Analysis and Improvement on a Three-Factor Authentication Scheme in IoT Environment

Abstract

With the development of IoT technology, more and more devices are connected to the Internet, which brings great convenience to people, but also security risks. As a result, IoT authentication scheme has become a research hotspot. In 2020, Lee et al. proposed a three-factor anonymous authentication scheme in IoT environment and claimed that their scheme can resist many known attacks. However, we find that their scheme not only has some drawbacks, but also has difficulty in resisting man-in-the-middle attack and impersonation attack. To overcome these drawbacks, we propose an improved scheme. Through security analysis and computational cost comparison, it is shown that the improved scheme is not only resistant to existing known attacks, but also has a smaller overhead in terms of computational cost and is suitable for resource-constrained IoT environment.