An efficient multi‐gateway‐based three‐factor user authentication and key agreement scheme in hierarchical wireless sensor networks

Abstract

User authentication in wireless sensor network (WSN) plays a very important role in which a legal registered user is allowed to access the real‐time sensing information from the sensor nodes inside WSN. To allow such access, a user needs to be authenticated by the accessed sensor nodes as well as gateway nodes inside WSNs. Because of resource limitations and vulnerability to physical capture of some sensor nodes by an attacker, design of a secure user authentication in WSN continues to be an important and challenging research area in recent years. In this paper, we propose a new three‐factor user authentication scheme based on the multi‐gateway WSN architecture. Through the widely‐accepted Burrows–Abadi–Needham logic, we prove that our scheme provides the secure mutual authentication. We then present the formal security verification of our proposed scheme using AVISPA tool, which is a powerful validation tool for network security applications, and show that our scheme is secure. In addition, the rigorous informal security analysis shows that our scheme is also secure against possible other known attacks including the sensor node capture attack. Furthermore, we present the additional functionality features that our scheme offers, which are efficient in communication and computation. Copyright © 2016 John Wiley & Sons, Ltd.

Design of a secure smart card-based multi-server authentication scheme

“…Thus, the proposed scheme allows that user to update his/her password and biometrics without the hassle of interaction with the server Sj. Consequently, the proposed scheme cannot also achieve truly three-factor security as pointed out in Das et al (2016), , and . pointed out that the widely used formal methods, such as random oracle model and the BAN logic, can not capture some structural mistakes.…”

“…It does not need control server in mutual authentication. However, Wei et al (2014) As in Das et al (2016), we also point out the security failures of previous user authentication schemes. The security failures of previous user authentication schemes are addressed in Huang et al (2011), , and Wang et al (2012).…”

Authentication Protocols for Internet of Things: A Comprehensive Survey

“…The AVISPA tool provides a modular and expressive formal language for specifying security protocols and properties. The protocol [223] uses…”

“…Gope et al [280] proposed a special idea for resilience of DoS attacks in designing anonymous user authentication protocol. Combining three techniques, namely, smart card, password, and personal biometrics, Das et al [223] proposed a three-factor user authentication and key agreement scheme based on multi-gateway WSN architecture. The scheme [223] is efficient in terms of computational, communication, and energy costs compared to the schemes [73], [48], [44], [54].…”

Provably secure user authentication and key agreement scheme for wireless sensor networks

“…In recent years, issue of key distribution and user authentication mechanisms received a substantial attention from researchers . Various schemes to authenticate users in WSNs have been designed as discussed in the review of , but most of these schemes are at risk of one or other security attacks.…”