":"ref_10","first-page":"708","article-title":"Two Birds with One Stone: Two-Factor Authentication with Security Beyond Conventional Bound","volume":"15","author":"Wang","year":"2018","journal-title":"IEEE Trans. Dependable Secure Comput."},{"key":"ref_11","doi-asserted-by":"crossref","first-page":"e3900","DOI":"10.1002\/dac.3900","article-title":"User Centric Three-Factor Authentication Protocol For Cloud-Assisted Wearable Devices","volume":"32","author":"Jiang","year":"2019","journal-title":"Int. J. Commun. Syst."},{"key":"ref_12","doi-asserted-by":"crossref","first-page":"182","DOI":"10.1016\/j.compeleceng.2017.03.016","article-title":"Efficient end-to-end authentication protocol for wearable health monitoring systems","volume":"63","author":"Jiang","year":"2017","journal-title":"Comput. Electr. Eng."},{"key":"ref_13","first-page":"13","article-title":"A secure dynamic ID based remote user authentication scheme for multi-server environment","volume":"19","author":"Liao","year":"2009","journal-title":"Comput. Stand. Interface"},{"key":"ref_14","doi-asserted-by":"crossref","first-page":"1118","DOI":"10.1016\/j.csi.2008.11.002","article-title":"Improvement of the secure dynamic ID based remote user authentication scheme for multi-server environment","volume":"31","author":"Hsiang","year":"2009","journal-title":"Comput. Stand. Interface"},{"key":"ref_15","doi-asserted-by":"crossref","first-page":"609","DOI":"10.1016\/j.jnca.2010.11.011","article-title":"A secure dynamic identity based authentication protocol for multi-server architecture","volume":"34","author":"Sood","year":"2011","journal-title":"J. Netw. Comput. Appl."},{"key":"ref_16","doi-asserted-by":"crossref","first-page":"1411","DOI":"10.1016\/j.eswa.2013.08.040","article-title":"An anonymous multi-server authenticated key agreement scheme based on trust computing using smart cards and biometrics","volume":"41","author":"Chuang","year":"2014","journal-title":"Expert Syst. Appl."},{"key":"ref_17","doi-asserted-by":"crossref","first-page":"763","DOI":"10.1016\/j.jnca.2011.11.009","article-title":"An efficient and security dynamic identity based authentication protocol for multi-server architecture using smart cards","volume":"35","author":"Li","year":"2012","journal-title":"J. Netw. Comput. Appl."},{"key":"ref_18","doi-asserted-by":"crossref","first-page":"85","DOI":"10.1016\/j.mcm.2012.06.033","article-title":"A novel smart card and dynamic ID based remote user authentication scheme for multi-server environments","volume":"58","author":"Li","year":"2013","journal-title":"Math. Comput. Model."},{"key":"ref_19","doi-asserted-by":"crossref","first-page":"475","DOI":"10.1007\/s11277-014-1762-7","article-title":"Analysis and improvement of a robust smart card based-authentication scheme for multi-server architecture","volume":"78","author":"Guo","year":"2014","journal-title":"Wirel. Pers. Commun."},{"key":"ref_20","doi-asserted-by":"crossref","first-page":"361","DOI":"10.1007\/s11277-011-0456-7","article-title":"A smart card based efficient and secured multi-server authentication scheme","volume":"68","author":"Wang","year":"2013","journal-title":"Wirel. Pers. Commun."},{"key":"ref_21","doi-asserted-by":"crossref","first-page":"729","DOI":"10.1007\/s11277-013-1039-6","article-title":"Robust smart card authentication scheme for multi-server architecture","volume":"72","author":"Pippal","year":"2013","journal-title":"Wirel. Pers. Commun."},{"key":"ref_22","doi-asserted-by":"crossref","first-page":"195","DOI":"10.1016\/j.jcss.2013.07.004","article-title":"A lightweight dynamic pseudonym identity based authentication and key agreement protocol without verification tables for multi-server architecture","volume":"80","author":"Xue","year":"2014","journal-title":"J. Comput. Syst. Sci."},{"key":"ref_23","doi-asserted-by":"crossref","first-page":"2513","DOI":"10.1007\/s11277-017-4310-4","article-title":"Cryptanalysis and Improvement of an Anonymous Multi-server Authenticated Key Agreement Scheme","volume":"96","author":"Kumari","year":"2017","journal-title":"Wirel. Pers. Commun."},{"key":"ref_24","doi-asserted-by":"crossref","first-page":"1321","DOI":"10.1002\/sec.1417","article-title":"Cryptanalysis and improvement of a chaotic maps-based anonymous authenticated key agreement protocol for multiserver architecture","volume":"9","author":"Lu","year":"2016","journal-title":"Secur. Commun. Netw."},{"key":"ref_25","doi-asserted-by":"crossref","first-page":"1955","DOI":"10.1002\/dac.2829","article-title":"A chaotic map-based anonymous multi-server authenticated key agreement protocol using smart card","volume":"28","author":"Tsai","year":"2015","journal-title":"Int. J. Commun. Syst."},{"key":"ref_26","doi-asserted-by":"crossref","first-page":"2735","DOI":"10.1007\/s11277-017-3956-2","article-title":"A Multi-server Environment with Secure and Efficient Remote User Authentication Scheme Based on Dynamic ID Using Smart Cards","volume":"95","author":"Jangirala","year":"2017","journal-title":"Wirel. Pers. Commun."},{"key":"ref_27","doi-asserted-by":"crossref","unstructured":"Juels, A., and Wattenberg, M. (1999, January 1\u20134). A fuzzy commitment scheme. Proceedings of the 6th ACM Conference on Computer and Communications Security, Kent Ridge Digital Labs, Singapore.","DOI":"10.1145\/319709.319714"},{"key":"ref_28","doi-asserted-by":"crossref","first-page":"18","DOI":"10.1145\/77648.77649","article-title":"A logic of authentication","volume":"8","author":"Burrows","year":"1990","journal-title":"ACM Trans. Comput. Syst."},{"key":"ref_29","doi-asserted-by":"crossref","unstructured":"Kocher, P., Jaffe, J., and Jun, B. (1999, January 15\u201319). Differential power analysis. Proceedings of the 19th Annual International Cryptology Conference, Santa Barbara, CA, USA.","DOI":"10.1007\/3-540-48405-1_25"},{"key":"ref_30","doi-asserted-by":"crossref","first-page":"541","DOI":"10.1109\/TC.2002.1004593","article-title":"Examining smart-card security under the threat of power analysis attacks","volume":"5","author":"Messerges","year":"2002","journal-title":"IEEE Trans. Comput."}],"container-title":["Sensors"],"original-title":[],"language":"en","link":[{"URL":"https:\/\/www.mdpi.com\/1424-8220\/19\/14\/3144\/pdf","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2025,10,11]],"date-time":"2025-10-11T13:06:38Z","timestamp":1760187998000},"score":1,"resource":{"primary":{"URL":"https:\/\/www.mdpi.com\/1424-8220\/19\/14\/3144"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2019,7,17]]},"references-count":30,"journal-issue":{"issue":"14","published-online":{"date-parts":[[2019,7]]}},"alternative-id":["s19143144"],"URL":"https:\/\/doi.org\/10.3390\/s19143144","relation":{},"ISSN":["1424-8220"],"issn-type":[{"type":"electronic","value":"1424-8220"}],"subject":[],"published":{"date-parts":[[2019,7,17]]}}}