Provably secure user authentication and key agreement scheme for wireless sensor networks

Security and Communication Networks

Volumn 9, Issue 16, 2016, Pages 3670-3687

  Das, Ashok Kumar ^a   Kumari, Saru ^b   Odelu, Vanga ^c   Li, Xiong ^d   Wu, Fan ^e   Huang, Xinyi ^f,g  

^a INTERNATIONAL INSTITUTE OF INFORMATION TECHNOLOGY   (India)

^b CH CHARAN SINGH UNIVERSITY   (India)

^c INDIAN INSTITUTE OF TECHNOLOGY   (India)

^d HUNAN UNIVERSITY OF SCIENCE AND TECHNOLOGY   (China)

^e XIAMEN INSTITUTE OF TECHNOLOGY   (China)

^f FUJIAN NORMAL UNIVERSITY   (China)

^g STATE KEY LABORATORY OF CRYPTOLOGY   (China)

Author keywords

authentication; AVISPA; elliptic curve cryptography; formal security; key agreement; wireless sensor networks

Indexed keywords

AUTHENTICATION; COPYRIGHTS; GEOMETRY; HASH FUNCTIONS; PUBLIC KEY CRYPTOGRAPHY; SMART CARDS; WIRELESS SENSOR NETWORKS;

AUTHENTICATION AND KEY AGREEMENTS; AVISPA; ELLIPTIC CURVE CRYPTOGRAPHY; FORMAL SECURITY; KEY AGREEMENT; OFFLINE PASSWORD GUESSING ATTACK; RANDOM ORACLE MODEL; USER AUTHENTICATION;

NETWORK SECURITY;

EID: 84983380948     PISSN: 19390114     EISSN: 19390122     Source Type: Journal    
DOI: 10.1002/sec.1573     Document Type: Article

References (47)

