무선 센서 네트워크 상에서 멀티 패스워드를 활용한 사용자 인증기술 강화방안 연구
A study on Enhanced user authentication technology using multi-password on wireless sensor network
0
조회
0
다운로드
0
인용
0
참고문헌
키워드
초록
무선 센서 네트워크(Wireless Sensor Network, WSN)는 군사, 헬스케어, 환경 모니터링, 산업현장 및 스마트 빌딩 등에서 다양하게 활용되고 있다. 군사관련 법률 및 개인정보보호법의 절차에 따라 위험한 환경을 관찰하고 기록해야하는 군사 작전 지역에 배치된 무선센서는 작전 지역 내 환경의 변화를 측정하여 작전을 수행하는데필요한 정보를 수집하는데 필수적인 요소이다. Liu 등은 사용자와센서 노드간의 세션키를 생성하는 과정에서 멀티 패스워드를 사용하는 방식을 통하여 임시 자격증명 기반 상호인증 스킴을 제안하였다. 하지만 이 스킴은 익명성을 보장하지 못하고, DoS 공격에 취약할 수 있으며, 사용자와 센서노드 간의 통신에서 취약점이 발견되었으며, 사용자에 의해서 센서의 세션키가 노출되는 문제가 있었다. 본 논문에서는 군의 암호 및 인증기술 역량 향상을 위해서 보안성이 향상된 멀티 패스워드를 이용한 임시 자격증명 기반 상호인증스킴을 제안하고 안전성을 분석한다
Abstract
With the development of wireless communication technology, wireless sensor nodes that consume less batteries and have various functions are developing. And as the Internet of Things becomes more common, wireless sensor networks are being used in various fields, including military, reactor control systems, and medical monitoring. In particular, it plays an important role in collecting information in accordance with military law and personal information protection act within the region during military operations. As a result, various studies on wireless sensor networks have been conducted, among which research on security issues arising during authentication is aimed at reducing the overhead of computing power required for security while achieving security objectives.. Liu et al. proposed a temporary credential-based mutual authentication scheme by using multi-password in the process of generating session keys between users and sensor nodes. However, the scheme failed to guarantee anonymity, could be vulnerable to DoS attacks, vulnerabilities were found in communication between the user and the sensor node, and the session key of the sensor was exposed by the user. We propose a temporary credential-based mutual authentication scheme using multi-password with improved security to improve the county's password and authentication technology capabilities and analyze safety.
참고문헌 (15)
- 정성민, "무선 센서 네트워크에서 효율적인 에너지 소비를 위한 다중 체인 기반 라우팅 프로토콜", 디지털콘텐츠학회논문지, 21(6), pp.1181~1189 (2020), 한국디지털콘텐츠학회[DOI]
- R. Roman, "Key management systems for sensor networks in the context of the Internet of Things", Computers & Electrical Engineering, 37(2), pp.147~159 (2011)
- 최윤성, "무선 센서 네트워크 환경을 위한 보안성이 향상된 프라이버시 보호형 two-factor 인증 프로토콜", (사)디지털산업정보학회 논문지, 15(4), pp.71~84 (2019), (사)디지털산업정보학회
- R. Watro, "TinyPK: securing sensor networks with public key technology", Proceedings of the 2nd ACM workshop on Security of ad hoc and sensor networks, pp.59~64 (2004)
- J. Nam, "Efficient and anonymous two-factor user authentication in wireless sensor networks: achieving user anonymity with lightweight sensor computation", Plos one, 10(4), pp.e0116709~ (2015)
- K. H. Wong, "A dynamic user authentication scheme for wireless sensor networks", IEEE International Conference on Sensor Networks, Ubiquitous, and Trustworthy Computing (SUTC'06), 1, pp.8~ (2006), IEEE
- M. L. Das, "Two-factor user authentication in wireless sensor networks", IEEE transactions on wireless communications, 8(3), pp.1086~1090 (2009)
- K. Xue, "A temporal-credential-based mutual authentication and key agreement scheme for wireless sensor networks", Journal of Network and Computer Applications, 36(1), pp.316~323 (2013)
- Q. Jiang, "An efficient two-factor user authentication scheme with unlinkability for wireless sensor networks", Peer-to-peer Networking and Applications, 8(6), pp.1070~1081 (2015)
- X. Liu, "A temporal credential-based mutual authentication with multiple-password scheme for wireless sensor networks", PloS one, 12(1), pp.e0170657~ (2017)
- Y. Choi, "Weaknesses of Temporal Credential-Based Mutual Authentication with a Multiple-Password Scheme for Wireless Sensor Networks", International Journal of Applied Engineering Research, 12(17), pp.6962~6969 (2017)
- J. Jung, "Efficient and security enhanced anonymous authentication with key agreement scheme in wireless sensor networks", Sensors, 17(3), pp.644~ (2017)
- Moon, J., "Improving biometric-based authentication schemes with smart card revocation", reissue for wireless sensor networks, 2017, pp.17(5), 940~
- D. Kang, "Security analysis and enhanced user authentication in proxy mobile IPv6 networks", PloS one, 12(7), pp.e0181031~ (2017)
- H. Lee, "A three-factor anonymous user authentication scheme for Internet of Things environments", Journal of Information Security and Applications, 52, pp.102494~ (2020)