A survey on user access control in wireless sensor networks with formal security verification. (1st January 2014)

• Record Type: Journal Article
• Authors: Chatterjee, Santanu; Das, Ashok Kumar; Sing, Jamuna Kanta
• Is Part Of: International journal on trust management in computing and communications. Volume 2:Number 3(2014)
• Page Start: 259
• Page End: 295
• Publication Date: 2014-01-01
• Subjects: wireless sensor networks -- WSNs -- user access control -- hash function -- elliptic curve cryptography -- ECC -- security -- automated validation of internet security protocols and applications -- AVISPA -- formal security verification; Data protection -- Periodicals; Database management -- Periodicals; Computer security -- Periodicals; Electronic data processing departments -- Security measures -- Periodicals; 005.8
• DOI: 10.1504/IJTMCC.2014.067303
• Languages: English
• ISSNs: 2048-8378

Abstract

User access control provides the permission to impose different access privileges for different types of authenticated users for accessing the sensing information directly from the sensor nodes inside a wireless sensor network (WSN). Until now, there have been ample number of user access control schemes proposed in the literature, and each scheme has its own merits and demerits. In this paper, we identify all the functionality features and security requirements, which must be satisfied for an ideal user access control scheme. We present and discuss the recently proposed important user access control schemes available so far in the literature. We critically analyse the energy, communication, computational overheads requirement, functionality and security analysis of the existing schemes. Further, we perform the formal security analysis of existing schemes using the widely-accepted automated validation of internet security protocols and applications (AVISPA) tool. All the existing schemes have some limitations. Hence, we feel that there is a strong need to design an ideal efficient user access control scheme in future, which should meet all the security requirements and achieve all the functionality features.