An Efficient and Secure Authentication Scheme with Session Key Negotiation for Timely Application of WSNs

For Internet of Things, it is more preferred to have immediate access to environment information from sensor nodes (SNs) rather than from gateway nodes (GWNs).To fulfill the goal, mutual authentication scheme between user and SNs with session key (SK) negotiation is more suitable.However, this is a challenging task due to the constrained power, computation, communication and storage resources of SNs.Though lots of authentication schemes with SK negotiation have been designed to deal with it, they are still insufficiently secure and/or efficient, and some even have serious vulnerabilities.Therefore, we design an efficient secure authentication scheme with session key negotiation (eSAS2KN) for wireless sensor networks (WSNs) utilizing fuzzy extractor technique, hash function and bitwise exclusive-or lightweight operations.In the eSAS2KN, user and SNs are mutually authenticated with anonymity, and an SK is negotiated for their direct and instant communications subsequently.To prove the security of eSAS2KN, we give detailed informal security analysis, carry out logical verification by applying BAN logic, present formal security proof by employing Real-Or-Random (ROR) model, and implement formal security verification by using AVISPA tool.Finally, computation and communication costs comparison show the eSAS2kN is more efficient and secure for practical application.