IoT 환경에서 보안성이 강화된 사용자 인증 기법
An Enhanced Secure User Authentication Scheme for IoT Environments
0
조회
0
다운로드
0
인용
0
참고문헌
키워드
초록
IoT에서 무선 센서 네트워크는 데이터를 실시간으로 수집하고 전송하는 중요한 역할을 한다. 무선 센서 네트워크는 소형의 센서 노드들이 무선 통신을 통해 상호 연결되어 데이터를 수집하고 전송하는 형태의 네트워크이다. 이러한 무선 센서 네트워크는 센서 노드를 주로 응용 환경에 배치하고, 자율적으로 네트워크를 형성한 후, 센서 노드로부터 얻은 물리적 정보들을 무선으로 수집하여 감시, 제어등의 용도로 활용하는 기술이다. 하지만 센서 노드는 무선 통신을 사용하기 때문에 공격자가 도청, 중간자 공격 등을 사용해서 센서 노드에서 데이터를 가져갈 수 있다. 따라서 무선 센서 네트워크의 사용자 인증 및 키 합의 프로토콜은 중요한 연구 분야이다. 본 논문에서는 Tyagi 등이 제안한 무선 센서 네트워크의 취약점을 보완한 인증 방식을 제안하고, 이에 대한 보안 분석을 한 결과 Stolen smart card attack, Offline password guessing attack, Identity guessing attack, Insider attack, User forgery attack 등 여러 공격에 안전하고, 제안한 프로토콜은 계산 비용, 통신 비용 측면에서도 효율적이다.
Abstract
In IoT, Wireless Sensor Networks (WSNs) play a crucial role in the real-time collection and transmission of data. A wireless sensor network is a network in which small sensor nodes are interconnected through wireless communication to collect and transmit data. This wireless sensor network is a technology primarily deployed by situating sensor nodes in various application environments. After autonomously forming a network, it collects physical information wirelessly from sensor nodes and utilizes it for purposes such as monitoring and control. However, since sensor nodes use wireless communication, attackers can potentially eavesdrop on or intercept data from sensor nodes using methods such as man-in-the-middle attacks. Therefore, user authentication and key agreement protocols in wireless sensor networks stand out as crucial areas of research. In this paper, we propose an authentication method that addresses vulnerabilities identified by Tyagi et al. in wireless sensor networks. The security analysis results demonstrate that the proposed protocol is resilient against various attacks, including stolen smart card attack, offline password guessing attack, identity guessing attack, insider attack, and user forgery attack. Furthermore, the proposed protocol proves to be efficient in terms of computational and communication costs.
참고문헌 (20)
- P Tyagi, "An enhanced user authentication and key agreement scheme for wireless sensor networks tailored for IoT", Sensors, 22(22), pp.8793~ (2022)
- A Singh, "Cryptanalysis and improvement in user authentication and key agreement scheme for wireless sensor network", Wireless Personal Communications, 94, pp.1881~1898 (2017)
- M. Turkanović, "A novel user authentication and key agreement scheme for heterogeneous ad hoc wireless sensor networks based on the Internet of Things notion", Ad Hoc Netw, 20, pp.96~112 (2014)
- R Amin, "A secure light weight scheme for user authentication and key agreement in multigateway based wireless sensor networks", Ad Hoc Netw, 36, pp.58~80 (2016)
- M. S. Farash, "An efficient user authentication and key agreement scheme for heterogeneous wireless sensor network tailored for the Internet of Things environment", Ad Hoc Netw, 36, pp.152~176 (2016)
- X. Li, "A three-factor anonymous authentication scheme for wireless sensor networks in Internet of Things environments", J. Netw. Comput. Appl, 103, pp.194~204 (2018)
- F. Wu, "A new and secure authentication scheme for wireless sensor networks with formal proof", Peer-to-Peer Netw. Appl, 10(1), pp.16~30 (2017)
- C. -M. Chen, "A secure blockchain-based group key agreement protocol for IoT", J. Supercomput, pp.72~78 (2021)
- H. -L. Yeh, "A secured authentication protocol for wireless sensor networks using elliptic curves cryptography", Sensors, 11(5), pp.4767~4779 (2011)
- 최은복, "클라우드 환경에서 안전한 접근제어를 위한 연산서비스 메커니즘", 정보화연구, 20(1), pp.1~8 (2023), 한국엔터프라이즈아키텍처학회[DOI]
- M. L. Das, "Two-factor user authentication in wireless sensor networks", IEEE Trans. Wireless Commun, 8(3), pp.1086~1090 (2009)
- K. Xue, "A temporalcredential-based mutual authentication and key agreement scheme for wireless sensor networks", J. Netw. Comput. Appl, 36(1), pp.316~323 (2013)
- Q. Jiang, "An efficient twofactor user authentication scheme with unlinkability for wireless sensor networks", Peer-to-Peer Netw. Appl, 8(6), pp.1070~1081 (2015)
- D. He, "A secure temporal-credential-based mutual authentication and key agreement scheme with pseudo identity for wireless sensor networks", Inf. Sci, 321, pp.263~277 (2015)
- P.K Dhillon, "Secure multi-factor remote user authentication scheme for Internet of Things environments", Int. J. Commun. Syst, 30, pp.e3323~ (2017)
- R Amin, "A robust and anonymous patient monitoring system using wireless medical sensor networks", Futur. Gener. Comput. Syst, 80, pp.483~495 (2018)
- J. Srinivas, "A Mutual Authentication Framework for Wireless Medical Sensor Networks", J. Med Syst, 41, pp.1~19 (2017)
- A. Ghani, "Security and key management in IoT-based wireless sensor networks : An authentication protocol using symmetric key", Int. J. Commun. Syst, 32(16), pp.e4139~ (2019)
- H. Lee, "A three-factor anonymous user authentication scheme for Internet of Things environments", Journal of Information Security and Applications, 52, pp.102494~ (2020)
- P. Mall, "CoMSeC++: PUF-based secured light-weight mutual authentication protocol for Drone-enabled WSN", Computer Networks, 199, pp.108476~ (2021)