无线传感器网络中基于PUF的轻量级多网关身份认证协议  

Lightweight PUF-based multi-gateway authentication protocol for wireless sensor network

作　　者：王雄[1] 王文博 刘昂 许盛伟 李伟麟 张泽昊 Wang Xiong;Wang Wenbo;Liu Ang;Xu Shengwei;Li Weilin;Zhang Zehao(Dept.of Cyberspace Security,Beijing Electronic Science&Technology Institute,Beijing 100070,China;Network&Information Management Division,Beijing Electronic Science&Technology Institute,Beijing 100070,China;Institute of Information Security,Beijing Electronic Science&Technology Institute,Beijing 100070,China)

机构地区：[1]北京电子科技学院网络空间安全学院,北京100070 [2]北京电子科技学院网络信息化管理处,北京100070 [3]北京电子科技学院信息安全研究所,北京100070

出　　处：《计算机应用研究》2025年第4期1230-1238,共9页Application Research of Computers

基　　金：国家自然科学基金资助项目(62176273);中央高校基本科研业务费专项资金资助项目(3282024026,3282023015)。

摘　　要：针对无线传感器网络中多网关身份认证协议所存在的计算效率低、缺乏安全性以及无线传感器资源受限等问题,提出了一种基于不可克隆函数(PUF)的轻量级多网关身份认证协议。该协议全部使用异或、哈希函数等轻量级运算保证加密传输和完整性验证,每个设备利用PUF函数生成“设备指纹”标志其唯一性,并且通过提出的网络架构能够解决网关节点计算瓶颈和单点故障问题。其次通过随机预言模型、ProVerif协议仿真工具和非形式化安全分析,证明了所提协议满足信息传输机密性、完整性、匿名性等14种安全属性。最后在统一的性能基准下通过与近年相关协议进行分析对比,结果表明所提协议在效率、存储成本和安全属性方面具有较大的优势。To address issues such as low computational efficiency,lack of security,and limited resources in wireless sensor networks,this paper proposed a lightweight multi-gateway authentication protocol based on PUF.This protocol utilized only lightweight operations such as XOR and hash functions to ensure encrypted transmission and integrity verification.Each device generated a unique“device fingerprint”using the PUF function to identify its uniqueness.The proposed network architecture solved the computational bottleneck and single point of failure issues at gateway nodes.Additionally,this paper demonstrated that this protocol meets 14 security attributes,including confidentiality,integrity,anonymity of information transmission,and so on,through the random oracle model,ProVerif protocol simulation tool,and informal security analysis.Finally,under a unified performance benchmark,this paper compared and analyzed this protocol against recent related protocols,showing significant advantages in efficiency,storage cost,and security attributes.

关 键 词：不可克隆函数 轻量级 多网关 身份认证协议 

分 类 号：TN918.9[电子电信—通信与信息系统]