首页> 中文期刊> 《电子学报》 >基于生物特征标识的无线传感器网络三因素用户认证协议

基于生物特征标识的无线传感器网络三因素用户认证协议

         

摘要

To meet the application requirements in high-level security scenarios (i. e., military, national security and banks), and further enhance the security for user authentication protocol in wireless sensor network (WSN), the biometricbased three-factor user authentication protocol (BTh-UAP) is proposed. For defending against the node compromise attack, the simulated attack, the man-in-the-middle attack and the privileged-insider attack in Althobaiti protocol, the smart card and password are taken as its basic secure factors, and the biometric identification that is operated by the biometric identification information generation and reply function is introduced as additional secure factor. In key management, a unique shared key for each node combined with gateway node is delivered to guarantee the independence and security in authentication phase. The shared key between user and gateway node is autonomously chosen to improve the security of the common communication channel. Furthermore, in the circumstance for non-participation of node, the updating scheme for password and biometric identification is designed to achieve the freshness. The results demonstrate that BTh-UAP not only overcomes Althobaiti's security flaws, but also its requirements for computing capability are less than the public-key encryption via using the DolevYao threat model analysis and AVISPA's OFMC simulation. The tradeoff between security and computing costs indicates that BTh-UAP can be applied in high-level security scenarios for resource-constrained wireless sensor network.%为满足高安全级别场景(如军事、国家安全、银行等)的应用需求,进一步提高无线传感器网络用户认证协议的安全性,提出了基于生物特征识别的三因素用户认证协议.针对Althobaiti协议无法防御节点妥协攻击、模拟攻击、中间人攻击和内部特权攻击的安全缺陷,增加智能卡和密码作为协议基本安全因素,并利用生物特征标识信息生成函数与回复函数处理的生物特征标识作为附加安全因素;在密钥管理中,为每个节点配置了与网关节点共享唯一密钥,保证认证过程的独立性与安全性;实现用户自主选择与网关节点的共享密钥,提高公共信道通信的安全性;在网关节点不参与的情况下,设计密码和生物特征标识更新机制,保证二者的新鲜性.通过Dolev-Yao拓展威胁模型的分析与AVISPA的OFMC分析终端的仿真,结果证明该认证协议克服了Althobaiti协议安全缺陷,且对计算能力的需求小于公钥加密.权衡安全性与计算成本,该协议适用于资源受限且安全需求高的无线传感器网络应用.

著录项

  • 来源
    《电子学报》 |2018年第3期|702-713|共12页
  • 作者单位

    中国科学院上海微系统与信息技术研究所无线传感网与通信重点实验室,上海 200051;

    海无线通信研究中心,上海 201210;

    中国科学院上海微系统与信息技术研究所无线传感网与通信重点实验室,上海 200051;

    海无线通信研究中心,上海 201210;

    中国科学院上海微系统与信息技术研究所无线传感网与通信重点实验室,上海 200051;

    海无线通信研究中心,上海 201210;

    天津科技大学计算机科学与信息工程学院,天津 300222;

    中国矿业大学计算机科学与技术学院,江苏 徐州 221116;

  • 原文格式 PDF
  • 正文语种 chi
  • 中图分类 计算机网络;
  • 关键词

    无线传感器网络; 信息安全; 三因素; 用户认证协议; 生物特征标识;

相似文献

  • 中文文献
  • 外文文献
  • 专利
获取原文

客服邮箱:kefu@zhangqiaokeyan.com

京公网安备:11010802029741号 ICP备案号:京ICP备15016152号-6 六维联合信息科技 (北京) 有限公司©版权所有
  • 客服微信

  • 服务号