IACR Cryptology ePrint Archive · 2009 · 93 citations · 5 references
ComputingComputer EngineeringComputer ScienceAuthenticationComputer SecuritySecurity ProtocolsAuthentication ProtocolsAuthentication SecuritySensor NetworksWireless Network SecurityWireless Sensor Network SecurityWireless Sensor NetworksNode AuthenticationOffline Password CrackingSensor Network AuthenticationSensor Networks SecuritySensor NodesTwo-factor Authentication VulnerabilitiesWireless Sensor Network ProtocolsWireless Sensor Node Security
Abstract — User authentication is essential for customized services and privileged access control in wireless sensor network. In 2009, Das proposed a novel two-factor authentication scheme for wireless sensor network, where a user must prove the possession of both a password and a smart card. His scheme is well-designed for sensor nodes which typically have limited resources in the sense that its authentication procedure requires no public key operations but it utilizes only cryptographic hash function. In this letter, we point out that Das’s protocol is vulnerable to an offline password guessing attack, and also show a countermeasure to overcome the vulnerability without sacrificing any efficiency and usability. Besides the patch, we suggest a method to protect query response messages from wireless a sensor node to a user, which is necessary in serving a user in a confidential and authentic way. Index Terms — Wireless sensor network, authentication, password, smart card
5
On the security of public key protocols
Danny Dolev, A. Yao · IEEE Transactions on Information Theory · 1983 · 5.7K citations
The Kerberos Network Authentication Service (Version 5)
Taylor Yu · 2007 · 68 citations
Radha Poovendran, Jicheol Lee · RFC · 2006 · 63 citations