Abstract
A remote user authentication scheme is a procedure for a server to authenticate a remote user in a network. Recently, Lee et al. proposed a fingerprint-based remote user authentication scheme to overcome the security flaw in Hwang and Li's scheme. In Lee et al.'s authentication scheme, they store two secret keys and some public elements in a smart card. In this paper, we will first review Lee et al.'s fingerprint-based user authentication scheme. Next, we will show that Lee et al.'s scheme still suffers from the impersonation attack.