Authenticated ID-based Key Exchange and remote log-in with simple token and PIN number.

Abstract

Authenticated key exchange protocols tend to be either token based or password based. Token based schemes are often based on expensive (and irreplaceable) smart-card tokens, while password-only schemes require that a unique password is shared between every pair of correspondents. The magnetic strip swipe card and associated PIN number is a familiar and convenient format that motivates a combined “two-factor” approach. Finally we suggest an extension of the scheme for use in a client-server scenario.