IoT 환경에서 Tyagi 등이 제안한 사용자 인증 및 키 동의 스킴에 대한 취약점 분석
Cryptanalysis of User Authentication and Key Agreement Scheme Proposed by Tyagi et al. for IoT Environmen
0
조회
0
다운로드
0
인용
0
참고문헌
키워드
초록
IoT에서 무선 센서 네트워크는 핵심적인 역할을 한다. 무선 센서 네트워크는 여러 개의 무선 센서 노드가 상호 연결되어 정보를 수집하고 전송하는 네트워크이다. 무선 센서 네트워크는 무선 기술을 사용하여 노드 간의 통신이 이루어진다. 또한 IoT 장치 간의 통신을 가능하게 하고, 기존의 네트워크와는 다르게 의사소통 수단이 아닌 자동화된 원격 정보 수집을 목적으로 한다. 무선 센서 네트워크는 센서 데이터를 모으기 위해 주로 사용되고, 실시간 데이터 수집 및 분석을 할 수 있으며, 무인 분야에서 다양하게 활용되고 있다. 그리고 다양한 IoT 애플리케이션인 스마트 도시, 스마트 홈, 스마트그리드 등에 사용되고 있다. 하지만 무선 센서 네트워크는 노드들이 일반적으로 변조 방지 기능이 없기 때문에 보안에 취약하다. 따라서 사용자 인증 및 키 합의 프로토콜은 무선 센서 네트워크에서 중요한 연구 분야이다. 최근 Tyagi 등은 보안 취약점을 개선한 무선 센서 네트워크를 위한 사용자 인증및 키 합의 프로토콜을 제안했지만 본 논문에서는 Tyagi 등이 제안한 프로토콜의 동작 과정을 분석하여 Offline ID, PW guessing attack, Bits mismatch, No perfect forward secrecy, No provision of revocation, Insider attack에 취약하다는 것을 밝혀낸다.
Abstract
Wireless Sensor Networks play a key role in IoT. A wireless Sensor Network is a network in which a plurality of wireless sensor nodes are interconnected to collect and transmit information. Wireless Sensor Networks use wireless technology to communicate between nodes. It also enables communication between IoT devices, and unlike existing networks, it is not intended as a means of communication, but rather as an automated remote information collection. Wireless Sensor Networks are mainly used to collect sensor data, can collect and analyze real-time data, are used in various fields of unmanned, and are used in various IoT applications such as smart cities, smart homes, and smart grids. However, Wireless Sensor Networks are vulnerable to security because nodes generally do not have tampering protection. Therefore, user authentication and key agreement protocols are an important field of research in Wireless Sensor Networks. Recently, Tyagi et al. proposed a user authentication and key agreement protocol for wireless sensor networks that improved security vulnerabilities, but this paper analyzes the operation process of the protocol proposed by Tyagi et al. to reveal that it is vulnerable to offline ID, PW guessing attack, bits mismatch, no perfect forward secrecy, no provision of revocation and insider attack.
참고문헌 (18)
- Tyagi P., "An enhanced user authentication and key agreement scheme for wireless sensor networks tailored for IoT", Sensors, 22(22), pp.8793~ (2022)
- Singh A., "Cryptanalysis and improvement in user authentication and key agreement scheme for wireless sensor network", Wireless Personal Communications, 94, pp.1881~1898 (2017)
- M. Turkanović,, "A novel user authentication and key agreement scheme for heterogeneous ad hoc wireless sensor networks based on the Internet of Things notion", Ad Hoc Netw, 20, pp.96~112 (2014)
- Amin, R., "A secure light weight scheme for user authentication and key agreement in multigateway based wireless sensor networks", Ad Hoc Netw, 36, pp.58~80 (2016)
- M. S. Farash, "An efficient user authentication and key agreement scheme for heterogeneous wireless sensor network tailored for the Internet of Things environment", Ad Hoc Netw, 36, pp.152~176 (2016)
- X. Li, "A three-factor anonymous authentication scheme for wireless sensor networks in Internet of Things environments", J. Netw. Comput. Appl, 103, pp.194~204 (2018)
- F. Wu, "A new and secure authentication scheme for wireless sensor networks with formal proof", Peer-to-Peer Netw. Appl, 10(1), pp.16~30 (2017)
- C.-M. Chen, "A secure blockchain-based group key agreement protocol for IoT", J. Supercomput, pp.72~78 (2021)
- H. -L. Yeh, "A secured authentication protocol for wireless sensor networks using elliptic curves cryptography", Sensors, 11(5), pp.4767~4779 (2011)
- K. Xue, "A temporalcredential-based mutual authentication and key agreement scheme for wireless sensor networks", J. Netw. Comput. Appl, 36(1), pp.316~323 (2013)
- Q. Jiang, "An efficient twofactor user authentication scheme with unlinkability for wireless sensor networks", Peer-to-Peer Netw. Appl, 8(6), pp.1070~1081 (2015)
- A. Ghani, "Security and key management in IoT-based wireless sensor networks : An authentication protocol using symmetric key", Int. J. Commun. Syst, 32(16), pp.e4139~ (2019)
- M. L. Das, "Two-factor user authentication in wireless sensor networks", IEEE Trans. Wireless Commun, 8(3), pp.1086~1090 (2009)
- D. He, "A secure temporal-credential-based mutual authentication and key agreement scheme with pseudo identity for wireless sensor networks", Inf. Sci, 321, pp.263~277 (2015)
- Q. Jiang, "Lightweight three-factor authentication and key agreement protocol for internet-integrated wireless sensor networks", IEEE Access, 5, pp.3376~3392 (2017)
- Z. Yang, "Faster authenticated key agreement with perfect forward secrecy for industrial Internet-of-Things", IEEE Trans. Ind. Informat, 16(10), pp.6584~6596 (2020)
- Y. Cho, "A secure three-factor authentication protocol for E-governance system based on multiserver environments", IEEE Access, 10, pp.74351~74365 (2022)
- V. Odelu, "A secure biometrics-based multi-server authentication protocol using smart cards", IEEE Trans. Inf. Forensics Security, 10(9), pp.1953~1966 (2015)