隐式证书的国密算法应用研究  

Research on the Application of SM Algorithms of Implicit Certificate

作　　者：王开轩 滕亚均 王琼霄 王伟[2] WANG Kaixuan;TENG Yajun;WANG Qiongxiao;WANG Wei(Chinese Academy of Sciences University,School of Cyberspace Security,Beijing 100049,China;Institute of Information Engineering,Chinese Academy of Sciences,State Key Laboratory of Information Security,Beijing 100093,China)

机构地区：[1]中国科学院大学网络空间安全学院,北京100049 [2]中国科学院信息工程研究所信息安全国家重点实验室,北京100093

出　　处：《信息网络安全》2021年第5期74-81,共8页Netinfo Security

基　　金：国家重点研发计划[2018YFB0804600];国家密码发展基金[MMJJ20180221]。

摘　　要：随着5G技术的发展,万物互联成为当今科技领域的主流发展方向。在物联网设备节点日益增加的同时,物联网的安全认证问题变得更加重要。近几年,物联网领域的安全问题频出,大量的微型物联网设备缺乏网络认证机制。相较于传统的认证方案,对于物联网设备而言,隐式证书方案在内存占用和计算量上更符合内存和计算资源受限的物联网应用环境。文章基于SM2、SM3国密算法,设计了一种国密隐式证书的方案,利用OpenSSL实现了国密隐式证书颁发、签名和验签的功能,并将传统数字证书与国密隐式证书方案进行对比。实验显示文章方案在验签耗时上明显优于传统的数字证书。With the development of 5G technology,Internet of Everything has become the mainstream development direction in today's science and technology field.With the increasing number of device nodes in Internet of Thing,the security authentication of the Internet of Things becomes more and more important.In recent years,there have been frequent security problems in the field of Internet of Things,a large number of micro IoT devices have no corresponding authentication mechanism.For IoT devices,compared with traditional authentication schemes,implicit certificate schemes are more suitable for memory resource-constrained application environments in terms of computation.Based on SM2 and SM3,this paper designs an implicit certificate scheme,and uses OpenSSL to implement the functions of issuing,signing and verifying the implicit certificate.At the same time,based on the implementation of traditional digital certificate scheme and SM algorithms implicit certificate scheme,this paper carries out performance test and analysis and comparison on the same platform,the results show that the proposed scheme is significantly better than the traditional scheme on the verification in terms of time consumption.

关 键 词：物联网安全 网络认证 隐式证书 国密算法 OPENSSL 

分 类 号：TP309[自动化与计算机技术—计算机系统结构]