An enhanced remote mutual authentication scheme using smart cards

Mutual authentication is a process or technology in which both entities in a communications link authenticate each other before conducting any business. It is gaining acceptance as a tool that can minimize the risk of online fraud in e-commerce and other network application. Recently, Wang et al. proposed an efficient remote authentication scheme using smart cards. They claimed that the scheme can withstand guessing attack, forgery attack, denial of service attack and is easily realized in the practical resource limited environment. However, we point out that Wang et al.'s scheme suffers from parallel session attack and replay attack. Furthermore, we propose an enhanced remote mutual authentication scheme to eliminate all identified security flaws in the aforementioned scheme.