一种适用于物联网的群组接入认证协议  

A Group Access Authentication Protocol for Things of Internet

作　　者：荣星[1,2] 江荣[3] 田立业[2] 

机构地区：[1]解放军信息工程大学三院,郑州450004 [2]北京工业大学计算机学院,北京100124 [3]国防科学技术大学六院,长沙410073

出　　处：《计算机工程》2015年第3期15-20,共6页Computer Engineering

基　　金：国家科技重大专项基金资助项目(2012ZX03002003);"核高基"重大专项(2010ZX01037-001-001)

摘　　要：无线局域网与3G网络互联可作为物联网业务的承载。针对现有接入认证方案中的安全和群组通信问题,提出一种基于可扩展身份验证协议认证框架的群组接入认证协议。在初始化和注册阶段完成设备群组的建立,在认证和密钥协商阶段实现设备的安全接入。与传统EAP-AKA协议相比,该协议采用基于椭圆曲线密码体制的Diffie-Hellman密钥交换协议以保证前向安全性,通过先到设备完成群认证向量的获取,并与后来者共享认证的方式,实现群组认证功能并提高认证效率。分析结果表明,该协议提供相互认证并能抵抗多种类型的攻击,有效减少了群组认证开销,可满足物联网的业务要求。Wireless Local Area Network（WLAN）can be combined together with 3G network to be the carrier of Internet of Things（IoT）. To solve the problem of security and group communication in recent access authentication schemes,this paper proposes a Secure and Efficient Group Access Authentication Protocol（SEGAP）. It sets up the equipment group in initialization and registration stage and accomplishes the secure access in authentication and key agreement stage. Compared with conventional EAP-AKA,this scheme guarantees stronger forward security by adopting Elliptic Curve Diffie-Hellman（ECDH）,enables first equipment in group to acquire group authentication vector,this paper shares it with others who come later,and provides better authentication performance by realizing group access authentication. The analysis results illustrate that the protocol can reduce the cost of group communication and can be applied to the business of IoT very well.

关 键 词：物联网 3G网络 认证 椭圆曲线 DH密钥交换 群组通信 

分 类 号：TP393[自动化与计算机技术—计算机应用技术]