物联网设备信任体系架构与轻量级身份认证方案设计  

Design of Trust Architecture and Lightweight Authentication Scheme for IoT Devices

作　　者：武传坤 张磊 李江力 

机构地区：[1]北京匡恩网络科技有限责任公司,北京100191

出　　处：《信息网络安全》2017年第9期16-20,共5页Netinfo Security

摘　　要：物联网设备的身份标识和身份认证技术是物联网设备安全通信必不可少的前提。文章针对物联网设备的特点,建立了一种针对物联网设备的信任体系架构,分别提出了如何基于公钥证书建立信任体系和基于对称密钥建立信任体系。在此基础上,基于公钥证书配置和预置共享密钥配置两种情况,分别设计了物联网设备的身份认证方案。The identification and authentication of IoT devices are two fundamental problems in secure communications of those devices.Noticing the characteristics of IoT devices, this paper designs an architecture of trust, proposes how to establish a trust based on public key certificates and on symmetric key settings respectively.Based on the above, this paper designs two authentication schemes for IoT devices based on the public certificate setup and the shared secret key setup respectively.

关 键 词：物联网 信任体系架构 身份认证 公钥证书 

分 类 号：TN915.08[电子电信—通信与信息系统] TP391.44[电子电信—信息与通信工程]