面向轻量级物联网设备的高效匿名身份认证协议设计  

Design of efficient anonymous identity authentication protocol for lightweight IoT devices

作　　者：王振宇 郭阳[1] 李少青[1] 侯申 邓丁 WANG Zhenyu;GUO Yang;LI Shaoqing;HOU Shen;DENG Ding(College of Computer Science and Technology,National University of Defense Technology,Changsha 410000,China;Information Engineering University,Luoyang 471003,China)

机构地区：[1]国防科技大学计算机学院,湖南长沙410000 [2]信息工程大学,河南洛阳471003

出　　处：《通信学报》2022年第7期49-61,共13页Journal on Communications

基　　金：国家自然科学基金资助项目(No.61832018)。

摘　　要：针对现有方案中复杂安全原语不适合资源受限的物联网设备的问题,基于物理不可克隆函数(PUF)为物联网设备设计了一种轻量级高效匿名身份认证协议。通过形式化安全模型和ProVerif协议分析工具,证明该协议满足信息传输机密性、完整性、不可追踪和前向/后向保密等13种安全属性。与近几年认证方案的性能对比分析表明,该协议在设备端与服务器端的计算开销分别为0.468 ms和0.072 ms,设备存储开销与通信开销分别为256 bit和896 bit,高度适用于资源受限的轻量级物联网设备。Aiming at the problem that complex security primitives in existing schemes were not suitable for re-source-constrained IoT devices,a lightweight efficient anonymous identity authentication protocol for IoT devices was designed based on physical unclonable function(PUF).Through the formal security model and ProVerif tool,it was proved that the protocol satisfies 13 security properties such as information confidentiality,integrity,un-traceability,and forward/backward secrecy.Compared with existing relevant protocols,the computing overhead of the protocol on the de-vice side and the server side is 0.468 ms and 0.072 ms respectively,and the device storage and communication overheads are 256 bit and 896 bit respectively,which is highly suitable for lightweight IoT devices with limited resources.

关 键 词：物理不可克隆函数 轻量级 匿名性 双向认证 物联网 

分 类 号：TN918.9[电子电信—通信与信息系统]