基于身份认证的物联网服务器安全性研究  

Research on Security of Internet of Things Servers Based on Identity Authentication

作　　者：周俊升 胡欣 段斌 方毅杰 吴小龙 

机构地区：[1]威凯检测技术有限公司,广州510000

出　　处：《日用电器》2024年第4期55-58,共4页ELECTRICAL APPLIANCES

摘　　要：随着物联网的快速发展,大量的智能终端设备接入互联网。物联网服务器承担接收、处理和存储来自成千上万的物联网设备终端传输数据的任务,给服务器带来巨大压力。然而,目前各厂商的物联网服务器在身份认证方面存在明显缺陷,对未授权设备终端的请求依然进行回应。当多个未授权设备终端同时向服务器发起请求时,会极大地加剧服务器的负载,严重可能导致服务器拒绝服务,进而造成重大损失。本文通过对来自不同品牌的11个扫地机器人进行实验,通过分析实验结果来判断不同扫地机器人对应的物联网服务器是否存在身份认证缺陷。最后,为解决这一问题提出了利用单包认证机制解决方案。这一研究可提升物联网服务器的整体安全性,确保物联网生态系统的稳健运行。With the rapid development of the Internet of Things,a large number of smart terminal devices are connected to the Internet.The Internet of Things server is responsible for receiving,processing and storing data transmitted from thousands of Internet of Things device terminals,which puts huge pressure on the server.However,currently,The IoT servers of various manufacturers have obvious flaws in identity authentication,and they still respond to requests from unauthorized device terminals.When multiple unauthorized device terminals initiate requests to the server at the same time,it will greatly increase the load on the server,which may seriously lead to The server refuses service,causing heavy losses.This article conducts experiments on 11 sweeping robots from different brands and analyzes the experimental results to determine whether the loT servers corresponding to different sweeping robots have identity authentication flaws.Finally,in order to solve this problem A solution using a single-package authentication mechanism is proposed.This research can improve the overall security of the IoT server and ensure the robust operation of the IoT ecosystem.

关 键 词：物联网 信息安全 智能终端 身份认证 单包认证机制 

分 类 号：TN915.08[电子电信—通信与信息系统] TP391.44[电子电信—信息与通信工程]