可证明安全的面向无线传感器网络的三因素认证及密钥协商方案

Provably secure three-factor authentication and key agreement scheme for wireless sensor network

对Amin等提出的无线传感器网络环境下匿名认证协议进行了安全分析,指出此协议不能抵抗移动设备丢失攻击、用户冒充攻击及传感器节点捕获攻击。基于口令和智能卡这2个认证因素,增加生物特征标识作为附加安全因素,设计了一个三因素无线传感器认证密钥协商方案。利用BAN逻辑和启发式分析证明了方案的安全性,通过与其他相关协议比较,改进协议计算量相对比较低,且实现了所有安全属性,适应实际的应用。

Analyse an anonymous patient monitoring system using wireless medical sensor networks proposed by Amin et al.,s scheme,we find that the scheme cannot resist mobile device loss attack,user impersonation attack and node capture attack.Taking as the smart card and password are basic secure factors and biometric information is an additional secure factor.We propose a three-factor authentication and key agreement scheme for wireless sensor networks.The proposed scheme is proved to be secure via Burrows-Abadi-Needham(BAN)logic and the heuristic analysis.Finally,we compared our scheme with other related schemes,and the results showed that our proposed scheme not only achieves all security property,but also has lower the computing of the proposed scheme is relatively low.So,it is suitable for practical application.