Utilizing Certificateless Cryptography for IoT Device Identity Authentication Protocols in Web3  

作　　者：WU Zhihui HONG Yuxuan ZHOU Enyuan LIU Lei PEI Qingqi 

机构地区：[1]Guangzhou Institute of Technology,Xidian University,Guangzhou 510700,China [2]Guangzhou Lianrong Information Technology Co.Ltd.,Guangzhou 510700,China [3]The Hong Kong Polytechnic University,Hong Kong 999077,China

出　　处：《ZTE Communications》2024年第2期30-38,共9页中兴通讯技术（英文版）

基　　金：supported by the National Key Research and Development Program of China under Grant No.2021YFB2700600;the National Natural Science Foundation of China under Grant No.62132013;the Key Research and Development Programs of Shaanxi under Grant Nos.S2024-YF-YBGY-1540 and 2021ZDLGY06-03;the Basic Strengthening Plan Program under Grant No.2023-JCJQ-JJ-0772;the Key-Area Research and Development Program of Guangdong Province under Grant No.2021B0101400003;Hong Kong RGC Research Impact Fund under Grant Nos.R5060-19 and R5034-18;Areas of Excellence Scheme under Grant No.Ao E/E-601/22-R;General Research Fund under Grant Nos.152203/20E,152244/21E,152169/22E and152228/23E。

摘　　要：Traditional methods of identity authentication often rely on centralized architectures,which poses risks of computational overload and single points of failure.We propose a protocol that offers a decentralized approach by distributing authentication services to edge authentication gateways and servers,facilitated by blockchain technology,thus aligning with the decentralized ethos of Web3 infrastructure.Additionally,we enhance device security against physical and cloning attacks by integrating physical unclonable functions with certificateless cryptography,bolstering the integrity of Internet of Thins(IoT)devices within the evolving landscape of the metaverse.To achieve dynamic anonymity and ensure privacy within Web3 environments,we employ fuzzy extractor technology,allowing for updates to pseudonymous identity identifiers while maintaining key consistency.The proposed protocol ensures continuous and secure identity authentication for IoT devices in practical applications,effectively addressing the pressing security concerns inherent in IoT network environments and contributing to the development of robust security infrastructure essential for the proliferation of IoT devices across diverse settings.

关 键 词：blockchain certificateless cryptography identity authentication IOT 

分 类 号：TN918.4[电子电信—通信与信息系统]