A Secure and Scalable Group Access Control Scheme for Wireless Sensor Networks

Abstract

Recently, in 2013, Wu et al. proposed an efficient adaptable and scalable group access control scheme (GAC) for managing wireless sensor networks and they claimed that their proposed GAC approach provides the forward secrecy and backward secrecy, and it also prevents the man-in-the-middle attack. However, in this paper, we revisit Wu et al.'s scheme and show that Wu et al.'s scheme fails to provide the forward and backward secrecy to the group access key (GAK), and also their scheme does not prevent the man-inthe-middle attack and it does not provide the mutual authentication between a node and the task manager. Moreover, in Wu et al.'s scheme, all the past GAKs used by a node can be revealed to an adversary when that node is compromised. We then aim to propose a novel group access control mechanism to withstand the security weaknesses found in Wu et al.'s scheme while retaining the original merits of their scheme. Through the rigorous informal security analysis and the formal security analysis using the widely-accepted BurrowsAbadi-Needham logic, we show that our scheme is secure against various known attacks including the attacks found in Wu et al.'s scheme. Moreover, in our scheme, the vulnerability of the GAKs used by a node is limited and bounded to the last GAK update protocol interval when that node is compromised by an adversary. Our scheme provides efficient dynamic properties such as joining and leaving of a node from a group along with high security and the required desirable features as compared to Wu et al.'s scheme, and as a result, our scheme is very suitable for the practical applications.

An efficient multi‐gateway‐based three‐factor user authentication and key agreement scheme in hierarchical wireless sensor networks

“…We present the formal security verification of our proposed scheme by simulating the scheme using AVISPA tool, which is a powerful validation tool for network security protocols and applications and is accepted by wide variety of audience . Using AVISPA tool, we show that our proposed scheme is free from man‐in‐the‐middle and replay attacks.…”

“…Chen and Shih proposed a robust and improved mutual authentication scheme over Das's scheme showing that Das's scheme fails to provide proper mutual authentication. Fan et al , also proposed a simple and efficient user authentication scheme for two‐tiered WSN that is secure from denial‐of‐service attack and supports session key establishment between a legal user and master node.…”

On the design of secure user authenticated key management scheme for multigateway‐based wireless sensor networks using ECC

“…AVISPA is an automated validation tool with a high‐level language specification for the security sensitive applications and protocols . In recent years, AVISPA becomes a popular and powerful tool for the formal security verification . AVISPA provides various automatic analysis techniques through its 4 back ends: (1) OFMC, (2) CL‐AtSe, (3) SATMC, and (4) TA4SP.…”

Design of a secure smart card-based multi-server authentication scheme

“…AVISPA is a widely-accepted powerful tool and it provides a modular and expressive formal language for specifying protocols and their security properties, and integrates different back-ends that implement a variety of state-of-theart automatic analysis techniques (Chatterjee et al, 2014;Das, 2015Das, , 2016Das and Goswami, 2013;Mishra et al, 2014Mishra et al, , 2016Odelu et al, 2015aOdelu et al, , 2015bOdelu et al, , 2015cOdelu et al, , 2015dOdelu et al, , 2016. The architecture of the AVISPA tool v.1.1 provided in Fig.…”