A Provably Secure and PUF-Based Authentication Key Agreement Scheme for Cloud-Edge IoT  

作　　者：Liquan Chen Jinlong Wang Bangwei Yin Kunliang Yu Jinguang Han 

机构地区：[1]School of Cyber Science and Engineering,Southeast University,Nanjing 210096,China [2]Purple Mountain Laboratories,Nanjing 211189,China

出　　处：《China Communications》2023年第5期198-216,共19页中国通信（英文版）

基　　金：supported by the National Key Research and Development Program of China,“Joint Research of IoT Security System and Key Technologies Based on Quantum Key,”under project number 2020YFE0200600.

摘　　要：With the exponential growth of intelligent Internet of Things(IoT)applications,Cloud-Edge(CE)paradigm is emerging as a solution that facilitates resource-efficient and timely services.However,it remains an underlying issue that frequent end-edgecloud communication is over a public or adversarycontrolled channel.Additionally,with the presence of resource-constrained devices,it’s imperative to conduct the secure communication mechanism,while still guaranteeing efficiency.Physical unclonable functions(PUF)emerge as promising lightweight security primitives.Thus,we first construct a PUF-based security mechanism for vulnerable IoT devices.Further,a provably secure and PUF-based authentication key agreement scheme is proposed for establishing the secure channel in end-edge-cloud empowered IoT,without requiring pre-loaded master keys.The security of our scheme is rigorously proven through formal security analysis under the random oracle model,and security verification using AVISPA tool.The comprehensive security features are also elaborated.Moreover,the numerical results demonstrate that the proposed scheme outperforms existing related schemes in terms of computational and communication efficiency.

关 键 词：Internet of Things end-edge-cloud orchestration secure communication physical unclonable function authentication key agreement 

分 类 号：TN918.4[电子电信—通信与信息系统] TP391.44[电子电信—信息与通信工程]