基于CK01模型的物联网节点密钥交换和更新算法研究  

Research on the Io T Nodes Key Exchange and Update Algorithm Based on CK01 Model

作　　者：欧志球[1] 王铮[1] OU Zhi-qiu;WANG Zheng(Department of Computer Engineering,Zhejiang Institute of Mechanical ＆ Electrical Engineering,310053)

机构地区：[1]浙江机电职业技术学院计算机工程学院,杭州310053

出　　处：《现代计算机》2018年第14期54-58,共5页Modern Computer

基　　金：浙江省科技厅公益技术研究社会发展项目(No.2014c33098)

摘　　要：随着物联网网络管理规模的增大和对安全性要求的提高,简单网管协议第3版标准中的用户安全模型的密钥交换已经不能满足需求。针对当前流行的用户安全模型,提出基于Canetti-Krawczyk模型的安全密钥交换算法,并进行形式化的证明和相应的方案设计与实现。经过实验系统检验,该方案能较好地提高系统的安全性、性能和易部署维护性。With the IOT network management scale and security requirements increasing, it is hard to meet the requirements with USM based SNMPv3 key exchange model. Based on the popular USM security model, it not only proposes a CK01 based security solution and verifies it with formal proof method, but also the design and implementation. It has been deployed in the experiment systems and proved to be better security, performance and deployment/maintenance.

关 键 词：简单网管协议第3版 用户安全模型 迪菲-赫尔曼密钥交换算法 CANETTI-KRAWCZYK模型 

分 类 号：TN915.08[电子电信—通信与信息系统] TP391.44[电子电信—信息与通信工程]