低开销的NB-IoT节点群组身份安全认证协议  

Low-cost group-based identity security authentication protocol for NB-IoT nodes

作　　者：常相茂[1] 占俊 王志伟 CHANG Xiangmao;ZHAN Jun;WANG Zhiwei(School of Computer Science and Technology,Nanjing University of Aeronautics and Astronautics,Nanjing 211106,China;School of Computer Science,Nanjing University of Posts and Telecommunications,Nanjing 210023,China)

机构地区：[1]南京航空航天大学计算机科学与技术学院,江苏南京211106 [2]南京邮电大学计算机学院、软件学院、网络空间安全学院,江苏南京210023

出　　处：《通信学报》2021年第12期152-162,共11页Journal on Communications

基　　金：国家自然科学基金资助项目(No.61672282)。

摘　　要：针对现有NB-IoT网络的安全认证协议在大规模接入请求认证时会产生大量信令的问题,提出了一种基于Schnorr聚合签名和中国剩余定理的群组身份安全认证协议。该协议使服务器能够使用固定大小的信令对节点群组进行一次性认证,采用基于中国剩余定理的会话密钥分发机制,使服务器可以用固定大小的数据完成对群组中节点的密钥派发。安全验证和性能分析结果表明,所提协议具有可靠的安全性能,且在传输开销和带宽消耗方面表现优异。To address the problem of huge number of signaling requests when large-scale devices request authentication in NB-IoT network,a low-cost group identity security authentication protocol based on Schnorr aggregate signature and Chinese reminder theorem was proposed.The protocol enabled the server to perform one-time authentication of the device group with a size-fixed group authentication request,which effectively reduced the bandwidth consumption of the authentication request.The protocol used a session key distribution mechanism based on the Chinese remaining theorem,allowing the server to complete the distribution of keys for each device in the group by size-fixed message.The results of security verification and the performance analysis show that the proposed protocol has reliable safety and superior performance in terms of transmission load and bandwidth consumption.

关 键 词：群组身份安全认证协议 中国剩余定理 聚合签名 窄带物联网 

分 类 号：TP393.2[自动化与计算机技术—计算机应用技术]