A Three-Factor Mutual Authentication Scheme for Cyber-Physical Systems.

Identity verification, security and confidentiality are the most important topics in computer system security. Many solutions have been proposed to users to enhance the security of authentication methods based on login passwords. Mainly through the use of two-factor authentication methods. Complex systems are difficult to build and to manage, one of the major problems for cyber-physical systems is the vulnerability of authentication and provide a high efficient tunnel to transmit the program or service data. Using more features for identification will increase the difficulty of fraud. The vigorous development of biometric identification technology in recent years has also made the identification of multiple traits more feasible. This paper presents a three-factor authentication with key agreement scheme for cyber-physical systems. The proposed mechanism integrates biometrics information, IMSI identifier and identity-based remote mutual authentication scheme on elliptic curve cryptography (ECC). It supports flawless three-factor and mutual authentication of participants and agreement of session key. The proposed mechanism does not require modifying the software of clients; thus, it is highly flexible. We believe the proposed mechanism is usable for cyber-physical systems applications.