A Provably Secure User Authentication Scheme Over Unreliable Networks

Wearable devices not only are the advancement in reduction of computation-systems, but also convenient for indirect interactions. Financial or medical data are exchanged between these devices through unreliable networks must be kept secret. Hence, lightweight and secure user authentication schemes always receive special attentions of many works in information security. Recently, Saleem et al. and Kandar et al. proposed a provable biometrics-based scheme providing the users with guarantee of secure authentication. Although elliptic curve cryptosystem-based combined with cryptographic-hash function, their schemes fail to satisfy session-key perfect forward secrecy and not applicable in practice. In this paper, we provide an improved version of their scheme to overcome these limitations.