物联网中标识密码应用研究  

Research on Identity-Based Cryptography Application in Internet of Things

作　　者：周传玉[1] 王吉伟 李明[1] Zhou Chuanyu;Wang Jiwei;and Li Ming(Shandong Information Center, Jinan 250011;Shandong SURE Information Industry Co. Ltd, Jinan 250101)

机构地区：[1]山东省信息中心,济南250011 [2]山东确信信息产业股份有限公司,济南250101

出　　处：《信息安全研究》2017年第11期1040-1044,共5页Journal of Information Security Research

摘　　要：随着公钥密码基础设施(pulic key infrastructure,PKI)的广泛应用,PKI在管理上存在的一些缺陷也暴露出来了,如证书的查找、撤销、存储、颁发和验证这都需要占用大量宝贵的网络资源,并且会带来较大的存储开销和计算量开销.基于标识的密码体制(identity-based cryptography,IBC)是在传统的PKI基础设施基础上发展而来,除了保有PKI的技术优点外,主要解决了在具体安全应用中PKI需要大量交换数字证书的问题,使安全应用更加易于部署和使用.IBC密码技术使用的是非对称密码体系,加密与解密使用2套不同的密钥.与基于数字证书的公钥密码体制相比,基于标识的密码体制具有不需要证书中心、更高的安全性能、较短的密钥长度和方便的密钥管理,可以和物联网设备标识相结合,解决物联网中身份鉴别、链路加密、数据防护等关键安全问题.With the widespread use of public key cryptography(PKI),some defects in the PKI management are exposed.For example,the search,cancellation,storage,issuance and verification of certificates take up a lot of valuable network resources,which can lead to a large storage overhead and computation overhead.Identitybased cryptography(IBC)is developed based on PKI.In addition to maintaining the technology advantages of PKI,IBC mainly solves the problem that PKI needs a large number of digital certificates in specific security applications,and IBC makes security applications easier to deploy and use.The IBC password technology uses asymmetric cryptography to encrypt and decrypt two sets of keys.Compared with the public key cryptosystem based on digital certificate,identitybased cryptosystem does not need certificate center,and has higher safety performance,shorter key lengths and convenient key management.The IBC password technology can be combined with Internet of things(IoT)device identifier,which helps solve key security issues in Internet of things,such as identity authentication,link encryption,data protection,etc.

关 键 词：物联网 标识密码 数据加密 数据签名 公钥密码基础设施 

分 类 号：TP309.2[自动化与计算机技术—计算机系统结构]