Lightweight three-factor authentication and key agreement protocol for internet-integrated wireless sensor networks

IEEE Access

Volumn 5, Issue , 2017, Pages 3376-3392

  Jiang, Qi ^a   Zeadally, Sherali ^b   Ma, Jianfeng ^a   He, Debiao ^c,d  

^a XIDIAN UNIVERSITY   (China)

^b UNIVERSITY OF KENTUCKY   (United States)

^c WUHAN UNIVERSITY   (China)

^d NANJING UNIVERSITY OF INFORMATION SCIENCE AND TECHNOLOGY   (China)

Author keywords

Authentication; biometrics; key management; privacy; Rabin cryptosystem; smart card; wireless sensor networks

Indexed keywords

AUTHENTICATION; BIOMETRICS; CRYPTOGRAPHY; DATA PRIVACY; INTERNET; INTERNET PROTOCOLS; MOBILE TELECOMMUNICATION SYSTEMS; NETWORK SECURITY; SECURITY SYSTEMS; SENSOR NODES; SMART CARDS; TRANSPORTATION;

AUTHENTICATION AND KEY AGREEMENT PROTOCOLS; AUTHENTICATION AND KEY AGREEMENTS; END-TO-END SECURE COMMUNICATIONS; KEY MANAGEMENT; MUTUAL AUTHENTICATION PROTOCOLS; RABIN CRYPTOSYSTEM; USER AUTHENTICATION PROTOCOLS; WIRELESS SENSOR NETWORK (WSNS);

WIRELESS SENSOR NETWORKS;

EID: 85018460561     PISSN: None     EISSN: 21693536     Source Type: Journal    
DOI: 10.1109/ACCESS.2017.2673239     Document Type: Article

References (71)

