The Information and Communication Technology (ICT) has been used in wide range of applications, such as smart living, smart health and smart transportation. Among all these applications, smart home is most popular, in which the users/residents can control the operations of the various smart sensor devices from remote sites also. However, the smart devices and users communicate over an insecure communication channel, i.e., the Internet. There may be the possibility of various types of attacks, such as smart device capture attack, user, gateway node and smart device impersonation attacks and privileged-insider attack on a smart home network. An illegal user, in this case, can gain access over data sent by the smart devices. Most of the existing schemes reported in the literature for the remote user authentication in smart home environment are not secure with respect to the above specified attacks. Thus, there is need to design a secure remote user authentication scheme for a smart home network so that only authorized users can gain access to the smart devices. To mitigate the aforementioned isses, in this paper, we propose a new secure remote user authentication scheme for a smart home environment. The proposed scheme is efficient for resource-constrained smart devices with limited resources as it uses only one-way hash functions, bitwise XOR operations and symmetric encryptions/decryptions. The security of the scheme is proved using the rigorous formal security analysis under the widely-accepted Real-Or-Random (ROR) model. Moreover, the rigorous informal security analysis and formal security verification using the broadly-accepted Automated Validation of Internet Security Protocols and Applications (AVISPA) tool is also done. Finally, the practical demonstration of the proposed scheme is also performed using the widely-accepted NS-2 simulation.

中文翻译：

---

用于智能家居环境的安全远程用户认证密钥建立协议

信息通信技术（ICT）已被广泛应用于智能生活、智能健康和智能交通等领域。在所有这些应用中，智能家居最为流行，其中用户/居民也可以从远程站点控制各种智能传感器设备的操作。然而，智能设备和用户通过不安全的通信渠道（即互联网）进行通信。可能存在各种类型的攻击，例如智能设备捕获攻击、用户、网关节点和智能设备冒充攻击以及对智能家居网络的特权内部人员攻击。在这种情况下，非法用户可以访问智能设备发送的数据。文献中报告的大多数用于智能家居环境中的远程用户身份验证的现有方案对于上述指定的攻击并不安全。因此，需要为智能家居网络设计一种安全的远程用户认证方案，以便只有经过授权的用户才能访问智能设备。为了缓解上述问题，在本文中，我们为智能家居环境提出了一种新的安全远程用户身份验证方案。所提出的方案对于资源有限的资源受限智能设备是有效的，因为它仅使用单向散列函数、按位异或运算和对称加密/解密。在广泛接受的实数或随机 (ROR) 模型下，使用严格的形式安全分析证明了该方案的安全性。而且，还使用广泛接受的 Internet 安全协议和应用程序自动验证 (AVISPA) 工具进行严格的非正式安全分析和正式安全验证。最后，还使用广泛接受的 NS-2 模拟对所提出的方案进行了实际演示。