Three-Factor User Authentication and Key Agreement Using Elliptic Curve Cryptosystem in Wireless Sensor Networks

Abstract

Secure communication is a significant issue in wireless sensor networks. User authentication and key agreement are essential for providing a secure system, especially in user-oriented mobile services. It is also necessary to protect the identity of each individual in wireless environments to avoid personal privacy concerns. Many authentication and key agreement schemes utilize a smart card in addition to a password to support security functionalities. However, these schemes often fail to provide security along with privacy. In 2015, Chang et al. analyzed the security vulnerabilities of previous schemes and presented the two-factor authentication scheme that provided user privacy by using dynamic identities. However, when we cryptanalyzed Chang et al.’s scheme, we found that it does not provide sufficient security for wireless sensor networks and fails to provide accurate password updates. This paper proposes a security-enhanced authentication and key agreement scheme to overcome these security weaknesses using biometric information and an elliptic curve cryptosystem. We analyze the security of the proposed scheme against various attacks and check its viability in the mobile environment.

Fuzzy Extractor and Elliptic Curve Based Efficient User Authentication Protocol for Wireless Sensor Networks and Internet of Things

“…However, in this paper we performed the cryptanalysis of A.K.Das [17] scheme and found that it is susceptible to stolen smart card attack. Similarly, we found that Choi et al [21] (proposed in 2016), Park et al [22] (introduced in 2016), and Moon et al's [23] (proposed in 2017) schemes are also insecure against various security attacks as we have illustrated in Section 4 of this paper.…”

“…Park et al [22] performed the security analysis of Chang et al's [29] scheme. Then, Park et al proposed an improved scheme of user authentication using the fuzzy extractor and biometric information in order to provide forward secrecy, accurate password update phase and resist off-line password guessing attacks.…”

“…In the proposed protocol, the registration phase has computation costs T h ≈ 0.50 millisecond and 4T h + T e ≈ ((4 × 0.50 + 50.3) = 52.30) millisecond associated with U i and GW N respectively; the authenticated session key establishment phase has computational costs 3T h ≈ 1.50 millisecond, 3T h + T e ≈ ((1.50 + 50.3) = 51.80) millisecond and TS E ≈ 5.05 millisecond associated with U i , GW N and SN j respectively. Similarly the computational cost for Das et al [17], Choi et al [21], Park et al [22] and Moon et al's [23] schemes are evaluated, represented and compared in Table 27. This comparison indicates that the execution time for the sensor node is very less (because we shifted the overload of performance of elliptic curve point multiplication from sensor node to the gateway node with improved security features) in the proposed protocol.…”

“…As a result, the total communication overhead of A.K.Das's scheme becomes 832 bits. Similarly the communicational overhead for Choi et al [21], Park et al [22] and Moon et al's [23] schemes are evaluated, represented and compared in Table 29. The comparative analysis of Table 29 illustrates that the proposed protocol has less communication overhead (which saves communication energy and bandwidth) compared to other existing protocols.…”

Security Analysis with respect to Wireless Sensor Network – Review

“…YoHan Park et al [33] implemented technique as Biometric based user authentication and key agreement. It is based on ECC.…”