1. S. Hong, et al., SNAIL: An IP-based wireless sensor network approach to the Internet of Things, '' IEEEWireless Commun, vol. 17, no. 6, pp. 34-42, Dec. 2010.
2. R. Roman, C. Alcaraz, J. Lopez, and N. Sklavos, Key management systems for sensor networks in the context of the Internet of Things, '? Comput. Elect. Eng, vol. 37, no. 2, pp. 147-159, Mar. 2011.
3. J. Granjal, E. Monteiro, and J. S. Silva, Security in the integration of lowpower Wireless Sensor Networks with the Internet: A survey, '' Ad Hoc Netw, vol. 24, pp. 264-287, Jan. 2015.
4. Z. Sheng, S. Yang, Y. Yu, A. Vasilakos, J. McCann, and K. Leung, A survey on the IETF protocol suite for the Internet of Things: Standards, challenges, and opportunities, '' IEEE Wireless Commun, vol. 20, no. 6, pp. 91-98, Dec. 2013.
5. 6LoWPANWorking Group. Accessed on Jan. 15, 2017. [Online].Available: http://tools.ietf.org/wg/6lowpan/
6. ROLL Working Group. Accessed on Jan. 15, 2017. [Online]. Available: http://tools.ietf.org/wg/roll/
7. R. Roman and J. Lopez, Integrating wireless sensor networks and the Internet: A security analysis, '' Internet Res, vol. 19, no. 2, pp. 246-259, 2009.
8. J. Astorga, E. Jacob, N. Toledo, and J. Unzilla, Enhancing secure access to sensor data with user privacy support, '' Comput. Netw, vol. 64, pp. 159-179, May 2014.
9. J. Qi, X. Hu, Y. Ma, and Y. Sun, A hybrid security and compressive sensing-based sensor data gathering scheme, '' IEEE Access, vol. 3, pp. 718-724, 2015.
10. Z. Fu, X. Sun, Q. Liu, L. Zhou, and J. Shu, Achieving efficient cloud search services: Multi-keyword ranked search over encrypted cloud data supporting parallel computing, '' IEICE Trans. Commun, vol. E98-B, no. 1, pp. 190-200, 2015.
11. Z. Fu, F. Huang, X. Sun, A. V. Vasilakos, and C.-N. Yang, Enabling semantic search based on conceptual graphs over encrypted outsourced data, '' IEEE Trans. Serv. Comput., to be published, doi: 10.1109/TSC.2016.2622697.
12. H. Li, D. Liu, Y. Dai, and T. H. Luan, Engineering searchable encryption of mobile cloud networks: When QoE meets QoP, '' IEEE Wireless Commun, vol. 22, no. 4, pp. 74-80, Aug. 2015.
13. D. He, S. Zeadally, N. Kumar, and J.-H. Lee, Anonymous authentication for wireless body area networks with provable security, '' IEEE Syst. J., to be published, doi: 10.1109/JSYST.2016.2544805.
14. D. He and S. Zeadally, Authentication protocol for an ambient assisted living system, '' IEEE Commun. Mag, vol. 35, no. 1, pp. 71-77, Jan. 2015.
15. K. T. Nguyen, M. Laurent, and N. Oualha, Survey on secure communication protocols for the Internet of Things, '' Ad Hoc Netw, vol. 32, pp. 17-31, Sep. 2015.
16. S. Raza, S. Duquennoy, A. Chung, D. Yazar, T. Voigt, and U. Roedig, Securing communication in 6LoWPAN with compressed IPsec, '' in Proc. 7th Int. Conf. DCOSS, Jun. 2011, pp. 1-8.
17. S. Ray and G. Biswas, Establishment of ECC-based initial secrecy usable for IKE implementation, '' in Proc. World Congr. Eng. (WCE), vol. 1. London, U.K., Jul. 2012, pp. 1-6.
18. S. Kumari, M. K. Khan, and M. Atiquzzaman, User authentication schemes for wireless sensor networks: A review, '' Ad Hoc Netw, vol. 27, pp. 159-194, Apr. 2015.
19. Q. Jiang, J. Ma, X. Lu, and Y. Tian, An efficient two-factor user authentication scheme with unlinkability for wireless sensor networks, '' Peer-Peer Netw. Appl, vol. 8, no. 6, pp. 1070-1081, Nov. 2014.
20. D. He, N. Kumar, and N. Chilamkurti, A secure temporal-credentialbased mutual authentication and key agreement scheme with pseudo identity for wireless sensor networks, '' Inf. Sci, vol. 321, pp. 263-277, Nov. 2015.
21. H. Xiong, Cost-effective scalable and anonymous certificateless remote authentication protocol, '' IEEE Trans. Inf. Forensics Security, vol. 9, no. 12, pp. 2327-2339, Dec. 2014.
22. H. Xiong and Z. Qin, Revocable and scalable certificateless remote authentication protocol with anonymity for wireless body area networks, '? IEEE Trans. Inf. Forensics Security, vol. 10, no. 7, pp. 1442-1455, Jul. 2015.
23. J. Shen, H. Tan, S. Moh, I. Chung, Q. Liu, and X. Sun, Enhanced secure sensor association and key management in wireless body area networks, '? J. Commun. Netw, vol. 17, no. 5, pp. 453-462, Oct. 2015.
24. F. Li and P. Xiong, Practical secure communication for integrating wireless sensor networks into the Internet of Things, '' IEEE Sensors J, vol. 13, no. 10, pp. 3677-3684, Oct. 2013.
25. J. Astorga, E. Jacob, M. Huarte, and M. Higuero, Ladon1: End-To-end authorisation support for resource-deprived environments, '' IET Inf. Secur, vol. 6, no. 2, pp. 93-101, Jun. 2012.
