User Password Authentication Using two Server Architecture

Nowadays the common methods used for user authentication are user id and password. In single server authentication system, information that is required to authenticate the user is stored in a single server. All the information is obtained when the server is compromised. In order to overcome this problem, a user password authentication using two server architecture is proposed where a secure password is divided and stored in two servers. If one server is compromised an attacker obtains only half of the authentication information. The user password is concatenated with the random string called salt and hash of salted password is then divided and stored in two servers. The two server’s assistance is required to authenticate user and they run in parallel. In addition to providing the authentication, the proposed system also provides confidentiality by storing only half of the encrypted user files in each server.