title: Enhanced Two-Factor Authentication and Key Agreement Using Dynamic Identities in Wireless Sensor Networks.
abstract: Key agreements that use only password authentication are convenient in communication networks, but these key agreement schemes often fail to resist possible attacks, and therefore provide poor security compared with some other authentication schemes. To increase security, many authentication and key agreement schemes use smartcard authentication in addition to passwords. Thus, two-factor authentication and key agreement schemes using smartcards and passwords are widely adopted in many applications. Vaidya et al. recently presented a two-factor authentication and key agreement scheme for wireless sensor networks (WSNs). Kim et al. observed that the Vaidya et al. scheme fails to resist gateway node bypassing and user impersonation attacks, and then proposed an improved scheme for WSNs. This study analyzes the weaknesses of the two-factor authentication and key agreement scheme of Kim et al., which include vulnerability to impersonation attacks, lost smartcard attacks and man-in-the-middle attacks, violation of session key security, and failure to protect user privacy. An efficient and secure authentication and key agreement scheme for WSNs based on the scheme of Kim et al. is then proposed. The proposed scheme not only solves the weaknesses of previous approaches, but also increases security requirements while maintaining low computational cost.
authors.affiliation: Department of Digital Applications, Kang Ning University, Tainan 70970, Taiwan. ipin@ukn.edu.tw.
authors.forename: I-Pin
authors.initials: IP
authors.lastname: Chang
authors.affiliation: Department of Medical Informatics, Tzu Chi University, No. 701, Zhongyang Road, Sec. 3, Hualien 97004, Taiwan. jackytflee@mail.tcu.edu.tw.
authors.forename: Tian-Fu
authors.initials: TF
authors.lastname: Lee
authors.affiliation: Department of Computer Science and Information Engineering, National Chin-Yi University of Technology, Taichung 41170, Taiwan. duke@ncut.edu.tw.
authors.forename: Tsung-Hung
authors.initials: TH
authors.lastname: Lin
authors.affiliation: Department of Computer Science and Information Engineering, National Taipei University of Technology, Taipei 10608, Taiwan. cmliu@csie.ntut.edu.tw.
authors.forename: Chuan-Ming
authors.initials: CM
authors.lastname: Liu
mesh_terms: D003195:Computer Communication Networks; D016494:Computer Security; D006801:Humans; D017216:Telemedicine / Q000379:methods*; D013686:Telemetry / Q000379:methods*
keywords: authentication; dynamic identity; key agreement; password; smartcard; wireless sensor networks