An improved authentication scheme for Internet of things

Abstract

Designing a secure authentication scheme is of great importance to the practical applications of the Internet of Things (IoT). In 2017, Wang et al. proposed an improved mutual authentication scheme for the embedded devices and a server over Kalra et al.'s and Chang et al.'s. And they provided a formal proof for their scheme. However, their scheme is still insecure and cannot resist against key compromise impersonation (KCI) attack. In the paper, we first demonstrate the shortcoming of Wang et al.'s scheme, and then we carry out an improvement over Wang et al.'s scheme to address the revealed issue by using an auxiliary server.