26. Q. Jiang, J. Ma, G. Li, and X. Li, Improvement of robust smart-cardbased password authentication scheme, '' Int. J. Commun. Syst, vol. 28, no. 2, pp. 383-393, Jan. 2015.
27. M. L. Das, Two-factor user authentication in wireless sensor networks, '? IEEE Trans. Wireless Commun, vol. 8, no. 3, pp. 1086-1090, Mar. 2009.
28. S. Kumari, et al., A user friendly mutual authentication and key agreement scheme for wireless sensor networks using chaotic maps, '' Future Generat. Comput. Syst, vol. 63, pp. 56-75, Oct. 2016.
29. Q. Jiang, J. Ma, F. Wei, Y. Tian, J. Shen, and Y. Yang, An untraceable temporal-credential-based two-factor authentication scheme using ECC for wireless sensor networks, '' J. Netw. Comput. Appl, vol. 76, pp. 37-48, Dec. 2016.
30. Q. Jiang, N. Kumar, J. Ma, J. Shen, D. He, and N. Chilamkurti, A privacyaware two-factor authentication protocol based on elliptic curve cryptography for wireless sensor networks, '' Int. J. Netw. Manage., 2016, doi: 10.1002/nem.1937.
31. F. Wei, J. Ma, Q. Jiang, J. Shen, and C. Ma, Cryptanalysis and improvement of an enhanced two-factor user authentication scheme in wireless sensor networks, '' Inf. Technol. Control, vol. 45, no. 1, pp. 62-70, 2016.
32. M. Turkanovic, B. Brumen, and M. Hölbl, Anovel user authentication and key agreement scheme for heterogeneous ad hoc wireless sensor networks, based on the Internet of Things notion, '' Ad Hoc Netw, vol. 20, pp. 96-112, Sep. 2014.
33. R. Amin and G. P. Biswas, A secure light weight scheme for user authentication and key agreement in multi-gateway based wireless sensor networks, '' Ad Hoc Netw, vol. 36, pp. 58-80, Jan. 2016.
34. M. S. Farash, M. Turkanovic, M. Kumari, and S. Hölb, An efficient user authentication and key agreement scheme for heterogeneous wireless sensor network tailored for the Internet of Things environment, '' Ad Hoc Netw, vol. 36, pp. 152-176, Jan. 2016.
35. C.-C. Chang and H. D. Le, A provably secure, efficient, and fiexible authentication scheme for ad hoc wireless sensor networks, '' IEEE Trans. Wireless Commun, vol. 15, no. 1, pp. 357-366, Jan. 2016.
36. Y. Lu, L. Li, H. Peng, and Y. Yang, An energy efficient mutual authentication and key agreement scheme preserving anonymity for wireless sensor networks, '' Sensors, vol. 16, no. 6, 2016, Art. no. 837.
37. F. Wu, et al., An efficient authentication and key agreement scheme for multi-gateway wireless sensor networks in IoT deployment, '? J. Netw. Comput. Appl., 2016. [Online]. Available: http://dx.doi.org/10.1016/j.jnca.2016.12.008
38. A. K. Das, et al., Provably secure user authentication and key agreement scheme for wireless sensor networks, '' Secur. Commun. Netw, vol. 9, no. 16, pp. 3670-3687, Nov. 2016.
39. R. Amin, S. H. Islam, G. P. Biswas, M. K. Khan, L. Leng, and N. Kumar, Design of an anonymity-preserving three-factor authenticated key exchange protocol for wireless sensor networks, '' Comput. Netw, vol. 101, pp. 42-62, Jun. 2016.
40. D. He and D. Wang, Robust biometrics-based authentication scheme for multiserver environment, '' IEEE Syst. J, vol. 9, no. 3, pp. 816-823, Sep. 2015.
41. X. Li, J. Niu, Z. Wang, and C. Chen, Applying biometrics to design threefactor remote user authentication scheme with key agreement, '' Secur. Commun. Netw, vol. 7, no. 10, pp. 1488-1497, Oct. 2014.
42. Q. Jiang, F. Wei, S. Fu, J. Ma, G. Li, and A. Alelaiwi, Robust extended chaotic maps-based three-factor authentication scheme preserving biometric template privacy, '' Nonlinear Dyn, vol. 83, no. 4, pp. 2085-2101, Mar. 2016.
43. Q. Jiang, M. K. Khan, X. Lu, J. Ma, and D. He, A privacy preserving three-factor authentication protocol for e-health clouds, '' J. Supercomput, vol. 72, no. 10, pp. 3826-3849, Oct. 2016.
44. Q. Jiang, J. Ma, and F. Wei, On the security of a privacy-Aware authentication scheme for distributed mobile cloud computing services, '' IEEE Syst. J., to be published, doi: 10.1109/JSYST.2016.2574719.
45. A. K. Das, A secure and robust temporal credential-based three-factor user authentication scheme for wireless sensor networks, '' Peer-Peer Netw. Appl, vol. 9, no. 1, pp. 223-244, Jan. 2014.
46. A. K. Das, A secure and effective biometric-based user authentication scheme for wireless sensor networks using smart card and fuzzy extractor, '? Int. J. Commun. Syst, vol. 30, no. 1, p. e2933, Jan. 2017, doi: 10.1002/dac.2933.
47. A. K. Das, A secure and efficient user anonymity-preserving three-factor authentication protocol for large-scale distributed wireless sensor networks, '? Wireless Pers. Commun, vol. 82, no. 3, pp. 1377-1404, Jun. 2015.
