Lightweight authentication scheme for edge control systems in Industrial Internet of Things  

作　　者：Wenli SHANG Xudong WEN Zhuo CHEN Wenze XIONG Zhiwei CHANG Zhong CAO 

机构地区：[1]School of Electronics and Communication Engineering,Guangzhou University,Guangzhou 510006,China [2]Instrumentation Technology and Economy Institute,Beijing 100055,China

出　　处：《Frontiers of Information Technology & Electronic Engineering》2024年第11期1466-1478,共13页信息与电子工程前沿（英文版）

基　　金：supported by the National Key R&D Program of China(No.2021YFB2012400);the National Natural Science Foundation of China(No.62173101);the Basic and Applied Basic Research Funding of Guangdong Province,China(Nos.2022A1515011558 and 2022A1515010865);the Key Laboratory of On-Chip Communication and Sensor Chip of Guangdong Higher Education Institutes,China(No.2023KSYS002)。

摘　　要：In edge control systems(ECSs),edge computing demands more local data processing power,while traditional industrial programmable logic controllers(PLCs)cannot meet this demand.Thus,edge intelligent controllers(EICs)have been developed,making their secure and reliable operation crucial.However,as EICs communicate sensitive information with resource-limited terminal devices(TDs),a low-cost,efficient authentication solution is urgently needed since it is challenging to implement traditional asymmetric cryptography on TDs.In this paper,we design a lightweight authentication scheme for ECSs using low-computational-cost hash functions and exclusive OR(XOR)operations;this scheme can achieve bidirectional anonymous authentication and key agreement between the EIC and TDs to protect the privacy of the devices.Through security analysis,we demonstrate that the authentication scheme can provide the necessary security features and resist major known attacks.Performance analysis and comparisons indicate that the proposed authentication scheme is effective and feasible for deployment in ECSs.

关 键 词：Edge intelligent controller(EIC) Edge control systems(ECSs) Terminal devices(TDs) Anonymous authentication Lightweight authentication 

分 类 号：TP273[自动化与计算机技术—检测技术与自动化装置] TN929.5[自动化与计算机技术—控制科学与工程] TP393[电子电信—通信与信息系统]