基于tPUF的物联网设备安全接入方案  

tPUF-Based Security Access Scheme for IoT Devices

作　　者：邹建文 赵波[1] 李想[1] 刘一凡[1] 黎佳玥 ZOU Jianwen;ZHAO Bo;LI Xiang;LIU Yifan;LI Jiayue(Key Laboratory of Aerospace Information Security and Trusted Computing,Ministry of Education,School of Cyber Science and Engineering,Wuhan University,Wuhan 430072,China)

机构地区：[1]武汉大学国家网络安全学院空天信息安全与可信计算教育部重点实验室,武汉430072

出　　处：《计算机工程与应用》2021年第2期119-126,共8页Computer Engineering and Applications

基　　金：武汉市应用基础前沿项目(2018010401011295);国家自然科学基金联合基金项目(U1936122);中央高校基本科研业务费专项资金项目(2042017kf024);中国工程院项目(212000005);国家电网公司总部科技项目。

摘　　要：针对现有的物联网设备安全接入方案不适用于资源受限的物联网设备的问题,提出一种基于tPUF的物联网设备安全接入方案。利用物理不可克隆函数技术(Physical Unclonable Function,PUF),物联网设备不需要存储任何秘密信息,实现设备与认证端的双向认证以及协商会话秘钥;利用可信网络连接技术(Trusted Network Connect,TNC),完成认证端对物联网设备的身份认证、平台身份认证、完整性认证。安全性分析表明,方案能够有效抵抗篡改、复制、物理攻击等。实验结果表明,相较于其他方案,该方案明显降低了设备的资源开销。Aiming at the problem that the existing IoT device secure access scheme is not applicable to resource-constrained IoT devices,a tPUF-based IoT device secure access scheme is proposed.Utilizing Physical Unclonable Function(PUF),IoT devices do not need to store any secret information,enabling mutual authentication between the device and the authenticator,and negotiating session keys.It utilizes Trusted Network Connect(TNC)technology to achieve identity authentication,platform identity authentication,and integrity authentication of IoT devices from the authentication end.Security analysis shows that the scheme can effectively resist tampering,replication,and physical attacks.Experimental results show that,compared with other schemes,this scheme significantly reduces the equipment resource overhead.

关 键 词：物联网 物理不可克隆函数 可信网络连接 双向认证 设备安全接入 

分 类 号：TP393[自动化与计算机技术—计算机应用技术]