Abstract:Nowadays wireless sensor networks (WSNs) have drawn great attention from both industrial world and academic community. To facilitate real-time data access for external users from the sensor nodes directly, password-based authentication has become the prevalent authentication mechanism in the past decades. In this work, we investigate three foremost protocols in the area of password-based user authentication scheme for WSNs. Firstly, we analyze an efficient and anonymous protocol and demonstrate that though this protocol is equipped with a formal proof, it actually has several security loopholes been overlooked, such that it cannot resist against smart card loss attack and violate forward secrecy. Secondly, we scrutinize a lightweight protocol and point out that it cannot achieve the claimed security goal of forward secrecy, as well as suffering from user anonymity violation attack and offline password guessing attack. Thirdly, we find that an anonymous scheme fails to preserve two critical properties of forward secrecy and user friendliness. In addition, by adopting the "perfect forward secrecy (PFS)" principle, we provide several effective countermeasures to remedy the identified weaknesses. To test the necessity and effectiveness of our suggestions, we conduct a comparison of 10 representative schemes in terms of the underlying cryptographic primitives used for realizing forward secrecy.

Security Analysis of the Chinese Wireless LAN Standard Implementation Plan

Security Analysis of Certificate Authentication in Chinese WLAN Standard

An ID-Based Key Agreement and Authentication Scheme in WLAN

Formal Analysis and Verification for Authentication Process of WAPI

A secure and efficient user authentication protocol for two-tiered wireless sensor networks

The Study of Secure Authentication Protocol on Wireless LAN

Security Analysis of WEP Algorithm Used in IEEE 802.11

WAPI Protocol Security Performance Evaluation

Security Technology of Wireless Local Area Network

Formal Analysis of an Efficient Handover Authentication Scheme for EAP-Based Wireless Networks with Extending BAN Logic

The Denial of Service Attack Analysis of WLAN Authentication Infrastructure

Security Mechanisms of Wired Equivalent Privacy and Wi-Fi Protected Access in WLAN:Review and Analysis

A Mutual Authentication and Privacy Mechanism for WLAN Security.

The Research and Implementation of IEEE802.1x Authentication in PWLAN

A Security Analysis of the IPSec Based WLAN Solution and a Study of Its Algorithm

Study of Network Authentication Based on RADIUS Protocol

Research and Implementation of Enforced Access Point Design of WLAN

The Authentication In Public Wlan When Access Controller Deplyoed

An enhanced 1-round authentication protocol for wireless body area networks with user anonymity.

Cryptanalysis and Security Enhancement of Three Authentication Schemes in Wireless Sensor Networks.

Experimental Analysis of Secure Authentication Protocols for WLAN-Based Mesh Networks