A Remote User Authentication Scheme Using Bilinear Pairings and ECC

Abstract

Recently, a novel remote user authentication scheme using bilinear pairings was proposed. The scheme is insecure, however, against forgery attack and replay attack. In this paper we propose a new design for remote user authentication using the properties of bilinear pairings, elliptic curve ElGamal encryption and decryption scheme. By employing EC ElGamal encryption and decryption, the replay attacks and the forgery attacks can be blocked. Moreover, a new strong password change method, which overcomes the password changing weakness, is provided. Finally we analyze the security and performance of our new design.