Smart Card Loss Attack Clause Samples

Smart Card Loss Attack. Suppose the smart card of Ui is stolen by the attacker, who extracts the stored secret values {IDi, Ni, h(·), b} through physically monitoring the power consumption [38] as described in Section 1.3. With this information, the attacker can successfully lead to following malicious scenarios. Scenario 1: If the attacker obtains the smart card, he or she can easily expose a user’s identity IDi through physically monitoring the power consumption [38]. Disclosure of the user’s identity IDi may allow tracking of the Ui’s behavior and his or her current location. Scenario 2: Using obtained smart card, the attacker can successfully pass the checking process of the login phase through using the IDi in the smart card, because their checking process just compares the entered IDi with the stored IDi in the smart card. The same situation also happens for the password change phase. Therefore, ▇▇▇▇ et al.’s scheme still suffers from smart card loss attack.