Lightweight Certificateless Two-Factor Authentication Protocol Using Smart Cards

Abstract

User authentication and key agreement in smart cards is a critical issue due to the open and complex wireless communication environment. In order to protect the user’s privacy and sensitive data in smart cards, many two-factor authentication protocols have been proposed, yet most of them cannot withstand various attacks. In this paper, we summarize the security requirements for smart cards and propose a secure lightweight certificateless authentication protocol with password change. Moreover, the proposed protocol satisfies anonymity, mutual authentication and session key agreement as well as resists many attacks. The performance analysis demonstrate that the proposed protocol is secure and highly practical.