A bilateral remote user authentication scheme that preserves user anonymity