Enhanced Two-Factor Authentication and Key Agreement Using Dynamic Identities in Wireless Sensor Networks.
Enhanced Two-Factor Authentication and Key Agreement Using Dynamic Identities in Wireless Sensor Networks.
复制标题
DOI：
10.3390/s151229767
复制
发表时间：
2015-11-30
期刊：
影响因子：
--
通讯作者：
Liu CM
中科院分区：
文献类型：
--
作者：
Chang IP;Lee TF;Lin TH;Liu CM
仅使用口令认证的密钥协商在通信网络中是方便的，但是这些密钥协商方案通常不能抵抗可能的攻击，因此与其他一些认证方案相比提供较差的安全性。为了提高安全性，许多身份验证和密钥协商方案除了使用密码外，还使用身份验证。因此，使用智能卡和密码的双因素认证和密钥协商方案在许多应用中被广泛采用。Vaidya等人最近提出了一种用于无线传感器网络（WSNs）的双因素认证和密钥协商方案。Kim等人观察到Vaidya等人的方案无法抵抗网关节点绕过和用户冒充攻击，然后提出了一种改进的无线传感器网络方案。本文分析了Kim等人提出的双因素认证和密钥协商方案的弱点，包括对冒充攻击、丢失密钥攻击和中间人攻击的脆弱性、对会话密钥安全性的违反以及未能保护用户隐私。基于Kim等人提出的认证和密钥协商方案，提出了一种高效、安全的无线传感器网络认证和密钥协商方案。该方案不仅解决了以往方法的弱点，但也增加了安全性要求，同时保持低的计算成本。
Key agreements that use only password authentication are convenient in communication networks, but these key agreement schemes often fail to resist possible attacks, and therefore provide poor security compared with some other authentication schemes. To increase security, many authentication and key agreement schemes use smartcard authentication in addition to passwords. Thus, two-factor authentication and key agreement schemes using smartcards and passwords are widely adopted in many applications. Vaidya et al. recently presented a two-factor authentication and key agreement scheme for wireless sensor networks (WSNs). Kim et al. observed that the Vaidya et al. scheme fails to resist gateway node bypassing and user impersonation attacks, and then proposed an improved scheme for WSNs. This study analyzes the weaknesses of the two-factor authentication and key agreement scheme of Kim et al., which include vulnerability to impersonation attacks, lost smartcard attacks and man-in-the-middle attacks, violation of session key security, and failure to protect user privacy. An efficient and secure authentication and key agreement scheme for WSNs based on the scheme of Kim et al. is then proposed. The proposed scheme not only solves the weaknesses of previous approaches, but also increases security requirements while maintaining low computational cost.