A Provably Secure Three-Factor Authentication Protocol Based on Chebyshev Chaotic Mapping for Wireless Sensor Network

Abstract

Wireless sensor network has been widely used and plays a vital role in the Internet of Things, smart cities, military, and other fields, and its security has also attracted the attention of many researchers. In view of the security defects in Shin and Kwon's scheme such as failure to provide three-factor security, lack of anonymity and untraceability, user impersonation attack, desynchronization attack and privileged insider attack, we suggest an improved provably secure three-factor user authentication scheme based on Chebyshev chaotic mapping for wireless sensor network, which employs fuzzy verifier technique to prevent attacker from offline guessing attack on user identity and password when the stolen/lost smartcard is acquired by the attacker. During the authentication phase, a dynamic identity mechanism is used to ensure the anonymity of the user and sensor to prevent desynchronization attack, and the Chebyshev chaotic mapping is introduced to improve security and reduce computation overhead. The rigorous security proof under the random oracle model and the formal verification via ProVerif show that our protocol overcomes the weaknesses in Shin and Kwon's scheme. In addition, by comparing the performance of our proposed scheme with that of others, we demonstrate that our proposal not only solves the security risks of Shin and Kwon.'s protocol, but also achieves a better tradeoff between security and efficiency, therefore, it is more suitable for user authentication in wireless sensor network environments.

ECC-based three-factor authentication and key agreement scheme for wireless sensor networks

“…WSNs focus on the computational overhead of resource-constrained sensor nodes. The computational overhead of the sensor nodes is increased only once compared to schemes 6 , 39 , and 40 , which also have point multiplication operations. This scheme does not put too much pressure on sensor computation.…”

“…This scheme is based on ECC, and as the communication process needs to send each party’s public key several times, the communication overhead is slightly higher than with other schemes. For the communication overhead of resource-constrained sensor nodes, this scheme is the same as scheme 39 and slightly higher than schemes 6 , 16 and 40 , but still within the tolerance range of sensor nodes and suitable for WSNs.…”

A Formal Verification of a Reputation Multi-Factor Authentication Mechanism for Constrained Devices and Low-Power Wide-Area Network Using Temporal Logic

“…This work aims to formally verify a multi-factor authentication mechanism with a Reputation (MFA_R) [14] despite the existence of many security protocol analysis programs, such as ProVerif (https://bplanche.gitlabpages.inria.fr/proverif/-accessed on 1 July 2023) an automatic security protocol verification tool that includes secrecy, strong secrecy, and authentication checks, among others. Through recent studies [15,16], it was noted that this tool is currently widely accepted in the research area, AVISPA (http://www.avispa-project. org/-accessed on 1 July 2023) a tool for formal validation of security protocols and systems that provides performance and scalability [17,18].…”

“…This work aims to formally verify a multi-factor authentication mechanism with a Reputation (MFA_R) [ 14 ] despite the existence of many security protocol analysis programs, such as ProVerif ( —accessed on 1 July 2023) an automatic security protocol verification tool that includes secrecy, strong secrecy, and authentication checks, among others. Through recent studies [ 15 , 16 ], it was noted that this tool is currently widely accepted in the research area, AVISPA ( —accessed on 1 July 2023) a tool for formal validation of security protocols and systems that provides performance and scalability [ 17 , 18 ]. Its use in authentication [ 19 , 20 ] and in IoT [ 21 , 22 ] is significant, as it is in Tamarin Prover ( —accessed on 1 July 2023) a verification tool where cryptographic protocols support first-order logic), and it has a growing number of publications in the area [ 23 , 24 , 25 , 26 , 27 ].…”

Methodology of Testing the Security of Cryptographic Protocols Using the CMMTree Framework

“…We can also observe the rapid development of communication between devices that make up the Internet of Things or Wireless Sensor Networks. Such networks connect various devices and sensors to exchange information between the devices and between them and other networks, nodes used to process and store data [1][2][3].…”