Improved Biometrics-Based Remote User Authentication Scheme with Session Key Agreement

In 2011, Lee et al. proposed an improved Li-Hwang' s biometrics-based remote user authentication scheme, and claimed that does not only provide session key establishment and mutual authentication but also withstand various attacks. In this paper, we analyze the security of Lee et al.'s scheme and we show that Lee et al.'s scheme is still insecure against the various attacks. Also, we propose an improved scheme that can remove these security flaws of Lee et al.'s scheme and provide session key agreement, even if the secret information stored in the smart card is revealed. As a result of security analysis, the improved scheme is relatively more secure than the related authentication schemes in terms of the security.