Two‐factor mutual authentication with key agreement in wireless sensor networks

Abstract

Wireless sensor networks (WSNs) are getting popular for their deployment in unattended environments, where a registered user can log in to the network and access data collected from the desired sensor. Because of limited resources and computation power in sensor nodes, an authentication protocol should be simple and efficient. M.L. Das proposed a two-factor authentication scheme for WSNs. Because his scheme uses only one-way hash function and XOR operation, it is well suited for resourceconstrained environments. Because of some flaws in Das's scheme, several improved schemes have been introduced. In this paper, we show that Das's scheme and its derivatives not only have security imperfections but also do not provide key agreement. To overcome their security shortcomings, we propose a novel user authentication scheme with key agreement for WSN. We furnish security analysis of the proposed protocol to show its robustness to various attacks as well as analyze its performance to determine its efficiency. We provide protocol analysis and verification of the proposed protocol. Compared with the existing schemes, it is more robust and offers better security.

Three-Factor User Authentication and Key Agreement Using Elliptic Curve Cryptosystem in Wireless Sensor Networks

“…However, the issue of securing and authenticating communication is problematic, because the nodes are vulnerable to attacks and do not have enough capacity for the secure storage of keys [4,5,6]. To solve these security issues, authentication and key agreement schemes using two-factor security, passwords and smart cards have attracted attention and have been studied widely in an effort to guarantee secure communication [7,8,9,10,11,12,13,14]. Unfortunately, many of them still suffer from various attacks and do not provide secure communication.…”

“…Subsequently, each proposed their own authentication scheme to provide secure user authentication in WSNs. In 2012, Vaidya et al [12] demonstrated that Das’s scheme [8], Khan and Alghathbar’s scheme [10] and Chen and Shih’s scheme [11] had security problems and that none of them provided key agreement. Vaidya et al proposed a two-factor mutual user authentication scheme with key agreement for WSNs.…”

“…Vaidya et al proposed a two-factor mutual user authentication scheme with key agreement for WSNs. In 2014, Kim et al [13] presented that both gateway node bypassing attacks and user impersonation attacks were possible in Vaidya et al’s scheme [12]. They proposed an authentication and key agreement scheme that resisted user impersonation and gateway node bypassing attacks.…”

Security Enhanced User Authentication Protocol for Wireless Sensor Networks Using Elliptic Curves Cryptography

“…Rubin logic defines actions for dealing with the knowledge in a protocol [36]. The action lists that precede and follow message operations in a principal's behavior list determine a sequence of events performed by the principal during a protocol run.…”

An Identity Authentication Scheme Based on Node Behaviors for Wireless Sensor Networks

“…A two-factor user authentication protocol [5] which provided strong authentication and a session of key establishment for WSNs existed in 2009, this authentication means that more than one factor is required to authenticate the communicating party in the authentication mechanism. B. Vaidya et al [6] improved the two factor authentication 2nd International Conference on Advances in Mechanical Engineering and Industrial Informatics (AMEII 2016) scheme, because it is vulnerable to stolen smart card attacks and it did not provide a key agreement. J. Kim et al [7] presented that gateway node bypassing attacks and user impersonation attacks are possible using secret data stored in a sensor or an attacker's own smart card in Vaidya et al's scheme.…”