An Advanced Temporal Credential-Based Security Scheme with Mutual Authentication and Key Agreement for Wireless Sensor Networks

Abstract

Wireless sensor networks (WSNs) can be quickly and randomly deployed in any harsh and unattended environment and only authorized users are allowed to access reliable sensor nodes in WSNs with the aid of gateways (GWNs). Secure authentication models among the users, the sensor nodes and GWN are important research issues for ensuring communication security and data privacy in WSNs. In 2013, Xue et al. proposed a temporal-credential-based mutual authentication and key agreement scheme for WSNs. However, in this paper, we point out that Xue et al.'s scheme cannot resist stolen-verifier, insider, off-line password guessing, smart card lost problem and many logged-in users' attacks and these security weaknesses make the scheme inapplicable to practical WSN applications. To tackle these problems, we suggest a simple countermeasure to prevent proposed attacks while the other merits of Xue et al.'s authentication scheme are left unchanged.

A secure light weight scheme for user authentication and key agreement in multi-gateway based wireless sensor networks

“…Later Xu and Wang [38] and Turkanovic and Hölbl [39] state that Das et al's [36] protocol is imperfection and not applicable for practical implementation and then they both proposed the solution for the improvement. Li et al [40] and Turkanovic and Hölbl [39] also presented some vulnerabilities of Xue et al's [37] protocol and provide better solution.…”

Cryptanalysis of “a robust and effective smart card-based remote user authentication mechanism using hash function”

“…S j first checks the validity of the timestamp T c ' and if it is valid, it further computes M 4 ' = h(ID i ||X s ), using its own secret number X s . After that S j computes M 5 5 , it confirms that the login request message is replayed. Otherwise, S j updates M 5 with M 5 ' in its database.…”

“…As discussed in [2,3,4,5,6,24], the stolen-verifier attack means that, if an attacker has stolen a verifier table stored in the data base of server S, then the adversary can use these values to perform various major cryptographic attacks like user impersonate, server masquerade, replay and can frame the session key which is framed between the legal user and the remote server.…”

“…Many researchers [1][2][3][4][5][6] have proposed remote user authentication protocols schemes for remote user authentication focused on various security parameters and at varied efficiencies. Unfortunately all these protocols are cryptanalyzed [3,17,19,21,22,23,24,28,29,[31][32][33][34][36][37][38][39] soon after the release.…”

Secure Authentication and Prescription Safety Protocol for Telecare Health Services Using Ubiquitous IoT

“…It enhances security fundaments without considerably expanding the memory requirements. In [24], Li et al pointed out that scheme [23] is unable to protect against stolen-verifier attacks, denial of service attacks, smart card theft, and participant's signing attacks. Turkanovic et al presented a secure hash function-based user prediction and secure key management protocol [25] that ensures security with low energy consumption.…”