The Cryptanalysis of a Secure Authentication Scheme Based on Elliptic Curve Cryptography for IOT and Cloud Servers

摘要

Internet of Things is the collection of internet connected devices. It is the network of embedded devices, software's, sensors and another items linked with the internet. As a result of very quick enhancement in the technology the use of different embedded devices increased in our day to day life. It is important to join these embedded devices to the resources like a cloud server so that information sharing and communication may be possible between these devices. By joining these devices to the cloud server both commercial and government sector will be beneficial by the application of IOT. During the information exchange there may be security issues like authentication and confidentiality if these technologies are integrated. Recently, an authentication framework for IOT and cloud servers based on elliptic curve cryptography (ECC) presented by Kumariet. al. [15]. We review this scheme and find security issues like as:stolen -verifier password attack, stolen-verifier identity attack, no protection for session key and insider attack.