A smart card remote authenticated key agreement protocol for multi-servers using pairings

Remote smart card authentication and authenticated key agreement protocol for multi-servers are proposed in the paper. In the scheme the system does not need to maintain any password table, and the user who has registered in the servers does not need to remember different login passwords for various servers. Also it allows the user to choose login passwords freely. Furthermore, the proposed protocol provides mutual authentication between the user and the server and enables them to establish a common session key to provide message confidentiality for each other. Additionally, the system can conveniently manage the services which users have applied for. The proposed protocol is proved secure to withstand the replay attack, the impersonation attack, insider attack, man-in-middle attack and provide forward secrecy.