Security improvement on a timestamp-based password authentication scheme

Abstract

In 1999, Yang and Shieh proposed a timestamp-based password authentication scheme using smart cards. However, Chan and Fan respectively showed its vulnerability to the forged login attacks proposed by them. Also Fan gave a slight modification of the original scheme, but his modification is not so practical. In this paper a more practical modification of the original scheme will be proposed, which can withstand the forged login attack.