Secure Multi Server Strong-Password Authentication Using Two Factor Approach (Image Password and Mobile)

Secure multi server strong-password authentication using two factor approaches is a very practical solution to validate the eligibility of a remote user and provide secure communication later. Also, due to fast progress of networks and information technology, most of provided services are in multi-server environments. In this paper, we propose a novel user authentication using graphical passwords and key agreement scheme using service messages to mobiles for multi-server environments with much less computational cost and more functionality. It uses algorithms to generate image passwords for authentication and to generate passwords for sending to mobiles. The major merits include: (1) users only need to register at the registration centre once and can use permitted services in eligible servers; (2) users can freely choose their passwords; (3) the computation and communication cost is very low; (4) servers and users can authenticate each other; (5) it generates a session key agreed by the user and the server.