Abstract:A smart-card-based user authentication scheme for wireless sensor networks (hereafter referred to as a SCA-WSN scheme) is designed to ensure that only users who possess both a smart card and the corresponding password are allowed to gain access to sensor data and their transmissions. Despite many research efforts in recent years, it remains a challenging task to design an efficient SCA-WSN scheme that achieves user anonymity. The majority of published SCA-WSN schemes use only lightweight cryptographic techniques (rather than public-key cryptographic techniques) for the sake of efficiency, and have been demonstrated to suffer from the inability to provide user anonymity. Some schemes employ elliptic curve cryptography for better security but require sensors with strict resource constraints to perform computationally expensive scalar-point multiplications; despite the increased computational requirements, these schemes do not provide user anonymity. In this paper, we present a new SCA-WSN scheme that not only achieves user anonymity but also is efficient in terms of the computation loads for sensors. Our scheme employs elliptic curve cryptography but restricts its use only to anonymous user-to-gateway authentication, thereby allowing sensors to perform only lightweight cryptographic operations. Our scheme also enjoys provable security in a formal model extended from the widely accepted Bellare-Pointcheval-Rogaway (2000) model to capture the user anonymity property and various SCA-WSN specific attacks (e.g., stolen smart card attacks, node capture attacks, privileged insider attacks, and stolen verifier attacks).

On the anonymity of two-factor authentication schemes for wireless sensor networks: Attacks, principle and solutions

On the anonymity of two-factor authentication schemes for wireless sensor networks

A secure and efficient user authentication protocol for two-tiered wireless sensor networks

An Efficient and DoS-resistant User Authentication Scheme for Two-Tiered Wireless Sensor Networks

Understanding security failures of two-factor authentication schemes for real-time applications in hierarchical wireless sensor networks.

Cryptanalysis and Security Enhancement of Three Authentication Schemes in Wireless Sensor Networks.

An Efficient Two-Factor User Authentication Framework for Wireless Sensor Networks

A Secure and Privacy-Preserving Three-Factor Anonymous Authentication Scheme for Wireless Sensor Networks in Internet of Things

A Biometrics-Based Anonymous Authentication and Key Agreement Scheme for Wireless Sensor Networks

Preserving privacy for free: Efficient and provably secure two-factor authentication scheme with user anonymity

Efficient and Anonymous Two-Factor User Authentication in Wireless Sensor Networks: Achieving User Anonymity with Lightweight Sensor Computation

A Lightweight Secure User Authentication and Key Agreement Protocol for Wireless Sensor Networks.

An Enhanced Two-factor User Authentication Scheme in Wireless Sensor Networks.

A Robust Authentication Protocol With Privacy Protection For Wireless Sensor Networks

A Three-Factor Anonymous Authentication Scheme for Wireless Sensor Networks in Internet of Things Environments.

An Efficient Mutual Authentication and Key Agreement Scheme Without Password for Wireless Sensor Networks

On the Usability of Two-Factor Authentication.

An Improved and Provably Secure Three-Factor User Authentication Scheme for Wireless Sensor Networks

Efficient Multi-Factor User Authentication Protocol with Forward Secrecy for Real-Time Data Access in WSNs

Improved privacy-preserving authentication scheme for roaming service in mobile networks

Security Flaw of an Improved User Authentication Scheme with User Anonymity for Wireless Communications.