物联网环境下移动节点可信接入认证协议

doi:10.11772/j.issn.1001-9081.2016.11.3108

计算机应用 ›› 2016, Vol. 36 ›› Issue (11): 3108-3112.DOI: 10.11772/j.issn.1001-9081.2016.11.3108

物联网环境下移动节点可信接入认证协议

张鑫^1,2, 杨晓元^1,2,3, 朱率率^1,2, 杨海滨^1,3

1. 武警工程大学电子技术系, 西安 710086;
2. 武警工程大学网络与信息安全武警部队重点实验室, 西安 710086;
3. 武警工程大学信息安全研究所, 西安 710086

收稿日期:2016-05-12 修回日期:2016-06-15 出版日期:2016-11-10 发布日期:2016-11-12
通讯作者: 张鑫
作者简介:张鑫(1991-),男,安徽合肥人,硕士研究生,主要研究方向:信息安全、可信计算;杨晓元(1959-),男,湖南湘潭人,教授,硕士,主要研究方向:信息安全、密码学;朱率率(1985-),男,山东淄博人,讲师,主要研究方向:信息安全、可信计算、密码学;杨海滨(1982-),男,河北林榆人,讲师,硕士,主要研究方向:信息安全、密码学。
基金资助:
国家自然科学基金资助项目（61402530，61272492，61572521）；武警工程大学基础研究基金资助项目（WJY201520）。

Trusted access authentication protocol for mobile nodes in Internet of things

ZHANG Xin^1,2, YANG Xiaoyuan^1,2,3, ZHU Shuaishuai^1,2, YANG Haibing^1,3

1. Department of Electronic Technology, Engineering College of Chinese People's Armed Police Force, Xi'an Shaanxi 710086, China;
2. Key Laboratory of Network & Information Security under People's Armed Police, Engineering College of Chinese People's Armed Police Force, Xi'an Shaanxi 710086, China;
3. Institute of Information Security, Engineering College of Chinese People's Armed Police Force, Xi'an Shaanxi 710086, China

Received:2016-05-12 Revised:2016-06-15 Online:2016-11-10 Published:2016-11-12
Supported by:
This work is partially supported by the National Natural Science Foundation of China (61402530,61272492,61572521), the Basic Research Foundation of Engineering College of PAP (WJY201520).

摘要/Abstract

摘要： 无线传感器网络（WSN）中的移动节点缺乏可信性验证，提出一种物联网（IoT）环境下移动节点可信接入认证协议。传感器网络中移动汇聚节点（Sink节点）同传感器节点在进行认证时，传感器节点和移动节点之间完成相互身份验证和密钥协商。传感器节点同时完成对移动节点的平台可信性验证。认证机制基于可信计算技术，给出了接入认证的具体步骤，整个过程中无需基站的参与。在认证时利用移动节点的预存的假名和对应公私钥实现移动节点的匿名性，并在CK（Canetti-Krawczyk）模型下给出了安全证明。在计算开销方面与同类移动节点认证接入方案相比，该协议快速认证的特点更适合物联网环境。

关键词: 物联网, 可信认证, 移动节点, CK安全模型

Abstract: In view of the problem that mobile nodes lack trusted verification in Wireless Sensor Network (WSN), a mobile node access authentication protocol was proposed in Internet of Things (IoT). Mutual authentication and key agreement between the sensor nodes and mobile sink nodes were realized, when they wre authenticated. At the same time, the trustness of mobile node platform was authenticated by sensor nodes. The authentication scheme was based on trusted computing technology without using base station and its concrete steps were described in detail. Pseudonyms and the corresponding public/private keys were used in authentication to achieve the protection of the user privacy. The proposed scheme was provably secure in the CK (Canetti-Krawczyk) security model. Compared to similar mobile node schemes, the protocol is more suitable for fast authentication in IoT, with less computation and communication overhead.

