基于物联网的用户行为认证机制与分析  

User behavioral authentication mechanism and analysis based on IOT

作　　者：王晓菊[1] 田立勤[1,2] 赵竞雄[1] 

机构地区：[1]华北科技学院计算机学院,北京101601 [2]青海师范大学计算机学院,青海西宁810008

出　　处：《南京理工大学学报》2015年第1期70-77,共8页Journal of Nanjing University of Science and Technology

基　　金：国家自然科学基金(61163050;61472137);新世纪优秀人才(NCET-10-0101);青海省农业成果转化与推广项目(2012-N-525);青海省自然科学基金(2012-Z-935Q);中央高校基本科研业务项目(3142013098;3142014125;3142014069;2011B028;HKJYZD201224)

摘　　要：为了减少物联网环境中对用户身份的漏报率,该文将传统的身份认证和行为认证相结合,提出了一种基于物联网的动态用户行为认证机制。建立了用户行为认证集,论述了整个机制的实现过程。论述了确定的充分行为认证和不确定的必要行为认证,同时给出了每个认证过程的随机Petri网(Stochastic Petri Net,SPN)模型,并用Petri网量化分析了该机制对性能的影响和认证漏报率。理论分析表明:该机制在提高用户认证机制的安全性方面具有显著效果,同时性能良好。In order to reduce the false negative rate of the user＇s identity under the environment of Internet of Things,this paper proposes a dynamic user behavior authentication mechanism based on the combination of authentication and behavior authentication. The paper presents the creation of the user behavior authentication set. The paper presents the realization process of the whole mechanism.The paper focuses on the determinate sufficient behavior authentication and the uncertain necessary behavior authentication. At the same time,the Stochastic Petri Net（SPN） model of each authentication is given to analyze the impact of performance and the false positive of the mechanism.Theoretical analysis shows that this mechanism is remarkable in improving the security of user authentication mechanism.

关 键 词：物联网 行为认证 身份再认证 随机PETRI网 动态用户行为 性能分析 漏报率 

分 类 号：TP302[自动化与计算机技术—计算机系统结构]