On the security of a realistic lightweight anonymous authentication protocol for securing real-time application data access in wireless sensor networks

Ling Xiong; Daiyuan Peng; Tu Peng; Hongbin Liang

doi:10.1109/CompComm.2017.8322568

On the security of a realistic lightweight anonymous authentication protocol for securing real-time application data access in wireless sensor networks

Ling Xiong, Daiyuan Peng, Tu Peng, Hongbin Liang

School of Cyberspace Science and Technology

Southwest Jiaotong University

Research output: Chapter in Book/Report/Conference proceeding › Conference contribution › peer-review

1 Citation (Scopus)

Abstract

Most recently, Gope and Hwang (IEEE Transactions on Industrial Electronics, 2016. doi:10.1109/TIE.2016.2585081) proposed a realistic lightweight anonymous authentication protocol for securing real-time application data access in wireless sensor networks(WSNs). They demonstrated that the scheme could resist various attacks. However, in this paper, we find out that Gope and Hwang's scheme suffers from several security flaws, including smart card loss attack, known session-specific temporary information attack, de-synchronization attack, and known transaction sequence number attack. Some possible countermeasures are provided to avoid these design flaws in the future design of lightweight authentication schemes.

Original language	English
Title of host publication	2017 3rd IEEE International Conference on Computer and Communications, ICCC 2017
Publisher	Institute of Electrical and Electronics Engineers Inc.
Pages	342-346
Number of pages	5
ISBN (Electronic)	9781509063505
DOIs	https://doi.org/10.1109/CompComm.2017.8322568
Publication status	Published - 2 Jul 2017
Event	3rd IEEE International Conference on Computer and Communications, ICCC 2017 - Chengdu, China Duration: 13 Dec 2017 → 16 Dec 2017

Publication series

Name	2017 3rd IEEE International Conference on Computer and Communications, ICCC 2017
Volume	2018-January

Conference

Conference	3rd IEEE International Conference on Computer and Communications, ICCC 2017
Country/Territory	China
City	Chengdu
Period	13/12/17 → 16/12/17

Keywords

Authentication
User anonymity
Wireless sensor networks

Access to Document

10.1109/CompComm.2017.8322568

Cite this

Xiong, L., Peng, D., Peng, T., & Liang, H. (2017). On the security of a realistic lightweight anonymous authentication protocol for securing real-time application data access in wireless sensor networks. In 2017 3rd IEEE International Conference on Computer and Communications, ICCC 2017 (pp. 342-346). (2017 3rd IEEE International Conference on Computer and Communications, ICCC 2017; Vol. 2018-January). Institute of Electrical and Electronics Engineers Inc.. https://doi.org/10.1109/CompComm.2017.8322568

Xiong, Ling ; Peng, Daiyuan ; Peng, Tu et al. / On the security of a realistic lightweight anonymous authentication protocol for securing real-time application data access in wireless sensor networks. 2017 3rd IEEE International Conference on Computer and Communications, ICCC 2017. Institute of Electrical and Electronics Engineers Inc., 2017. pp. 342-346 (2017 3rd IEEE International Conference on Computer and Communications, ICCC 2017).

@inproceedings{aa2f03c8ba854ad9859ced94f54ae2f3,

title = "On the security of a realistic lightweight anonymous authentication protocol for securing real-time application data access in wireless sensor networks",

abstract = "Most recently, Gope and Hwang (IEEE Transactions on Industrial Electronics, 2016. doi:10.1109/TIE.2016.2585081) proposed a realistic lightweight anonymous authentication protocol for securing real-time application data access in wireless sensor networks(WSNs). They demonstrated that the scheme could resist various attacks. However, in this paper, we find out that Gope and Hwang's scheme suffers from several security flaws, including smart card loss attack, known session-specific temporary information attack, de-synchronization attack, and known transaction sequence number attack. Some possible countermeasures are provided to avoid these design flaws in the future design of lightweight authentication schemes.",

keywords = "Authentication, User anonymity, Wireless sensor networks",

author = "Ling Xiong and Daiyuan Peng and Tu Peng and Hongbin Liang",

note = "Publisher Copyright: {\textcopyright} 2017 IEEE.; 3rd IEEE International Conference on Computer and Communications, ICCC 2017 ; Conference date: 13-12-2017 Through 16-12-2017",