Key words: Internet of Things (IoT), trusted authentication, mobile node, Canetti-Krawczyk (CK) security model

中图分类号:

TP309.7

张鑫, 杨晓元, 朱率率, 杨海滨. 物联网环境下移动节点可信接入认证协议[J]. 计算机应用, 2016, 36(11): 3108-3112.

ZHANG Xin, YANG Xiaoyuan, ZHU Shuaishuai, YANG Haibing. Trusted access authentication protocol for mobile nodes in Internet of things[J]. Journal of Computer Applications, 2016, 36(11): 3108-3112.

参考文献

[1] YUN Y S, XIA Y, BEHDANI B, et al. Distributed algorithm for lifetime maximization in a delay-tolerant wireless sensor network with a mobile Sink[J]. IEEE Transactions on Mobile Computing, 2013, 12(10):1920-1930.
[2] BEHDANI B, SMITH J C, XIA Y. The lifetime maximization problem in wireless sensor networks with a mobile sink:mixed-integer programming formulations and algorithms[J]. LIE Transactions, 2013, 45(10):1094-1113.
[3] Trust Computing Group. TPM main part 1:design principles specification, version 1.2 revision 62[S]. Geneva:International Organization for Standardization (IOS), 2009.
[4] YANG Y, FONOAGE M I, CARDEI M. Improving network lifetime with mobile wireless sensor networks[J]. Computer Communications, 2010, 33(4):409-419.
[5] VUPPUTURI S, RACHURI K K, MURTHY C S R. Using mobile data collectors to improve network lifetime of wireless sensor networks with reliability constraints[J]. Journal of Parallel & Distributed Computing, 2010, 70(7):767-778.
[6] ZHANG J, LI X, MA J, et al. Secure and efficient authentication scheme for mobile sink in WSNs based on bilinear pairings[J]. International Journal of Distributed Sensor Networks, 2014, 2014(1):84-88.
[7] 王良民, 姜顺荣, 郭渊博. 物联网中移动Sensor节点漫游的组合安全认证协议[J]. 中国科学信息科学, 2012, 42(7):815-830.(WANG L M, JIANG S R, GUO Y B. Composable-secure authentication protocol for mobile sensors roaming in the Internet of things[J]. Science China Information Sciences, 2012, 42(7):815-830.)
[8] 周彦伟, 杨波. 物联网移动节点直接匿名漫游认证协议[J]. 软件学报, 2015, 26(9):2436-2450. (ZHOU Y W, YANG B. Provable secure authentication protocol with direct anonymity for mobile nodes roaming service in Internet of things[J]. Journal of Software, 2015,26(9):2436-2450.)
[9] DAS M L. Two-factor user authentication in wireless sensor networks[J]. IEEE Transactions on Wireless Communications, 2009, 8(3):1086-1090.
[10] CHEN T H, SHIH W K. A robust mutual authentication protocol for wireless sensor networks[J]. ETRI Journal, 2010, 32(5):704-712.
[11] 杨力,马建峰,朱建明.可信的匿名无线认证协议[J].通信学报, 2009, 30(9):29-35. (YANG L, MA J F, ZHU J M. Trusted and anonymous authentication scheme for wireless networks[J]. Journal on Communications, 2009, 30(9):29-35.)
[12] 周彦伟,杨波,张文政.可证安全的移动互联网可信匿名漫游协议[J].计算机学报,2015, 38(4):733-748. (ZHOU Y W, YANG B, ZHANG W Z. Provable secure trusted and anonymous roaming protocol for mobile Internet[J]. Chinese Journal of Computers, 2015, 38(4):733-748.)
[13] RAYA M, HUBAUX J P. Securing vehicular Ad Hoc networks[C]//Proceedings of the 2nd International Conference on Pervasive Computing and Applications. Amsterdam:IOS Press, 2007:424-429.
[14] CANETTI R, KRAWCZYK H. Analysis of key-exchange protocols and their use for building secure channels[C]//Proceedings of the 2001 International Conference on the Theory and Application of Cryptographic Techniques:Advances in Cryptology. London:Springer-Verlag, 2001:453-474.
[15] TIN Y S T, VASANTA H, BOYD C, et al. Protocols with security proofs for mobile applications[C]//Proceedings of the 9th Australasian Conference on Information Security and Privacy. Berlin:Springer, 2004:358-369.
[16] 侯惠芳,季新生,刘光强.异构无线网络中基于标识的匿名认证协议[J].通信学报,2011, 32(5):153-161. (HOU H F, JI X S, LIU G Q. Identity-based anonymity authentication protocol in the heterogeneous wireless network[J]. Journal on Communications, 2011, 32(5):153-161.)
[17] 侯惠芳,刘光强,季新生,等.基于公钥的可证明安全的异构无线网络认证方案[J]. 电子与信息学报, 2009, 31(10):2385-2391.(HOU H F, LIU G Q, JI X S. Provable security authentication scheme based on public key for heterogeneous wireless network[J]. Journal of Electronics & Information Technology, 2009, 31(10):2385-2391.)

