智能家居网络下基于多因子的认证密钥协商方案  

Research on Multi-Factor Authenticated Key Agreement Protocol for Smart Home Networks

作　　者：张敏[1,2] 冯永强[3,4] 许春香 张建华[2] ZHANG Min;FENG Yongqiang;XU Chunxiang;ZHANG Jianhua(School of Cyberspace Security,University of Electronic Science and Technology of China,Chengdu 611731,China;School of Computer Science and Engineer,Southwest Minzu University,Chengdu 610225,China;PipeChina North Pipeline Company,Langfang 065000,China;Northeast Petroleum University,Daqing 163318,China)

机构地区：[1]电子科技大学网络空间安全学院,成都611731 [2]西南民族大学计算机科学与工程学院,成都610041 [3]国家管网集团北方管道有限责任公司,廊坊065000 [4]东北石油大学,大庆163318

出　　处：《信息网络安全》2024年第1期133-142,共10页Netinfo Security

基　　金：国家自然科学基金[61370203];国家重点研发计划[2017YFB0802000];西南民族大学2023年度人才培养质量提升改革项目[2023JGZL17]。

摘　　要：智能家居网络通过物联网技术将智能设备相连,用户可以远程查看和控制家居设备,但信息在不安全的公共网络上传输将面临各种网络威胁,因此研究和设计安全高效且符合智能家居网络的认证密钥协商协议非常必要。2020年,WAZID等人针对智能家居网络提出轻量级认证密钥协商方案(Wazid-Das方案),经过安全性分析和证明后发现,该方案过于依赖智能家居网关节点(Gateway Node,GWN),系统健壮性不高;该方案将用户和设备密钥存储在GWN中,但GWN面临特权攻击和各种外部网络攻击,并不绝对安全,且没有考虑用户的访问控制。文章在Wazid-Das方案的基础上针对智能家居网络提出一种基于切比雪夫映射(Chebyshev Chaotic Map)和安全略图(Secure Sketch)的多因子认证密钥协商方案。安全性证明和仿真实验结果表明,该方案虽然计算开销有所增加,但安全性显著提高,且通信开销大幅降低。Smart home networks connect smart devices at home through IoT technology,allowing users to remotely view and control their devices.However,information transmission on insecure public networks will face various network threats.Therefore,it is necessary to research and design secure,efficient,and compliant authentication key negotiation protocols for smart home networks.In 2020,WAZID et al.proposed a lightweight authentication key agreement protocol for smart home networks.After security analysis and verification,this paper found that the protocol has the following problems:the scheme overly relies on the gateway node(GWN)of the smart home gateway node,resulting in low system robustness;this scheme stores user and device keys in GWN,but GWN faces privilege attacks and various external network attacks,making it not absolutely secure;this scheme did not consider user access control.This article proposed a new multi-factor authentication key agreement scheme based on Chebyshev chaotic map and Secure Sketch for smart home networks.From the security proof and simulation experiments,although the computational cost of the proposed scheme has increased,the security has been improved and the communication cost has been reduced.

关 键 词：智能家居 安全略图 多因子认证 切比雪夫映射 密钥协商 

分 类 号：TP309[自动化与计算机技术—计算机系统结构]