48. F. Wu, L. Xu, S. Kumari, and X. Li, An improved and provably secure three-factor user authentication scheme for wireless sensor networks, '? Peer-Peer Netw. Appl., 2016, doi: 10.1007/s12083-016-0485-9.
49. X. Li, J. Niu, S. Kumari, J. Liao, W. Liang, and M. K. Khan, A new authentication protocol for healthcare applications using wireless medical sensor networks with user anonymity, '' Secur. Commun. Netw, vol. 9, no. 15, pp. 2643-2655, Oct. 2016.
50. A. K. Das, A. K. Sutrala, V. Odelu, and A. Goswami, A secure smartcardbased anonymous user authentication scheme for healthcare applications using wireless medical sensor networks, '' Wireless Pers. Commun., 2016, doi: 10.1007/s11277-016-3718-6.
51. B. Blanchet, An efficient cryptographic protocol verifier based on prolog rules, '' in Proc. IEEE Comput. Soc. Found. (CSFW), Jun. 2001, pp. 82-96.
52. I. Natgunanathan, A. Mehmood, Y. Xiang, G. Beliakov, and J. Yearwood, Protection of privacy in biometric data, '' IEEE Access, vol. 4, pp. 880-892, 2016.
53. Y. Dodis, L. Reyzin, and A. Smith, Fuzzy extractors: How to generate strong keys from biometrics and other noisy data, '' in Proc. EUROCRYPT, 2004, pp. 523-540.
54. A. Juels and M. Sudan, A fuzzy vault scheme, '' in Proc. IEEE Int. Symp. Inf. Theory (ISIT), Jun./Jul. 2002, p. 408.
55. A. T. B. Jin, D. N. C. Ling, and A. Goh, BioHashing: Two factor authentication featuring fingerprint data and tokenised random number, '? Pattern Recognit, vol. 37, no. 11, pp. 2245-2255, Apr. 2004.
56. R. Lumini and L. Nanni, An improved BioHashing for human authentication, '? Pattern Recognit, vol. 40, no. 3, pp. 1057-1065, Mar. 2007.
57. M. O. Rabin, Digitalized signatures and public-key functions as intractable as factorization, '' MIT Lab. Comput. Sci., Cambridge, MA, USA, Tech. Rep., 1979.
58. H.-Y. Chien, Combining Rabin cryptosystem and error correction codes to facilitate anonymous authentication with un-Traceability for low-end devices, '' Comput. Netw, vol. 57, no. 14, pp. 2705-2717, Oct. 2013.
59. D. Wang, D. He, P. Wang, and C.-H. Chu, Anonymous two-factor authentication in distributed systems: Certain goals are beyond attainment, '' IEEE Trans. Depend. Sec. Comput, vol. 12, no. 4, pp. 428-442, Jul./Aug. 2015.
60. D. Wang and P. Wang, Two birds with one stone: Two-factor authentication with security beyond conventional bound, '' IEEE Trans. Depend. Sec. Comput., to be published, doi: 10.1109/TDSC.2016.2605087.
61. D. Wang, Q. Gu, H. Cheng, and P. Wang, The request for better measurement: A comparative evaluation of two-factor authentication schemes, '? in Proc. 11th ACM Asia Conf. Comput. Commun. Secur., May 2016, pp. 475-486.
62. P. C. Kocher, J. Jaffe, and B. Jun, Differential power analysis, '' in Proc. Adv. Cryptol., Santa Barbara, CA, USA, Aug. 1999, pp. 388-397.
63. T. S. Messerges, E. A. Dabbish, and R. H. Sloan, Examining smart-card security under the threat of power analysis attacks, '' IEEE Trans. Comput, vol. 51, no. 5, pp. 541-552, May 2002.
64. M. Abdalla, F. Benhamouda, and P. MacKenzie, Security of the J-PAKE password-Authenticated key exchange protocol, '' in Proc. IEEE S&P, May 2015, pp. 571-587.
65. A. G. Reddy, A. K. Das, E. J. Yoon, and K.-Y. Yoo, A secure anonymous authentication protocol for mobile services on elliptic curve cryptography, '? IEEE Access, vol. 4, pp. 4394-4407, 2016.
66. Z. Fu, X. Sun, S. Ji, and G. Xie, Towards efficient content-Aware search over encrypted outsourced data in cloud, '' in Proc. 35th Annu. IEEE Int. Conf. Comput. Commun. (IEEE INFOCOM), San Francisco, CA, USA, Apr. 2016, pp. 1-9, doi: 10.1109/INFOCOM.2016.7524606.
67. Z. Fu, X. Wu, C. Guan, X. Sun, and K. Ren, Toward efficient multikeyword fuzzy search over encrypted outsourced data with accuracy improvement, '' IEEE Trans. Inf. Forensics Security, vol. 11, no. 12, pp. 2706-2716, Dec. 2016.
68. Z. Xia, X. Wang, X. Sun, and Q. Wang, A secure and dynamic multikeyword ranked search scheme over encrypted cloud data, '' IEEE Trans. Parallel Distrib. Syst, vol. 27, no. 2, pp. 340-352, Jan. 2016.
69. Z. Xia, X. Wang, L. Zhang, Z. Qin, X. Sun, and K. Ren, A privacypreserving and copy-deterrence content-based image retrieval scheme in cloud computing, '' IEEE Trans. Inf. Forensics Security, vol. 11, no. 11, pp. 2594-2608, Nov. 2016.
70. S. Zeadally and M. Badra, Eds., Privacy in a Digital, Networked World: Technologies, Implications and Solutions. London, U.K.: Springer, Oct. 2015.
71. Z. Liu, H. Seo, J. Groÿschädl, and H. Kim, Efficient implementation of NIST-compliant elliptic curve cryptography for 8-bit AVR-based sensor nodes, '' IEEE Trans. Inf. Forensics Security, vol. 11, no. 7, pp. 1385-1397, Jul. 2016.