物联网环境下移动节点可信接入认证协议

Trusted access authentication protocol for mobile nodes in Internet of things

PDF

可视化

摘要/Abstract

引用本文

使用本文

参考文献

相关文章 15

编辑推荐

Metrics

[1]	包玉龙, 朱雪阳, 张文辉, 孙鹏飞, 赵颖琪. 物联网应用中访问控制智能合约的形式化验证[J]. 计算机应用, 2021, 41(4): 930-938.
[2]	田志宏, 赵金东. 面向物联网的区块链共识机制综述[J]. 计算机应用, 2021, 41(4): 917-929.
[3]	张凌哲, 黄向东, 乔嘉林, 勾王敏浩, 王建民. 面向时序数据的两阶段日志结构合并树文件合并框架[J]. 计算机应用, 2021, 41(3): 618-622.
[4]	李秀艳, 刘明曦, 史闻博, 董国芳. 面向资源受限用户的高效动态数据审计方案[J]. 计算机应用, 2021, 41(2): 422-432.
[5]	夏伦腾, 张莉. 基于K近邻和动态时间规整算法的盲人物联网手杖系统[J]. 计算机应用, 2020, 40(8): 2441-2448.
[6]	程小辉, 牛童, 汪彦君. 基于序列模型的无线传感网入侵检测系统[J]. 计算机应用, 2020, 40(6): 1680-1684.
[7]	史锦山, 李茹, 松婷婷. 基于区块链的物联网访问控制框架[J]. 计算机应用, 2020, 40(4): 931-941.
[8]	刘向举, 刘鹏程, 徐辉, 朱晓娟. 基于软件定义物联网的分布式拒绝服务攻击检测方法[J]. 计算机应用, 2020, 40(3): 753-759.
[9]	王舒漫, 李爱萍, 段利国, 付佳, 陈永乐. 基于BTM的物联网服务发现方法[J]. 计算机应用, 2020, 40(2): 459-464.
[10]	王志恒, 徐彦彦. 基于TrustZone的移动云环境指纹认证终端APP的设计和实现[J]. 计算机应用, 2020, 40(11): 3255-3260.
[11]	周震, 袁正道. 面向物联网环境的高效通信接收机设计[J]. 计算机应用, 2020, 40(1): 202-206.
[12]	谢丽霞, 魏瑞炘. 物联网节点动态信任度评估方法[J]. 计算机应用, 2019, 39(9): 2597-2603.
[13]	王丹, 李安艺, 杨艳娟. 基于相关检测的低复杂度窄带物理下行控制信道盲检测算法[J]. 计算机应用, 2019, 39(9): 2652-2657.
[14]	潘建国, 李豪. 基于实用拜占庭容错的物联网入侵检测方法[J]. 计算机应用, 2019, 39(6): 1742-1746.
[15]	郭荣佐, 冯朝胜, 秦志光. 物联网智能物流系统容错服务组合建模与分析[J]. 计算机应用, 2019, 39(2): 589-597.