Abstract:A smart-card-based user authentication scheme for wireless sensor networks (hereafter referred to as a SCA-WSN scheme) is designed to ensure that only users who possess both a smart card and the corresponding password are allowed to gain access to sensor data and their transmissions. Despite many research efforts in recent years, it remains a challenging task to design an efficient SCA-WSN scheme that achieves user anonymity. The majority of published SCA-WSN schemes use only lightweight cryptographic techniques (rather than public-key cryptographic techniques) for the sake of efficiency, and have been demonstrated to suffer from the inability to provide user anonymity. Some schemes employ elliptic curve cryptography for better security but require sensors with strict resource constraints to perform computationally expensive scalar-point multiplications; despite the increased computational requirements, these schemes do not provide user anonymity. In this paper, we present a new SCA-WSN scheme that not only achieves user anonymity but also is efficient in terms of the computation loads for sensors. Our scheme employs elliptic curve cryptography but restricts its use only to anonymous user-to-gateway authentication, thereby allowing sensors to perform only lightweight cryptographic operations. Our scheme also enjoys provable security in a formal model extended from the widely accepted Bellare-Pointcheval-Rogaway (2000) model to capture the user anonymity property and various SCA-WSN specific attacks (e.g., stolen smart card attacks, node capture attacks, privileged insider attacks, and stolen verifier attacks).

An Efficient Two-Factor User Authentication Framework for Wireless Sensor Networks

A secure and efficient user authentication protocol for two-tiered wireless sensor networks

An Efficient and DoS-resistant User Authentication Scheme for Two-Tiered Wireless Sensor Networks

A Lightweight Three-Factor User Authentication Protocol for the Information Perception of IoT

An Enhanced Two-factor User Authentication Scheme in Wireless Sensor Networks.

A Provably Secure and Lightweight Two-Factor Authentication Protocol for Wireless Sensor Network

Efficient Multi-Factor User Authentication Protocol with Forward Secrecy for Real-Time Data Access in WSNs

Cryptanalysis and Security Enhancement of Three Authentication Schemes in Wireless Sensor Networks.

A Lightweight Secure User Authentication and Key Agreement Protocol for Wireless Sensor Networks.

A Lightweight and Secure Three-Factor Authentication Protocol With Adaptive Privacy-Preserving Property for Wireless Sensor Networks

Toward Multi-User Authentication Using WiFi Signals

Understanding security failures of two-factor authentication schemes for real-time applications in hierarchical wireless sensor networks.

Demo: WISP-based Access Control Combining Electronic and Mechanical Authentication

On the anonymity of two-factor authentication schemes for wireless sensor networks: Attacks, principle and solutions

Sensory-Data-Enhanced Authentication For Rfid-Based Access Control Systems

Dynamic Authentication with Sensory Information for the Access Control Systems.

MultiAuth: Enable Multi-User Authentication with Single Commodity WiFi Device

Measuring Two-Factor Authentication Schemes for Real-Time Data Access in Industrial Wireless Sensor Networks.

Efficient and Anonymous Two-Factor User Authentication in Wireless Sensor Networks: Achieving User Anonymity with Lightweight Sensor Computation

Robust Multi-Factor Authentication for WSNs With Dynamic Password Recovery

On the anonymity of two-factor authentication schemes for wireless sensor networks