A Simple Password Authentication Scheme Based on Geometric Hashing Function

Password authentication protocol is one of most important mechanisms to prevent resources from accessing by unauthorized users. Many password authentication schemes have been developed in last decades, and many of them are based on the use of smart card. However, nowadays it is not applicable for many applications on the Internet to adopt the smart card in their authentication scheme due to its inconvenience and relative high cost for both users and service providers. On the other hand, all password authentication schemes without using smart card (ex. schemes based on hash function) cited in this paper are proved to be vulnerable to replay attack and/or man-in-themiddle attack and/or verifier stolen attack, etc. Hence, in this paper, we focus on designing a simple, secure and high efficiency password authentication scheme based on geometric hash function without using smart card. Our security analysis and performance evaluation demonstrate that our scheme is quite simple and efficient, and also can withstand replay attack, password guessing attack, min-inthe-middle attack, verifier stolen attack and denial-ofservice attack.