物联网中移动节点抗克隆攻击的UC安全认证协议  

Universally Composable Secure Authentication Protocol for Mobile Sensors Based on Physical Unclonable Function System

作　　者：宋生宇[1,2] 张紫楠[1] 王亚弟[1] 李俊峰[3] 

机构地区：[1]解放军信息工程大学,郑州450001 [2]总装备部装备论证中心九室,北京100101 [3]太原卫星发射中心,太原030000

出　　处：《计算机科学》2014年第4期168-171,共4页Computer Science

基　　金：国家部委基金资助项目(9140C130103120C13062)资助

摘　　要：物联网中的感知网一般由计算、通信和存储能力极差的感知节点通过移动节点和静态节点相结合的方式构成,以采集信息;而传输网通常利用现有互联网的基础设施,提供强大的计算、通信和存储服务。为了满足物联网中移动节点漫游时实施接入认证的访问控制要求,同时兼顾实际应用中可行性与移动节点轻量级、抗物理克隆攻击等的安全性需求,基于物理不可克隆函数(Physical Unclonable Function,PUF),提出了移动节点抗克隆攻击的UC(Universally Composable)安全认证协议,其可实现移动节点漫游到其他区域时与接入基站之间的双向认证与密钥交换过程。分析表明,所提出的协议在UC安全模型下是可证明安全的。Internet of Things consists of sensor subnet and transmission network.For sensor subnet,it usually collects information by sensor node which has bad ability of computing,communication and storage implemented by combining mobile nodes and static nodes.But for transmission network,it commonly provides strong service of computing,communication and storage by making use of the existing internet infrastructure.To assure security control mechanics when the mobile sensors move from one cluster to another,whenever,to take into account both the security and feasibility of practical application,this paper presented an authentication and key exchange protocol based on Physical Unclonable Function（PUF）.This protocol can achieve bidirectional authentication and key negotiation between mobile sensor and transmission network base station when the mobile sensor roams to other cluster.Analysis shows that the proposed protocol is universally composable secure.

关 键 词：物联网 物理不可克隆函数(PUF) 物理不可克隆函数系统(PUFS) UC安全 

分 类 号：TP309.7[自动化与计算机技术—计算机系统结构]