Privacy-Preserving ECC-Based AKA for Resource-Constrained IoT Sensor Networks with Forgotten Password Reset

Area of Science:

• Computer Science
• Cybersecurity
• Network Engineering

Background:

• Wireless sensor networks (WSNs) are crucial for Internet of Things (IoT) applications but face security challenges due to their open nature and resource constraints.
• Existing authentication and key agreement (AKA) protocols struggle to balance security with the limited capabilities of WSN devices, making them vulnerable to attacks.
• Secure access control and data protection are paramount in WSNs, yet designing efficient protocols remains difficult.

Purpose of the Study:

• To propose a physically unclonable function (PUF)-based lightweight and secure authentication and key agreement (AKA) protocol for wireless sensor networks (WSNs).
• To enhance security by incorporating elliptic curve cryptography (ECC) and a secure password update scheme for forgotten passwords.
• To improve resistance against identity-related information leakage through dynamic pseudonyms and session randomness.

Main Methods:

• Development of a novel AKA protocol leveraging physically unclonable functions (PUFs) and elliptic curve cryptography (ECC).
• Implementation of a secure password update mechanism allowing password resets without re-registration.
• Formal security validation using BAN logic and ProVerif, alongside performance evaluation focusing on computational and communication overhead.

Main Results:

• The proposed protocol demonstrates security against common attacks, as confirmed by formal analysis using BAN logic and ProVerif.
• Enhanced user privacy and reduced identity-related information leakage due to dynamic pseudonyms and session randomness.
• Achieved lower computational and communication overhead compared to existing protocols, validating its suitability for resource-constrained WSNs.

Conclusions:

• The PUF-based lightweight AKA protocol offers a robust and efficient solution for securing wireless sensor networks (WSNs) in IoT environments.
• The protocol effectively addresses the security and resource limitations inherent in WSN devices.
• The secure password update feature adds user convenience without compromising overall system security.