A lightweight authentication scheme with user untraceability