An advanced temporal credential-based security scheme with mutual authentication and key agreement for wireless...

Area of Science:

• Computer Science
• Network Security
• Cryptography

Background:

• Wireless Sensor Networks (WSNs) require robust security models for user and data protection.
• Xue et al. proposed a temporal-credential-based mutual authentication and key agreement scheme in 2013.
• Secure authentication is crucial for WSNs deployed in unattended environments.

Purpose of the Study:

• To analyze the security vulnerabilities of Xue et al.'s authentication scheme for WSNs.
• To propose a simple countermeasure to address identified security weaknesses.
• To maintain the original merits of Xue et al.'s scheme while enhancing security.

Main Methods:

• Security analysis of Xue et al.'s temporal-credential-based mutual authentication and key agreement scheme.
• Identification of specific attacks the scheme is vulnerable to, including stolen-verifier and insider attacks.
• Development of a novel countermeasure to mitigate identified security risks.

Main Results:

• Xue et al.'s scheme is susceptible to stolen-verifier, insider, off-line password guessing, smart card loss, and multiple logged-in user attacks.
• The proposed countermeasure effectively prevents these identified attacks.
• The core functionalities and advantages of the original scheme remain intact after applying the countermeasure.

Conclusions:

• The original authentication scheme by Xue et al. is not secure for practical WSN applications due to identified vulnerabilities.
• The proposed simple countermeasure significantly enhances the security of the authentication scheme.
• The improved scheme offers a practical solution for secure authentication in Wireless Sensor Networks.