The security of a recently proposed password-based authenticated key exchange protocol was analyzed. Al- though it was provably secure in the standard model

it was vulnerable to reflection attacks. A modify scheme was pro- posed

which eliminated the defect of original scheme and improved the efficiency of the protocol. The security of the proposed scheme had been proven in the standard model under DDH assumption. The results show that it provides per- fect forward secrecy.