Secure and Lightweight Authentication With Key Agreement for Smart Wearable Systems
Secure and Lightweight Authentication With Key Agreement for Smart Wearable Systems
复制标题
通过密钥协议为智能可穿戴系统提供安全、轻量级的身份验证
DOI：
10.1109/jiot.2020.2984618
复制
发表时间：
2020-08-01
影响因子：
10.6
通讯作者：
Du, Ruiying
中科院分区：
文献类型：
--
作者：
Li, Jiping;Zhang, Ning;Du, Ruiying
如今，越来越多的可穿戴设备被广泛应用于智能可穿戴系统中，用于收集用户的健康状况测量和身体信息。由于无线传输的开放性和WDs在能量和计算方面的低能力，确保用户生理信息的安全性是一个很大的挑战。在本文中，我们通过使用模糊提取器、加密散列函数和位异或操作，提出了一种安全、轻量级的身份验证和密钥协议方案（SLAKA）。在SLAKA中，移动终端和移动终端之间可以实现相互认证，然后在两端协商会话密钥，以保证以后的安全通信。详细的安全分析表明，SLAKA具有抵御各种众所周知的攻击的弹性，例如重播攻击，被盗/丢失MT/WD攻击，中间人攻击，MT/WD冒充攻击，密码更改攻击，匿名和不可追溯性攻击以及特权内部人员攻击。通过性能比较和广泛的仿真，证明了SLAKA比现有方案更高效，同时提供了更多的提取特性和安全保证。
Nowadays, an increasing number of wearable devices (WDs) have been widely deployed in smart wearable systems to collect health status measures and body information of users. Due to the openness of wireless transmission and the low capabilities of WDs in terms of energy and computation, it is of a great challenge to ensure the security of the users’ physiological information. In this article, we propose a secure and lightweight authentication and key agreement scheme (SLAKA) by using the fuzzy extractor, the cryptographic hash function, and the bitwise exclusive-or operation. In SLAKA, mutual authentication between a WD and the mobile terminal (MT) can be achieved, after that, a session key can be negotiated at both ends for future secure communications. Detailed security analysis shows that SLAKA has the resilience against various well-known attacks, such as replay attacks, stolen/lost MT/WD attacks, man-in-the-middle attacks, MT/WD impersonation attacks, password change attacks, anonymity and untraceability attacks, and privileged-insider attacks. Through performance comparison and extensive simulation, SLAKA is demonstrated to be more efficient than the existing schemes, while providing more extractive features and security guarantees.