A Physically Secure, Lightweight Three-Factor and Anonymous User Authentication Protocol for IoT

doi:10.1109/ACCESS.2020.3034219

2020-01-01

DOI：10.1109/ACCESS.2020.3034219

原文链接

查看原文

摘要

En 中文

Internet of Things has remarkable effects in human's daily life. It is important for users and sensors to securely access data collected by low-cost sensors via Internet in real-time IoT applications. There exist many authentication protocols for guaranteeing secure communication between users and sensors. However, in some protocols, the privacy of unattended sensors subjected to capture node attacks cannot be guaranteed. Moreover, the sensors subjected to physical tampering attacks can still execute normally the authentication process. Besides, an authentication protocol should be lightweight due to the restricted computing power and storage of the sensors. The idea of designing a more secure and lightweight authentication protocol engender this article. The proposed protocol can provide the physical security through physically unclonable function (PUF), require no additional phase to update challenge-response pairs (CRPs), and store a single CRP for each sensor. At the same time, the proposed protocol utilizes three factors, such as personal biometrics, smartcard and password, to strengthen the security contrasting with two factors, and manipulates some basic cryptographic operations, including bitwise-exclusive-OR (XOR) and hash function, to achieve the lightweight performance. Moreover, both formal security analysis based on Real-Or-Random (ROR) and informal security analysis demonstrate the security of the proposed protocol. Compared with the existing related protocols, the proposed protocol has the advantage in terms of security, functionality and computation costs. Finally, a NS3 simulation on measuring various network performance parameters indicates that the proposed protocol is practical in IoT environment.

Keyword:

Protocols

Authentication

Internet of Things

Sensors

Physical unclonable function

Password

Internet of Things

key agreement

physical unclonable function

mutual authentication

NS3~simulation

AI总结

对已上传原文的论文进行重点信息的提取，主要内容包括：简要概述、研究摘要、背景介绍、关键亮点、图文解析、展望与总结。

期刊

IEEE Access

IF:

3.6

论文数:

9.8W

被引数:

29.4W

机构

Xidian University

学者数:

2.4W

论文数: 1.9W

被引数: 9.7K

引用论文

Flexible and Stretchable Self‐Powered Multi‐Sensors Based on the N‐Type Thermoelectric Response of Polyurethane/Na_x(Ni‐ett)_n Composites

Advanced Electronic Materials

IF0

2019-09-15

OAAI

Kening Wan; Prospero J Taroni; Zilu Liu; Yi Liu; Ying Tu; Giovanni Santagiuliana; I‐Chuan Hsia; Han Zhang; Oliver Fenwick; Steffi Krause; Mark Baxendale; Bob C. Schroeder; Emiliano Bilotti

Towards Strengthening the Resilience of IoV Networks—A Trust Management Perspective 加强IoV网络的弹性-信任管理视角

Future Internet

IF0

2022-06-30