Journal
JOURNAL OF NETWORK AND COMPUTER APPLICATIONS
Volume 76, Issue -, Pages 37-48Publisher
ACADEMIC PRESS LTD- ELSEVIER SCIENCE LTD
DOI: 10.1016/j.jnca.2016.10.001
Keywords
Wireless sensor network; Authentication; Key agreement; Privacy; Untraceability; Elliptic curve cryptography; Smart card
Categories
Funding
- National Natural Science Foundation of China [61672413, U1405255, U1536202, 61372075, 61309016, 61472310]
- National High Technology Research and Development Program (863 Program) [2015AA016007]
- Natural Science Basic Research Plan in Shaanxi Province of China [2016JM6005]
- Fundamental Research Funds for the Central Universities [JB161501]
- Priority Academic Program Development of Jiangsu Higher Education Institutions (PAPD)
- Jiangsu Collaborative Innovation Center of Atmospheric Environment and Equipment Technology (CICAEET)
- Specific project on research and development platform of Shanghai Science and Technology Committee [14DZ2294400]
Ask authors/readers for more resources
Recently, He et al. proposed an anonymous two-factor authentication scheme following the concept of temporal-credential for wireless sensor networks (WSNs), which is claimed to be secure and capable of withstanding various attacks. However, we reveal that the authentication phase of their scheme has several pitfalls. Firstly, their scheme is susceptible to malicious user impersonation attack, in which a legal but malicious user can impersonate as other registered users. In addition, their scheme is also vulnerable to stolen smart card attack. Furthermore, the scheme cannot provide untraceability and is prone to tracking attack. Then we put forward an untraceable two-factor authentication scheme based on elliptic curve cryptography (ECC) for WSNs. Our new scheme makes up for the missing security features necessary for real-life applications while maintaining the desired features of the original scheme. We prove that the scheme fulfills mutual authentication in the Burrows-Abadi-Needham (BAN) logic. Moreover, by way of informal security analysis, we show that the proposed scheme can resist a variety of attacks and provide more security features than He et al.'s scheme.
Authors
I am an author on this paper
Click your name to claim this paper and add it to your profile.
Reviews
Recommended
No Data Available