Cryptanalysis and security improvements of 'two-factor user authentication in wireless sensor networks'.
Cryptanalysis and security improvements of 'two-factor user authentication in wireless sensor networks'.
复制标题
DOI：
10.3390/s100302450
复制
发表时间：
2010
期刊：
影响因子：
--
通讯作者：
Alghathbar K
中科院分区：
文献类型：
--
作者：
Khan MK;Alghathbar K
由于无线传感器网络（WSN）部署在无人值守的环境中，用户认证是一个关键的安全问题。由于传感器节点配备了有限的计算能力，存储和通信模块，在这样的资源受限的环境中认证远程用户是一个至关重要的安全问题。最近，M。Das提出了一种无线传感器网络中的双因素用户认证方案，并声称他的方案对各种攻击都是安全的。然而，在本文中，我们表明，M.L. DAS方案存在一些严重的安全隐患，不能推荐用于真实的应用。我们指出，在他的方案中：用户不能更改/更新他们的密码，它不提供网关节点和传感器节点之间的相互认证，并且容易受到网关节点绕过攻击和入侵者内部攻击。为了克服M.L.固有的安全弱点，DAS计划，我们提出了改进和安全补丁，试图修复他的计划的兼容性。拟议的安全改进措施可纳入M.L. DAS方案，以实现更安全和鲁棒的无线传感器网络中的双因素用户认证。
User authentication in wireless sensor networks (WSN) is a critical security issue due to their unattended and hostile deployment in the field. Since sensor nodes are equipped with limited computing power, storage, and communication modules; authenticating remote users in such resource-constrained environments is a paramount security concern. Recently, M.L. Das proposed a two-factor user authentication scheme in WSNs and claimed that his scheme is secure against different kinds of attack. However, in this paper, we show that the M.L. Das-scheme has some critical security pitfalls and cannot be recommended for real applications. We point out that in his scheme: users cannot change/update their passwords, it does not provide mutual authentication between gateway node and sensor node, and is vulnerable to gateway node bypassing attack and privileged-insider attack. To overcome the inherent security weaknesses of the M.L. Das-scheme, we propose improvements and security patches that attempt to fix the susceptibilities of his scheme. The proposed security improvements can be incorporated in the M.L. Das-scheme for achieving a more secure and robust two-factor user authentication in WSNs.
登录
查看更多内容
影响因子：
3.7
作者：
Messerges, TS;Dabbish, EA;Sloan, RH
通讯作者：
Sloan, RH
影响因子：
5
作者：
Khan, Muhammad Khurram;Zhang, Jiashu
通讯作者：
Zhang, Jiashu
DOI：
10.3390/s90906869
发表时间：
2009
期刊：
Sensors (Basel, Switzerland)
影响因子：
--
作者：
Buratti C;Conti A;Dardari D;Verdone R
通讯作者：
Verdone R
两种高效智能卡远程用户认证方案的密码分析与改进
影响因子：
5
作者：
Wang, Xiao-Min;Zhang, Wen-Fang;Khan, Muhammad Khurram
通讯作者：
Khan, Muhammad Khurram
影响因子：
10.4
作者：
Das, Manik Lal
通讯作者：
Das, Manik Lal