Security Enhancement of Robust User Authentication Framework for Wireless Sensor Networks  

作　　者：Jiang Qi Ma Zhuo Ma Jianfeng Li Guangsong 

机构地区：[1]School of Computer Science and Technology, xidian University, Xi'an 710071, P. R. China [2]Department of Information Research, Information Engineering University, Zhengzhou 450002, P. R. China

出　　处：《China Communications》2012年第10期103-111,共9页中国通信（英文版）

基　　金：This work was supported by the Program for Changjiang Scholars and Innovative Research Team in University under Grant No. IRT1078; the Key Program of NSFC-Guangdong Union Foundation under Grant No.U1135002; the Major National S＆T Program under Grant No.2011ZX03005-002; the National Natural Science Foundation of China under Grants No. 61072066, No.61173135, No.61100230, No.61100233, No.61202389, No.61202390; the Natural Science Basic Research Plan in Shaanxi Province of China under Grants No.2012JQ8043, No. 2012JM8030, No. 2012JM8025, No2011JQ8003; the Fundamental Research Funds for the Central Universities under Cxants No. JY10000903001, No. K50511030004. The authors would like to thank the anonymous reviewers and the editor for their constructive comments that have helped us to improve this paper.

摘　　要：In order to relvedy the security weaknesses of a robust user authentication framework for wireless sensor networks, an enhanced user authentication framework is presented. The enhanced scheme requires proof of the possession of both a password and a snort card, and provides more security guarantees in two aspects： 1） it addresses the untmceability property so that any third party accessing the communication channel cannot link two authentication sessions originated from the same user, and 2） the use of a smart card prevents offiine attacks to guess passwords. The security and efficiency analyses indicate that our enhanced scheme provides the highest level of security at reasonable computational costs. Therefore, it is a practical authentication scheme with attractive security features for wireless sensor networks.In order to remedy the security weaknesses of a robust user authentication framework for wireless sensor networks, an enhanced user authentication framework is presented. The enhanced scheme requires proof of the possession of both a password and a smart card, and provides more security guarantees in two aspects: 1) it addresses the untraceability property so that any third party accessing the communication channel cannot link two authentication sessions originated from the same user, and 2) the use of a smart card prevents offline attacks to guess passwords. The security and efficiency analyses indicate that our enhanced scheme provides the highest level of security at reasonable computational costs. Therefore, it is a practical authentication scheme with attractive security features for wireless sensor networks.

关 键 词：AUTHENTICATION ANONYMITY smart card untraceabiliy WSNS 

分 类 号：TP212[自动化与计算机技术—检测技术与自动化装置] TP311.13[自动化与计算机技术—控制科学与工程]