Cryptanalysis of advanced biometric-based user authentication scheme for wireless sensor networks*

Abstract

Recently, wireless sensor networks can provide a practicable realtime monitoring system because wireless sensors can be easily deployed in various environments. To provide secure and efficient communication, various user authentication schemes have been proposed. In 2012, He et al. proposed a robust biometric-based user authentication scheme but Yoon and Kim demonstrated that He et al.’s scheme has various security problems. And they proposed an advanced biometric-based user authentication scheme. In this paper, we analyze Yoon and Kim’s scheme and perform the cryptanalysis. We find out that it has still various security weakness such as no perfect forward secrecy, session key exposure by GW node, a DoS attack, no revocation phase, and biometric recognition error.