A provably-secure ECC-based authentication scheme for wireless sensor networks.
A smart-card-based user authentication scheme for wireless sensor networks (in short, a SUA-WSN scheme) is designed to restrict access to the sensor data only to users who are in possession of both a smart card and the corresponding password. While a significant number of SUA-WSN schemes have been suggested in recent years, their intended security properties lack formal definitions and proofs in a widely-accepted model. One consequence is that SUA-WSN schemes insecure against various attacks have proliferated. In this paper, we devise a security model for the analysis of SUA-WSN schemes by extending the widely-accepted model of Bellare, Pointcheval and Rogaway (2000). Our model provides formal definitions of authenticated key exchange and user anonymity while capturing side-channel attacks, as well as other common attacks. We also propose a new SUA-WSN scheme based on elliptic curve cryptography (ECC), and prove its security properties in our extended model. To the best of our knowledge, our proposed scheme is the first SUA-WSN scheme that provably achieves both authenticated key exchange and user anonymity. Our scheme is also computationally competitive with other ECC-based (non-provably secure) schemes.
Department of Computer Engineering, Konkuk University, 268 Chungwondaero, Chungju, Chungcheongbukdo 380-701, Korea. jhnam@kku.ac.kr.
Junghyun
J
Nam
Information Management Division, Korean Intellectual Property Office, 189 Cheongsaro, Daejeon 302-701, Korea. moonseong@kipo.go.kr.
Moonseong
M
Kim
Department of Computer Engineering, Sungkyunkwan University, 2066 Seoburo, Suwon, Gyeonggido 440-746, Korea. wise96@skku.edu.
Juryon
J
Paik
Department of Cyber Investigation Police, Howon University, 64 3-gil, Gunsan, Jeonrabukdo 573-718, Korea. ysooklee@howon.ac.kr.
Youngsook
Y
Lee
Department of Computer Engineering, Sungkyunkwan University, 2066 Seoburo, Suwon, Gyeonggido 440-746, Korea. dhwon@security.re.kr.
Dongho
D
Won