基于云平台物联网的多因子远程身份认证方法  

MULTI FACTOR REMOTE IDENTITY AUTHENTICATION METHOD BASED ON CLOUD PLATFORM INTERNET OF THINGS

作　　者：于光华 夏魁良 辛明远 王诗莹 Yu Guanghua;Xia Kuiliang;Xin Mingyuan;Wang Shiying(School of Computer and Information Engineering,Heihe University,Heihe 164300,Heilongjiang,China;School of Management,Harbin University of Commerce,Harbin 150076,Heilongjiang,China)

机构地区：[1]黑河学院计算机与信息工程学院,黑龙江黑河164300 [2]哈尔滨商业大学管理学院,黑龙江哈尔滨150076

出　　处：《计算机应用与软件》2022年第11期310-316,343,共8页Computer Applications and Software

基　　金：黑龙江省自然科学基金项目(YQ2019G004);黑河学院课题(KJY202002)。

摘　　要：为了优化远程身份认证,利用多个物联网(IoT)连接至云服务器,以支持远程用户访问IoT网络生成的数据。在云平台物联网的基础上,提出一种轻量级多因子智能卡的远程身份认证方案。所提方案主要包括6个阶段:预计算阶段、注册阶段、登录阶段、身份认证阶段、密码更改阶段和智能卡撤销阶段。实验采用互联网安全协议和应用的自动化认证(AVISPA)工具对所提方案的安全性进行了形式化验证,结果表明所提方案能够满足大多安全要求。与其他同类优秀方案相比,该方案在身份认证的安全性和计算开销方面更优。To optimize remote identity authentication,multiple Internet of Things(IOT)were used to connect to the cloud server to support remote users to access the data generated by IOT network.Based on the cloud platform Internet of things,a lightweight multiple factor smart card remote identity authentication scheme was proposed.The proposed scheme mainly includes six stages:precalculation stage,registration stage,login stage,identity authentication stage,password change stage and smart card revocation stage.The automated validation of Internet security protocols and applications(AVISPA)was used in the experiments to formally verify the security of the proposed scheme.The experimental results show that the proposed scheme can meet most of the security requirements.Compared with other excellent schemes of the same kind,the proposed scheme is better in the security and computing cost of identity authentication.

关 键 词：物联网 云平台 远程身份认证 智能卡 安全性 计算开销 

分 类 号：TP393.08[自动化与计算机技术—计算机应用技术]