Abstract

In the Internet of Things (IoT), numerous devices can interact with each other over the Internet. A wide range of IoT applications have already been deployed, such as transportation systems, healthcare systems, smart buildings, smart factories, and smart cities. Wireless sensor networks (WSNs) play crucial roles in these IoT applications. Researchers have published effective (but not entirely secure) approaches for merging WSNs into IoT environments. In IoT environments, the security effectiveness of remote user authentication is crucial for information transmission. Computational efficiency and energy consumption are crucial because the energy available to any WSN is limited. This paper proposes a notably efficient and secure authentication scheme based on temporal credential and dynamic ID for WSNs in IoT environments. The Burrows–Abadi–Needham (BAN) logic method was used to validate our scheme. Cryptanalysis revealed that our scheme can overcome the security weaknesses of previously published schemes. The security functionalities and performance efficiency of our scheme are compared with those of previous related schemes. The result demonstrates that our scheme’s security functionalities are quantitatively and qualitatively superior to those of comparable schemes. Our scheme can improve the effectiveness of authentication in IoT environments. Notably, our scheme has superior performance efficiency, low computational cost, frugal energy consumption, and low communication cost.

Highlights

  • Internet of Things (IoT) is an emerging technology, which is the extension of Internet connectivity into various devices such as sensors, vehicles, and mobile phones

  • When data from Wireless sensor networks (WSNs) are made available to users, the legitimacy of each user must be verified before the system can grant access to the data, and the sensor nodes reserved for access must be confirmed to be legitimate

  • The major contributions of our work are as follows: 1. We propose a new three-party scheme on the basis of temporal credential [7] and dynamic ID [9, 10] for WSNs in IoT environments to achieve security, mutual authentication, and session key agreement

Read more

Summary

Introduction

Internet of Things (IoT) is an emerging technology, which is the extension of Internet connectivity into various devices such as sensors, vehicles, and mobile phones. These devices can interact with each other over the Internet [1]. Remote user authentication is necessary and critical for secure information transmission in WSNs [2, 5, 7, 8]. Users and sensor nodes must mutually authenticate each other. After they have authenticated each other, they must arrange a session key for information transmission. The adversary cannot obtain useful information to devise an offline check of the correctness of guessed passwords

Preliminaries and technical background
Motivation and contribution
Organization of the paper
Related work in WSNs
Proposed scheme
Login phase
Authentication and key agreement phase
Password change phase
Mutual authentication and session key agreement
Message-meaning rule
Two-factor security
Masquerade attack resistance and replay attack resistance
Stolen verifier attack resistance and insider attack resistance
GWN bypassing attack resistance and GWN spoofing attack resistance
Performance evaluation and functionality comparison
Functionality comparison
Performance evaluation
Findings
Conclusions
Full Text
Published version (Free)

Talk to us

Join us for a 30 min session where you can share your feedback and ask us any queries you have

Schedule a call