基于CoAP轻量级远程用户认证协议  

Lightweight remote user authentication protocol based on CoAP

作　　者：王啸 阮方鸣 陈延利 WANG Xiao;RUAN Fang-ming;CHEN Yan-li(School of Big Data and Computer Science,Guizhou Normal University,Guiyang 550025,China)

机构地区：[1]贵州师范大学大数据与计算机科学学院,贵州贵阳550025

出　　处：《计算机工程与设计》2023年第7期2000-2007,共8页Computer Engineering and Design

基　　金：国家自然科学基金项目(62102112、61901096、61902085);国家重点研发计划基金项目(2020YFC0833406);贵州省科技基金平台人才基金项目(黔科合平台人才[2017]5653)。

摘　　要：针对智能家居物联网设备的安全问题,提出一种轻量级、隐私保护的远程用户认证协议。该协议将随机数和对称密钥相结合,采用受限制的应用协议(costrained application protocal,CoAP)进行消息传输,免除用户记忆密码和携带智能卡的麻烦,完成远程用户、智能网关和物联网设备的身份认证。完成远程用户和智能家居设备的会话密钥协商。通过BAN逻辑形式化安全分析和非形式化安全分析,验证了提出协议的安全性。通过性能分析,验证了提出协议的可行性和轻量级特性,通信开销相较之前的研究减少了60%。Aiming at the security issues of smart home IoT devices,a lightweight,privacy-preserving remote user authentication protocol was proposed.Random numbers and symmetric keys were combined,constrained application protocol(CoAP)was used for message transmission,the trouble of users remembering passwords and carrying smart cards was eliminated,and remote users,smart gateways and the internet of things device authentication were completed.At the same time,the session key negotia-tion between the remote user and the smart home device was completed.The security of the proposed protocol was proved through formal security analysis and informal security analysis of BAN logic.Through performance analysis,the feasibility and lightweight characteristics of the proposed protocol are verified,and the communication overhead is reduced by 60%compared with the previous research.

关 键 词：物联网 智能家居设备 身份验证协议 受限应用协议 智能家居 远程用户 BAN逻辑 

分 类 号：TP309.1[自动化与计算机技术—计算机系统结构]