1. Chang CC, Le HD. A provably secure, efficient and flexible authentication scheme for ad hoc wireless sensor networks. IEEE Transactions on Wireless Communications 2016; 15(1): 357–366.
2. He D, Zeadally S, Kumar N, Lee JH. Anonymous Authentication for Wireless Body Area Networks With Provable Security. IEEE Systems Journal 2016. DOI: 10.1109/JSYST.2016.2544805.
3. He D, Kumar N, Shen H, Lee JH. One-to-many Authentication for Access Control in Mobile Pay-TV Systems. Science China-Information Sciences 2016; 59(5): 1–14.
4. Wang D, He D, Wang P, Chu CH. Anonymous two-factor authentication in distributed systems: certain goals are beyond attainment. IEEE Transactions on Dependable and Secure Computing 2015; 12(4): 428–442.
5. Huyen NTT, Jo M, Nguyen TD, Huh EN. A beneficial analysis of deployment knowledge for key distribution in wireless sensor networks. Security and Communication Networks 2012; 5(5): 485–495.
6. Huyen NTT, Jo M, Guizani M, Huh EN. An efficient signal-range-based probabilistic key pre-distribution scheme in a wireless sensor network. IEEE Transactions on Vehicular Technology 2009; 58(5): 2482–2497.
7. Das AK. A secure and efficient user anonymity-preserving three-factor authentication protocol for large-scale distributed wireless sensor networks. Wireless Personal Communications 2015; 82(3): 1377–1404.
8. Das AK. A secure and effective biometric-based user authentication scheme for wireless sensor net works using smart card and fuzzy extractor. International Journal of Communication Systems 2015. DOI: 10.1002/dac.2933.
9. Odelu V, Das AK, Goswami A. SEAP: Secure and efficient authentication protocol for NFC applications using pseudonyms. IEEE Transactions on Consumer Electronics 2016; 62(1): 30–38.
10. Das AK, Sutrala AK, Kumari S, Odelu V, Wazid M, Li X. An efficient multi-gateway based three-factor user authentication and key agreement scheme in hierarchical wireless sensor networks. Security and Communication Networks 2016; 9(13): 2070–2092.
11. Das AK. An efficient and novel three-factor user authentication scheme for large-scale heterogeneous wireless sensor networks. International Journal of Communication Networks and Distributed Systems 2015; 15(1): 22–60.
12. Farash MS, Turkanovic M, Kumari S, Holbl M. An efficient user authentication and key agreement scheme for heterogeneous wireless sensor network tailored for the internet of things environment. Ad Hoc Networks 2016; 36, Part 1: 152–176.
13. Jiang Q, Ma J, Lu X, Tian Y. An efficient two-factor user authentication scheme with unlinkability for wireless sensor networks. Peer-to-peer Networking and Applications 2014; 8(6): 1070–1081.
14. Jiang Q, Ma J, Li G, Yang L. An efficient ticket based authentication protocol with unlinkability for wireless access networks. Wireless Personal Communications 2014; 77(2): 1489–1506.
15. Jiang Q, Khan MK, Lu X, Ma J, He D. A privacy preserving three-factor authentication protocol for e-health clouds. The Journal of Supercomputing 2016. 10.1007/s11227-015-1610-x.
16. Jiang Q, Wei F, Fu S, Ma J, Li G, Alelaiwi A. Robust extended chaotic maps-based three-factor authentication scheme preserving biometric template privacy. Nonlinear Dynamics 2015; 83(4): 2085–2101.
17. Kumari S, Khan MK, Atiquzzaman M. User authentication schemes for wireless sensor networks: a review. Ad Hoc Networks 2015; 27: 159–194.
18. Das ML. Two-factor user authentication in wireless sensor networks. IEEE Transactions on Wireless Communications 2009; 8(3): 1086–1090.
19. Das AK, Sharma P, Chatterjee S, Sing JK. A dynamic password-based user authentication scheme for hierarchical wireless sensor networks. Journal of Network and Computer Applications 2012; 35(5): 1646–1656.
20. Chen TH, Shih WK. A robust mutual authentication protocol for wireless sensor networks. ETRI Journal 2010; 32(5): 704–712.
21. He D, Gao Y, Chan S, Chen C, Bu J. An enhanced two-factor user authentication scheme in wireless sensor networks. Ad Hoc and Sensor Wireless Networks 2010; 10(4): 361–371.
22. Khan MK, Alghathbar K. Cryptanalysis and security improvements of two-factor user authentication in wireless sensor networks. Sensors 2010; 10(3): 2450–2459.
23. Turkanovic M, Holbl M. An improved dynamic password-based user authentication scheme for hierarchical wireless sensor networks. Electronic and Electrical Engineering 2013; 19(6): 109–116.
24. Li CT, Weng CY, Lee CC. An advanced temporal credential-based security scheme with mutual authentication and key agreement for wireless sensor networks. Sensors 2013; 13(8): 9589–9603.
25. Xue K, Ma C, Hong P, Ding R. A temporal-credential-based mutual authentication and key agreement scheme for wireless sensor networks. Journal of Network and Computer Applications 2013; 36(1): 316–323.
26. Das AK. A secure and robust temporal credential-based three-factor user authentication scheme for wireless sensor networks. Peer-to-peer Networking and Applications 2016; 9(1): 223–244.
27. Jiang Q, Ma J, Lu X, Tian Y. An efficient two-factor user authentication scheme with unlinkability for wireless sensor networks. Peer-to-peer Networking and Applications 2015; 8(6): 1070–1081.
28. Turkanovic M, Brumen B, Holbl M. A novel user authentication and key agreement scheme for heterogeneous ad hoc wireless sensor networks, based on the internet of things notion. Ad Hoc Networks 2014; 20: 96–112.
29. Stallings W. Cryptography and network security: principles and practices, 3/E. Prentice Hall: New Delhi, India, 2003.
30. Dodis Y, Reyzin L, Smith A. 2004. Fuzzy extractors: how to generate strong keys from biometrics and other noisy data. In Advances in Cryptology-Eurocrypt 2004Springer: Interlaken, Switzerland; 523–540.
31. Odelu V, Das AK, Goswami A. A secure biometrics-based multi-server authentication protocol using smart cards. IEEE Transactions on Information Forensics and Security 2015; 10(9): 1953–1966.
32. Jain A, Hong L, Pankanti S. Biometric identification. Communications of the ACM 2000; 43(2): 90–98.
33. Li CT, Hwang MS. An efficient biometric-based remote authentication scheme using smart cards. Journal of Network and Computer Applications 2010; 33: 1–5.
34. Kocher P, Jaffe J, Jun B. Differential power analysis. In Proceedings of Advances in Cryptology - CRYPTO'99, LNCS: Santa Barbara, California, USA, vol. 1666, 1999; 388–397.
35. Messerges TS, Dabbish EA, Sloan RH. Examining smart-card security under the threat of power analysis attacks. IEEE Transactions on Computers 2002; 51(5): 541–552.
36. Pessl P, Mangard S. 2016. Enhancing side-channel analysis of binary-field multiplication with bit reliability. In Topics in Cryptology - CT-RSA 2016: The Cryptographers' Track at the RSA Conference 2016Springer International Publishing: San Francisco, CA, USA; 255–270.
37. Canetti R, Krawczyk H. 2001. Analysis of key exchange schemes and their use for building secure channels. In Advances in Cryptology–Eurocrypt 2001 Springer: Innsbruck, Austria; 451–472.
38. Das AK. Analysis and improvement on an efficient biometric-based remote user authentication scheme using smart cards. IET Information Security 2011; 5(3): 145–151.
39. Seo SH, Won J, Sultana S, Bertino E. Effective key management in dynamic wireless sensor networks. IEEE Transactions on Information Forensics and Security 2015; 10(2): 371–383.
40. Burrows M, Abadi M, Needham R. A logic of authentication. ACM Transactions on Computer Systems 1990; 8(1): 18–36.
41. Abdalla M, Fouque P, Pointcheval D. Password-based authenticated key exchange in the three-party setting. In Proceedings of the 8th International Workshop on Theory and Practice in Public Key Cryptography (PKC'05): Les Diablerets, Switzerland, 2005; 65–84.
42. AVISPA. Automated validation of internet security protocols and applications, 2015. Http://www.avispa-project.org/[Accessed on September 2015].
43. AVISPA. AVISPA Web Tool, 2015. Http://www.avispa-project.org/web-interface/expert.php/. [Accessed on September 2015].
44. Dolev D, Yao AC. On the security of public key protocols. IEEE Transactions on Information Theory 1983; 29(2): 198–208.
45. Basin D, Modersheim S, Vigano L. OFMC: A symbolic model checker for security protocols. International Journal of Information Security 2005; 4(3): 181–208.
46. Armando A, Basin D, Boichut Y, et al. The AVISPA tool for the automated validation of internet security protocols and applications. In 17th International Conference on Computer Aided Verification (CAV'05), Lecture Notes in Computer Science (LNCS), vol. 3576. Springer-Verlag: University of Edinburgh, Scotland, UK, 2005; 281–285.
47. He D, Kumar N, Lee JH, Sherratt RS. Enhanced three-factor security protocol for consumer USB mass storage devices. IEEE Transactions on Consumer Electronics 2014; 60(1): 30–37.