Bilal Muhammad, Kang Shin-Gak
Electronics and Telecommunications Research Institute, University of Science and Technology, 218, Gajeong-ro, yuseong-gu, Daejeon 34129, Korea.
Sensors (Basel). 2017 Apr 28;17(5):979. doi: 10.3390/s17050979.
Authentication is one of the essential security services in Wireless Sensor Networks (WSNs) for ensuring secure data sessions. Sensor node authentication ensures the confidentiality and validity of data collected by the sensor node, whereas user authentication guarantees that only legitimate users can access the sensor data. In a mobile WSN, sensor and user nodes move across the network and exchange data with multiple nodes, thus experiencing the authentication process multiple times. The integration of WSNs with Internet of Things (IoT) brings forth a new kind of WSN architecture along with stricter security requirements; for instance, a sensor node or a user node may need to establish multiple concurrent secure data sessions. With concurrent data sessions, the frequency of the re-authentication process increases in proportion to the number of concurrent connections. Moreover, to establish multiple data sessions, it is essential that a protocol participant have the capability of running multiple instances of the protocol run, which makes the security issue even more challenging. The currently available authentication protocols were designed for the autonomous WSN and do not account for the above requirements. Hence, ensuring a lightweight and efficient authentication protocol has become more crucial. In this paper, we present a novel, lightweight and efficient key exchange and authentication protocol suite called the Secure Mobile Sensor Network (SMSN) Authentication Protocol. In the SMSN a mobile node goes through an initial authentication procedure and receives a re-authentication ticket from the base station. Later a mobile node can use this re-authentication ticket when establishing multiple data exchange sessions and/or when moving across the network. This scheme reduces the communication and computational complexity of the authentication process. We proved the strength of our protocol with rigorous security analysis (including formal analysis using the BAN-logic) and simulated the SMSN and previously proposed schemes in an automated protocol verifier tool. Finally, we compared the computational complexity and communication cost against well-known authentication protocols.
认证是无线传感器网络（WSN）中确保安全数据会话的基本安全服务之一。传感器节点认证可确保传感器节点收集数据的机密性和有效性，而用户认证则保证只有合法用户才能访问传感器数据。在移动WSN中，传感器和用户节点在网络中移动并与多个节点交换数据，因此会多次经历认证过程。WSN与物联网（IoT）的集成带来了一种新型的WSN架构以及更严格的安全要求；例如，传感器节点或用户节点可能需要建立多个并发安全数据会话。对于并发数据会话，重新认证过程的频率与并发连接数成比例增加。此外，要建立多个数据会话，协议参与者必须具备运行协议运行多个实例的能力，这使得安全问题更具挑战性。目前可用的认证协议是为自主WSN设计的，没有考虑上述要求。因此，确保一种轻量级且高效的认证协议变得更加关键。在本文中，我们提出了一种新颖、轻量级且高效的密钥交换和认证协议套件，称为安全移动传感器网络（SMSN）认证协议。在SMSN中，移动节点经过初始认证过程并从基站接收重新认证票据。之后，移动节点在建立多个数据交换会话和/或在网络中移动时可以使用此重新认证票据。该方案降低了认证过程的通信和计算复杂度。我们通过严格的安全分析（包括使用BAN逻辑的形式分析）证明了我们协议的强度，并在自动化协议验证工具中模拟了SMSN和先前提出的方案。最后，我们将计算复杂度和通信成本与知名认证协议进行了比较。