year = "2017",

month = jul,

day = "2",

doi = "10.1109/CompComm.2017.8322568",

language = "English",

series = "2017 3rd IEEE International Conference on Computer and Communications, ICCC 2017",

publisher = "Institute of Electrical and Electronics Engineers Inc.",

pages = "342--346",

booktitle = "2017 3rd IEEE International Conference on Computer and Communications, ICCC 2017",

address = "United States",

}

Xiong, L, Peng, D, Peng, T & Liang, H 2017, On the security of a realistic lightweight anonymous authentication protocol for securing real-time application data access in wireless sensor networks. in 2017 3rd IEEE International Conference on Computer and Communications, ICCC 2017. 2017 3rd IEEE International Conference on Computer and Communications, ICCC 2017, vol. 2018-January, Institute of Electrical and Electronics Engineers Inc., pp. 342-346, 3rd IEEE International Conference on Computer and Communications, ICCC 2017, Chengdu, China, 13/12/17. https://doi.org/10.1109/CompComm.2017.8322568

On the security of a realistic lightweight anonymous authentication protocol for securing real-time application data access in wireless sensor networks. / Xiong, Ling; Peng, Daiyuan; Peng, Tu et al.
2017 3rd IEEE International Conference on Computer and Communications, ICCC 2017. Institute of Electrical and Electronics Engineers Inc., 2017. p. 342-346 (2017 3rd IEEE International Conference on Computer and Communications, ICCC 2017; Vol. 2018-January).

Research output: Chapter in Book/Report/Conference proceeding › Conference contribution › peer-review

TY - GEN

T1 - On the security of a realistic lightweight anonymous authentication protocol for securing real-time application data access in wireless sensor networks

AU - Xiong, Ling

AU - Peng, Daiyuan

AU - Peng, Tu

AU - Liang, Hongbin

PY - 2017/7/2

Y1 - 2017/7/2

N2 - Most recently, Gope and Hwang (IEEE Transactions on Industrial Electronics, 2016. doi:10.1109/TIE.2016.2585081) proposed a realistic lightweight anonymous authentication protocol for securing real-time application data access in wireless sensor networks(WSNs). They demonstrated that the scheme could resist various attacks. However, in this paper, we find out that Gope and Hwang's scheme suffers from several security flaws, including smart card loss attack, known session-specific temporary information attack, de-synchronization attack, and known transaction sequence number attack. Some possible countermeasures are provided to avoid these design flaws in the future design of lightweight authentication schemes.

AB - Most recently, Gope and Hwang (IEEE Transactions on Industrial Electronics, 2016. doi:10.1109/TIE.2016.2585081) proposed a realistic lightweight anonymous authentication protocol for securing real-time application data access in wireless sensor networks(WSNs). They demonstrated that the scheme could resist various attacks. However, in this paper, we find out that Gope and Hwang's scheme suffers from several security flaws, including smart card loss attack, known session-specific temporary information attack, de-synchronization attack, and known transaction sequence number attack. Some possible countermeasures are provided to avoid these design flaws in the future design of lightweight authentication schemes.

KW - Authentication

KW - User anonymity

KW - Wireless sensor networks

UR - http://www.scopus.com/inward/record.url?scp=85049671553&partnerID=8YFLogxK

U2 - 10.1109/CompComm.2017.8322568

DO - 10.1109/CompComm.2017.8322568

M3 - Conference contribution

AN - SCOPUS:85049671553

T3 - 2017 3rd IEEE International Conference on Computer and Communications, ICCC 2017

SP - 342

EP - 346

BT - 2017 3rd IEEE International Conference on Computer and Communications, ICCC 2017

PB - Institute of Electrical and Electronics Engineers Inc.

T2 - 3rd IEEE International Conference on Computer and Communications, ICCC 2017

Y2 - 13 December 2017 through 16 December 2017

ER -

Xiong L, Peng D, Peng T, Liang H. On the security of a realistic lightweight anonymous authentication protocol for securing real-time application data access in wireless sensor networks. In 2017 3rd IEEE International Conference on Computer and Communications, ICCC 2017. Institute of Electrical and Electronics Engineers Inc. 2017. p. 342-346. (2017 3rd IEEE International Conference on Computer and Communications, ICCC 2017). doi: 10.1109/CompComm.2017.8322568

On the security of a realistic lightweight anonymous authentication protocol for securing real-time application data access in wireless sensor networks

Abstract

Publication series

Conference

Keywords

Access to Document

Other files and links

Fingerprint

Cite this