Securing Heterogeneous Wireless Sensor Networks: Breaking and Fixing a Three-Factor Authentication Protocol

Area of Science:

• Computer Science
• Network Security
• Cryptography

Background:

• Heterogeneous wireless sensor networks (HWSNs) are crucial for real-time applications like healthcare and the Internet of Vehicles (IoV).
• Energy efficiency and robust security are paramount in HWSN authentication due to resource constraints of sensor nodes.
• Amin et al. proposed a three-factor authentication (3FA) scheme for HWSNs, claiming untraceability, anonymity, and efficiency.

Purpose of the Study:

• To identify and address security vulnerabilities in the Amin et al. 3FA protocol for HWSNs.
• To propose an improved and formally verified authentication scheme that enhances security and efficiency in HWSNs.

Main Methods:

• Security analysis of the Amin et al. protocol to reveal weaknesses, including user impersonation, de-synchronization, and traceability attacks.
• Development of an enhanced 3FA protocol to overcome identified vulnerabilities.
• Informal security proofs demonstrating resilience against common HWSN attacks.
• Formal verification of the proposed protocol using BAN logic.

Main Results:

• The Amin et al. protocol was found susceptible to user impersonation, de-synchronization, traceability attacks, and session key disclosure.
• The improved protocol effectively mitigates these identified security flaws.
• Formal verification using BAN logic confirms the enhanced protocol's security guarantees.

Conclusions:

• The proposed enhanced 3FA protocol offers superior security and efficiency compared to the Amin et al. scheme.
• The improved protocol is well-suited for resource-constrained HWSN environments, ensuring secure and reliable authentication.
• This work contributes to advancing secure authentication mechanisms for critical real-time HWSN applications.