무선 센서 네트워크를 위한 생체 정보 기반 사용자 인증 스킴의 보안 취약점 분석 = Analysis on Security Vulnerabilities of a Biometric-based User Authentication Scheme for Wireless Sensor Networks

다국어 초록 (Multilingual Abstract)

The numerous improved schemes of remote user authentication based on password have been proposed in order to overcome the security weakness in user authentication process. Recently, some of biometric-based user authentication schemes to use personal biometric information have been introduced and they have shown the relatively higher security and the enhanced convenience as compared to traditional password-based schemes. These days wireless sensor network is a fundamental technology in face of the ubiquitous era. The wireless sensor networks to collect and process the data from sensor nodes in increasing high-tech applications require important security issues to prevent the data access from the unauthorized person.
Accordingly, the research to apply to the user authentication to the wireless sensor networks has been under the progress. In 2010, Yuan et al. proposed a biometric-based user authentication scheme to be applicable for wireless sensor networks. Yuan et al. claimed that their scheme is effectively secure against the various security flaws including the stolen verifier attack. In this paper, author will prove that Yuan et al.'s scheme is still vulnerable to the password guessing attack, user impersonation attack and the replay attack, by analyzing their security weakness.

참고문헌 (Reference)

1 주영도, "스마트 카드 기반 사용자 인증 스킴의 보안 개선" 한국인터넷방송통신학회 11 (11): 131-137, 2011

2 이형우, "바이오 정보를 이용한 사용자 인증 시스템 설계 및 구현" 한국산학기술학회 11 (11): 3548-3557, 2010

3 H. Jeong, "Technical Trends of Sensor Networking" 22 (22): 80-89, 2005

4 J. J. Shen, "Security Enhancement for Timestamp-based Password Authentication Scheme Using Smart Cards" 22 (22): 591-595, 2003

5 N. Sastry, "Security Considerations for IEEE 802.15.4 Networks" ACM Press 32-42, 2004

6 R. Watro, "Securing Sensor Networks with Public Key Technology" ACM Press 59-64, 2004

7 A. Perrig, "SPINS: Security Protocols for Sensor Networks" 8 (8): 521-534, 2002

8 C. J. Fan, "Robust Remote Authentication Scheme with Smart Cards" 24 (24): 619-628, 2005

9 L. Lamport, "Password Authentication with Insecure Communication" 24 (24): 770-772, 1981

10 E. J. Yoon, "Further Improvements of an Efficient Password based Remote User Authentication Scheme Using Smart Cards" 50 (50): 612-614, 2004

11 J. K. Lee, "Fingerprint-based Remote User Authentication Scheme Using Smart Cards" 38 (38): 554-555, 2002

12 T. S. Messerges, "Examining Smart-Card Security under the Threat of Power Analysis Attacks" 51 (51): 541-552, 2002

13 P. Kocher, "Differential Power Analysis" 388-397, 1999

14 C. Lin, "Cryptanalysis and Improvement on Lee-Chen's One-Time Password Authentication Scheme" 2 (2): 1-8, 2008

15 A. K. Das, "Analysis and Improvement on an Efficient Biometric-based Remote User Authentication Scheme Using Smart Cards" 5 (5): 541-552, 2011

16 C. T. Li, "An Efficient Biometrics-based Remote User Authentication Scheme Using Smart Cards" 33 : 1-5, 2010

17 최민규, "A Study on the Network Security Level Management" 한국정보기술학회 7 (7): 214-219, 2009

18 D. S. Wang, "A Novel Mutual Authentication Scheme Based on Fingerprint Biometric and Nonce Using Smart Cards" 5 (5): 1-12, 2011

19 C. W. Lin, "A New Strong-Password Authentication Scheme Using One-Way Hash Functions" 45 (45): 623-626, 2006

20 K. Wong, "A Dynamic User Authentication Scheme for Wireless Sensor Networks" IEEE Computing Society 244-251, 2006

21 J. Yuan, "A Biometric-Based User Authentication for Wireless Sensor Networks" 15 (15): 272-276, 2010