AN EFFICIENT ADVANCED AUTHENTICATION SYSTEM WITH TWO SERVERS –AN ARTIFICIAL INTELLIGENCE SECURE SYSTEM

The authentication server, which stores easily derived password verification data or plain text passwords in a central database, is completely trusted by the majority of password-based user authentication systems. As a result, these systems are not at all resistant to server-side offline dictionary assaults. An organization may face severe legal and financial consequences if the authentication server is compromised by either insiders or outsiders, exposing all user credentials. In order to get around the single point of vulnerability that comes with the single-server architecture, a number of multiserver password schemes have recently been developed. However, because either a user must communicate with numerous servers at once or the protocols are rather costly, these multiserver systems are challenging to implement and run in real-world scenarios. In this research, we propose a novel two-server architecture for a workable password-based user authentication and key exchange system. There are several attractive characteristics in our system. Our method may be immediately used to reinforce current single-server password systems because only a front-end service server interacts with users directly, while a control server operates in the background. Furthermore, neither of the two servers can launch offline dictionary attacks against the system.