Security Analysis and Improvements of Two-Factor Mutual Authentication with Key Agreement in Wireless Sensor Networks

. 2014 Apr 9;14(4):6443–6462. doi: 10.3390/s140406443


P-1	U_i inserts U_i's smart card into a terminal and inputs, $I D_{i}^{}$ , $p w_{i}^{}$ , and pw_ni. pw_ni is U_i's new password.
P-2	The smart card computes the following.
	$H_P W_{i}^{} = h (p w_{i}^{})$
	$x_{s} = C_{i} \oplus h (I D_{s} ‖ H_P W_{i}^{*})$
	$B_{i}^{} = h (H_P W_{i}^{} \oplus x_{s})$
	The smart card compares $B_{i}^{}$ with B_i. If $B_{i}^{} = B_{i}$ , then the next step proceeds; otherwise, this phase is aborted.
P-3	The smart card computes the following.
	$H_P W_{n i} = h (p w_{n i} ‖ R N_{r}^{*})$
	$A_{n i} = A_{i} \oplus h (I D_{i} ‖ H_P W_{i}^{*} ‖ x_{s}) \oplus h (I D_{i} ‖ H_P W_{n i} ‖ x_{s})$
	B_ni=h(H_PW_ni⊕x_s)
	C_ni=x_s⊕h(ID_s∥H_PW_ni)
	The smart card replaces the existing values A_i, B_i, and C_i with the new values A_ni, B_ni, and C_ni.