Improvements of a Remote User Password Authentication Scheme using Smart Card

In 2009, Hsiang et al.'s proposed a secure, improved remote user authentication scheme using smart card against the parallel session attack, masquerading attack, and password guess attack. Hsiang et al.'s scheme, however, is still vulnerable to off-line password guess attack if the attacker steals or temporarily accesses the smart card to extract the information stored in it, and does not satisfy the security requirement against the adversary that have to be considered in remote user authentication scheme using password-based smart cards. In this paper, I proposed an efficient mutual authentication scheme that based on the hash function and random number. Accordingly, an improved remote user authentication scheme is proposed that is secure against password guess attack.