一种轻量级嵌入式设备远程安全更新协议  

A LIGHTWEIGHT SECURE REMOTE UPDATE PROTOCOL FOR EMBEDDED DEVICES

作　　者：邵奇峰[1] 杨天池[1] 郭松辉[1] 

机构地区：[1]解放军信息工程大学,河南郑州450004

出　　处：《计算机应用与软件》2014年第2期249-252,共4页Computer Applications and Software

摘　　要：针对嵌入式设备软件远程更新过程中存在的安全风险,提出一种基于Hash函数的轻量级远程安全更新协议,并给出形式化证明。该协议以双方互认证和软件完整性保护为重点,能够防止攻击者通过伪造和篡改软件信息以及利用更新接口达到控制或破坏设备的目的。In light of the security risks of embedded devices existing in remote software update processes,we propose a lightweight secure remote update protocol which is based on Hash function,and give the formal proof.The protocol focuses on mutual authentication and software integrity protection,can prevent the attacker from tampering and counterfeiting the software information and using the update interface to reach the goal of controlling or destroying the embedded devices.

关 键 词：轻量级 安全 嵌入式设备 远程更新 HASH 

分 类 号：TP309.1[自动化与计算机技术—计算机系统结构]