The authentication protocol permits a user to prove his or her identity to the authentication server (AS) by demonstrating his or her knowledge of a secret, e.g. an access code such as a password or personal identification number (PIN), that is shared with the AS. User authentication protocols, however, suffer from an inherent exposure to masquerading by malicious intruders.