可证明安全的面向无线传感器网络的三因素认证及密钥协商方案  

Provably secure three-factor authentication and key agreement scheme for wireless sensor network

作　　者：屈娟[1] 冯玉明[2] 李艳平[3] 李丽[1] QU Juan;FENG Yuming;LI Yanping;LI Li(School of Mathematics and Statistics, Chongqing Three Gorges University, Chongqing 404100, China;Key Laboratory of Intelligent Information Processing and Control of Chongqing Municipal Institutions of Higher Education,Chongqing Three Gorges University, Chongqing 404100, China;College of Mathematics and Information Science, ShaanXi Normal University, Xi’an 710062, China)

机构地区：[1]重庆三峡学院数学与统计学院,重庆404100 [2]重庆三峡学院智能信息处理与控制重庆高校市级重点实验室,重庆404100 [3]陕西师范大学数学与信息科学学院,陕西西安710062

出　　处：《通信学报》2018年第A02期189-197,共9页Journal on Communications

基　　金：国家自然科学基金资助项目(No.61402275);重庆市教委科学技术研究资助项目(No.KJ1501019)~~

摘　　要：对Amin等提出的无线传感器网络环境下匿名认证协议进行了安全分析,指出此协议不能抵抗移动设备丢失攻击、用户冒充攻击及传感器节点捕获攻击。基于口令和智能卡这2个认证因素,增加生物特征标识作为附加安全因素,设计了一个三因素无线传感器认证密钥协商方案。利用BAN逻辑和启发式分析证明了方案的安全性,通过与其他相关协议比较,改进协议计算量相对比较低,且实现了所有安全属性,适应实际的应用。Analyse an anonymous patient monitoring system using wireless medical sensor networks proposed by Amin et al.,s scheme,we find that the scheme cannot resist mobile device loss attack,user impersonation attack and node capture attack.Taking as the smart card and password are basic secure factors and biometric information is an additional secure factor.We propose a three-factor authentication and key agreement scheme for wireless sensor networks.The proposed scheme is proved to be secure via Burrows-Abadi-Needham(BAN)logic and the heuristic analysis.Finally,we compared our scheme with other related schemes,and the results showed that our proposed scheme not only achieves all security property,but also has lower the computing of the proposed scheme is relatively low.So,it is suitable for practical application.

关 键 词：无线传感器网络 生物特征 密钥协商 智能卡 

分 类 号：TP309[自动化与计算机技术—计算机系统结构]