¹School of Computer Science and Engineering, Kyungpook National University, Daegu, Republic of Korea.
²Department of Cyber Security, Kyungil University, Gyeongbuk, Republic of Korea.

---

Abstract—Authentication with key-agreement protocols for multi-server architecture are emerging as a solution to conquer the traditional client-server architecture’s limitations such as repeated registrations with distinct tokens and credentials. Since Li et al.’s first proposed authentication protocol for multi-server architecture, several liken protocols have tailed this queue. Majority of these protocols have been designed while the users sharing their plain or digested credentials with the servers during either registration or authentication phases. This weakens the security by making it vulnerable to severe security threats called privileged insider attacks, user impersonation attacks and server impersonation attacks. To overcome the aforementioned problems, this paper put forwards an authentication with key-agreement protocol for multi-server architecture based on biometrics. The proposed protocol is absolutely light-weight due to its design mainly based on one-way hash function. The analysis section of this paper shows that the proposed protocol performs better than related protocols and makes it suitable for practical applications.

Index Terms—Authentication, key-agreement, protocol, multi-server, three-factor, security, performance.

[PDF]

Cite: Alavalapati Goutham Reddy, Eun-Jun Yoon, Young-Ju Kim, Kee-Young Yoo, "Design of a Secure Mutually Authenticated Key-Agreement Protocol for Multi-server Architecture," Journal of Computers vol. 13, no. 2, pp. 194-203, 2018.