Security Analysis of a Biometric-based Authenticated Key Agreement Scheme using ECC for Wireless Sensor Networks

摘要

A biometric-based user authentication scheme for wireless sensor networks is designed to restrict access to the sensor data only to users who are in possession of both a smart card and the corresponding biometrics. While a significant number of biometric-based user authentication schemes have been suggested in recent years, their intended security properties lack formal definitions and proofs in a widely-accepted model. The new technology of biometrics is becoming a popular method for engineers to design a more secure user authentication scheme. In 2014, Yoon and Yoo proposed an biometric-based authenticated key agreement scheme using ECC. Unfortunately, their scheme is still insecure and vulnerable to several security flaws. We show this by mounting the impersonation attack, biometrics error, no revocation phase.