A novel asymmetric three-party based authentication scheme in wearable devices environment
As we know, wearable devices usually store the user?s private data, such as healthy data, which is related with users privacy. As an increasing number of people are going to use this kind of devices, some security problems have emerged and have not resolved perfectly, for example, how to protect the privacy of sensitive information stored on wearable devices, which becomes an important issue in these recent years. Implementing authentication among the wearable devices, mobile terminals and users can effectively resolve this problem. However, traditional lightweight authentication could not be applied for this new environment. Therefore, we propose an asymmetric three-party based authentication scheme in wearable devices environment. It contains three parties: wearable devices, mobile terminals and users. Drawing on the visual out of band (OOB) channel, two-dimensional code (QR code) and secure device pairing technology, new scheme provides a mutual efficient authentication between the wearable device and mobile terminal. And we make the Bluetooth device address into a visual tag, which can improve efficiency of Bluetooth connection. In addition, the scheme takes the multi-users condition into consideration and allows primary user to increase the numbers of legitimate users through authentication. According to security analysis and usability analysis, we can prove that this scheme can not only resist known types of attacks but also can be perfectly applied in wearable devices environment. Besides, we have implemented this scheme in the real-life setting. The experiment results of this scheme show that practical applications of the scheme meet expectations.
authentication wearable devices mobile terminals oob secure device pairing