Abstract:

To implement secure data transition in Home and Building Automation (HBA), an encryption and authentication mechanism was introduced into Konnex/European Installation Bus (KNX/EIB). Diffie-Hellman algorithm was used to realize asymmetric key sharing, Advanced Encryption Standard (AES) was applied to data encryption, Hash algorithm was adopted for challenge authentication, a device named controller was employed to coordinate the procedure of key sharing and device authentication. The simulation results show the proposed method is feasible concerning the space and time cost. Compared to other improvement methods, this one is easier to implement and operate, and it can ensure data security.

Key words: Home and Building Automation(HBA), Diffie-Hellman, AES, Hash, Challenge Authentication

摘要：

为了实现家居和建筑自动化(HBA)的数据安全传输，在欧洲安装总线(KNX/EIB)标准协议引入加密和认证机制；使用迪菲赫尔曼（Diffie-Hellman）算法实现非对称密钥共享，高级加密标准（AES）实现数据加密，基于哈希算法的挑战握手认证协议实现设备认证，使用控制器协调密钥分享和设备认证过程。模拟实验表明，所提方法在空间和时间上都是可行的，比其他改进方法更容易实现，操作更简单，能够保证数据的安全。

关键词: 家居与建筑自动化, 迪菲-赫尔曼, 高级加密标准, 哈希算法, 挑战握手认证