{"references": ["P. Peyret, G. Lisimaque and T. Y. Chua, Smart cards provide very high\nsecurity and flexibility in subscribers management, IEEE Transactions\non Consumer Electronics, Vol.36, No.3, 1990, pp. 744-752.", "D. Sternglass, The future is in the pc cards, IEEE Spectrum, Vol.29,\nNo.6, 1992, pp. 46-50.", "N. Koblitz, Elliptic curve cryptosystems, Math. Comp., Vol.48, 1987,\npp. 203-209.", "C. C. Chang and T. C. Wu, Remote password authentication with smart\ncards, IEEE Proceedings-E, Vol.138, No.3,1993, pp. 165-168.", "K. Tan and H. Zhu, Remote password authentication scheme based on\ncross-product, Computer Communications, Vol.22, No. 4, 1999, pp. 390-\n393.", "M. S. Hwang, Cryptanalysis of a remote login authentication scheme\nComputer Communications, Computer Communications, Vol.22, No.8,\n1999, pp. 742-744.", "A. Bottoni and G. Dini, Improving authentication of remote card transactions\nwith mobile personal trusted devices, Computer Communications,\nVol.30, No.8, 2007, pp. 1697-1712.", "J. Y. Liu, A. M. Zhou and M. X. Gao, A new mutual authentication\nscheme based on nonce and smart cards, Computer Communications,\nVol.31, No.10, 2008, pp. 2205-2209.", "Y. Wang, J. Liu, F. Xiaoa and J. Dana, A more efficient and secure\ndynamic ID-based remote user authentication scheme, Computer Communications,\nVol.32, No.4, 2009, pp. 583-585.\n[10] H. C. Hsiang and W. K. Shih, Weaknesses and improvements of the\nyoon-ryu-yoo remote user authentication scheme using smart cards,\nComputer Communications, Vol.32, No.4, 2009, pp. 649-652.\n[11] A. Joux, A one round protocol for tripartite diffie-hellman, Proceedings\nof Algorithmic Number Theory Symposium, LNCS 1838, Springer-\nVerlag, 2000, pp. 385-394.\n[12] M. L. Das, A Saxena, V. P. Gulati and D. B. Phatak, A novel remote user\nauthentication scheme using bilinear pairings, Computers & Security,\nVol.25, No.3, 2006, pp. 184-189.\n[13] J. S. Chou, Y. Chen and J. Y. Lin, Improvement of Manik et al.-s remote\nuser authentication scheme, http://eprint.iacr.org/2005/450.pdf.\n[14] G. Thulasi, M. L. Das and A. Saxena, Cryptanalysis of recently proposed\nremote user authentication schemes, http://eprint.iacr.org/2006/028.pdf.\n[15] Z. Jia, Y. Zhang, H. Shao, Y. Lin and J. Wang, A remote user\nauthentication scheme using bilinear pairings and ECC, Proceedings of\nthe Sixth International Conference on Intelligent Systems Design and\nApplications (ISDA-06), Vol.2, October 2006, pp. 1091-1094.\n[16] W. C. Ku and S. M. Chen, \u00d4\u00c7\u00ffWeaknesses and improvements of an efficient\npassword based remote user authentication scheme using smart cards,\nIEEE Trans. on Consumer Electronics, Vol.50, No.1, 2004, pp. 204-207.\n[17] W. C. Ku, H. M. Chuang and M. J. Tsaur, Vulnerabilities of Wu-\nChieu-s improved password authentication scheme using smart cards,\nIEICE Trans. Fundamentals, Vol.E88-A, No.11, 2005, pp. 3241-3243.\n[18] R. J. Anderson, Why cryptosystems fail, Proceedings of First ACM\nConference on Computer and Communications Security, USA, Nov.\n1993, pp. 215-227.\n[19] N. Asokan, H. Debar, M. Steiner and M. Waidner, Authenticating public\nterminals, Computer Networks, Vol.31, No.8, April 1999, pp. 861-870.\n[20] E. J. Yoon, E. K. Ryu and K. Y. Yoo, An improvement of Hwang-Lee-\nTang-s simple remote user authentication scheme, Computers & Security,\nVol.24, 2005, pp. 50-56.\n[21] M. K. Khan and J. Zhang, Improving the security of \u00d4\u00c7\u00ffa flexible\nbiometrics remote user authentication scheme-, Computer Standards &\nInterfaces, Vol.29, 2007, pp. 82-85.\n[22] A. J. Menezes, P. C. Oorschot and S.A. Vanstone, Handbook of applied\ncryptograph, CRC Press, New York, 1997.\n[23] B. Schneier, Applied cryptography protocols, algorithms and source\ncode in C: second edition, John Wiley & Sons Inc, 1995."]}

Recently, Jia et al. proposed a remote user authentication scheme using bilinear pairings and an Elliptic Curve Cryptosystem (ECC). However, the scheme is vulnerable to privileged insider attack at their proposed registration phase and to forgery attack at their proposed authentication phase. In addition, the scheme can be vulnerable to server spoofing attack because it does not provide mutual authentication between the user and the remote server. Therefore, this paper points out that the Jia et al. scheme is vulnerable to the above three attacks.