一种强安全的WSN用户认证及密钥协商方案  

A Strongly Secure User Authentication and Key Agreement Scheme for WSN

作　　者：张惠根 周治平[1] 

机构地区：[1]江南大学物联网工程学院,江苏无锡214122

出　　处：《传感技术学报》2015年第8期1207-1214,共8页Chinese Journal of Sensors and Actuators

基　　金：江苏省自然科学基金项目(BK20131107);江苏省产学研联合创新资金--前瞻性联合研究项目(BY2013015-33)

摘　　要：针对无线传感器网络双因素用户认证方案中智能卡内敏感信息被破译、公共信道信息传输被侦听引起的匿名性隐患及密码猜测等攻击,在T-M方案的基础上,注册阶段采用哈希加密深度隐藏了用户隐私信息,增强智能卡中元素的抗猜测性;又将网关作为消息中转站提前对用户进行验证,调整了信息传输结构及认证方式,减少节点能耗且加强消息传输的安全防护;同时,在网关端添加写保护用户身份日志表,及时记录用户登录信息,以防资源滥用。理论分析及实验显示了所提方案有效抵御了T-M方案的不足,大大减少了传感节点的通信开销,提供更多的安全防护且具有计费功能。To tackle these problems of anonymity risk,password guessing and other attacks caused by the sensitive information stored in smart card being deciphered and messages transmitted through common channel being eavesdropped in two-factor-based user authentication schemes of WSN. Based on T-M＆#39;s scheme,the proposed scheme uses hash encryption deeply hides user＆#39;s privacy information in the registration phase,strengthening the guessing-resistance of the elements stored in smart card;simultaneously,takes the gateway as a messages transfer station to authenticate the user＆#39;s legitimacy in advance and adjusts the transmission structure and authentication method to reduce energy consumption of sensor node,strengthening secure protection for the messages;meanwhile,the new scheme adds a write-protected identity table at the gateway side for users,timely records users＆#39; login information to prevent misuse of resources. Theoretical analysis and experiments show that the proposed scheme can effectively resists the shortage of T-M＆#39;s scheme,greatly reducing the communication overhead of sensing nodes,providing more security and having service billing function.

关 键 词：无线传感器网络 用户认证 哈希加密 密钥协商 智能卡 

分 类 号：TP393[自动化与计算机技术—计算机应用技术]