Security Analysis of Two Authentication and Key Agreement Protocols Based on Wireless Sensor Networks

Abstract

In wireless sensor network (WSN), various data is collected via sensors and transmitted over a public channel. However, during the transmission, an attacker can intercept and eavesdrop on data and use it to launch some attacks. Therefore, it is necessary to design secure authentication and key agreement (AKA) protocols in WSN environments, which ensures secure communication between entities. Recently, Yu et al. designed an authentication protocol in WSN and claimed their proposed protocol can resist well-known attacks. In addition, Wang et al. proposed another three-party mutual authentication protocol in IoT-enabled wireless sensor networks. In this paper, we find some security vulnerabilities in both protocols, including sensor node capture attacks, known session-specific temporary information attacks, and violating perfect forward secrecy. Finally, we introduce several suggestions for the improvement of both protocols.