无证书密钥协议在物联网下的应用研究  

Application Research on Certificateless Key Protocol in the Internet of Things

作　　者：陈金木[1] 黄朝阳[1] 罗少兰[1] 陈少英 CHEN Jinmu;HUANG Chaoyang;LUO Shaolan;CHEN Shaoying(School of Information Engineering,Xiamen Ocean Vocational College,Xiamen 361102,Fujian Province)

机构地区：[1]厦门海洋职业技术学院信息工程学院,福建厦门361102

出　　处：《沈阳工程学院学报（自然科学版）》2024年第1期68-74,81,共8页Journal of Shenyang Institute of Engineering:Natural Science

基　　金：中国高校产学研创新基金(2020ITA05024);福建省中青年教师教育科研项目(JAT191316)。

摘　　要：物联网终端设备具有存储小、计算资源受限等特点,差异性较大导致其安全认证机制薄弱。本文提出了一种基于椭圆曲线密码的无证书密钥协议,主要用于物联网应用中的设备通信。协议中去除了计算复杂的配对操作,轻量化的无证书密钥方案更有利于物联网设备应用,具有提供消息完整性、抵抗重放攻击等安全措施。与其他同类协议相比,本文的无证书密钥协议的计算开销和通信成本较低,具备更高的安全性能。IoT terminal devices have characteristics such as small storage and limited computing resources.Their large differences lead to weak security authentication mechanisms.This paper proposes a certificateless key protocol based on elliptic curve cryptography,mainly used for device communication in Internet of Things applications.The computationally complex pairing operation is removed from the protocol.The lightweight certificateless key scheme is more conducive to the application of IoT devices and has security measures such as providing message integrity and resisting replay attacks.Compared with other similar protocols,the computing overhead and communication cost are lower,and it has more efficient security performance.

关 键 词：物联网 椭圆曲线密码 无证书 轻量化 密钥协商 

分 类 号：TP309[自动化与计算机技术—计算机系统结构]