一种基于NTRU算法的物联网设备接入认证方案  

A NTRU-based access authentication scheme for IoT devices

作　　者：谢忠良 江凌云[1] XIE Zhongliang;JIANG Lingyun(College of Telecommunications & Information Engineering,Nanjing University of Posts and Telecommunications,Nanjing 210003,China)

机构地区：[1]南京邮电大学通信与信息工程学院

出　　处：《南京邮电大学学报（自然科学版）》2019年第3期98-103,共6页Journal of Nanjing University of Posts and Telecommunications：Natural Science Edition

基　　金：国家自然科学基金(61871446)资助项目

摘　　要：物联网设备的接入认证是物联网应用大规模部署的基础,现有的用于物联网设备接入认证方案中使用的几乎都是椭圆曲线密码学(ECC)算法,而ECC算法涉及到点乘运算,效率不高。文中提出了一种基于数论研究单元(NTRU)算法的设备接入认证方案。NTRU算法的加密和解密都只使用简单的多项式乘法,和ECC算法的点乘运算相比计算速度快,而且NTRU算法还可以抵抗量子攻击。该方案不仅可以提供设备和服务器相互认证,而且对已知的攻击有很好的抵抗性。通过Java编程实现了NTRU算法和ECC算法,验证结果表明提出方案计算开销小,可以大幅节省认证时间,十分适合资源受限的物联网环境。Access authentication for IoT(Internet of Things) devices is the basis for large-scale deployment of IoT applications.Almost all of the existing access authentication schemes for IoT devices use ECC(Elliptic Curve Cryptography),while ECC involves point multiplication,which is not efficient.A device access authentication scheme based on NTRU(Number Theory Research Unit) is proposed.Both the encryption and decryption of the NTRU use only simple polynomial multiplication,which is faster than the point multiplication of the ECC,and the NTRU can also resist quantum attacks.This scheme not only provides mutual authentication between the devices and the server,but also has good resistance to known attacks.The NTRU and ECC are implemented by Java programming.The verification results show that the proposed scheme has low computational cost and can save a lot of authentication time,which is very suitable for the resource-constrained IoT environment.

关 键 词：物联网 设备接入认证:NTRU算法 安全 

分 类 号：TP391[自动化与计算机技术—计算机应用技术]