实现欧洲/电气安装总线协议数据加密和设备认证的方法

Implementation of data encryption and device authentication in Konnex /European installation bus protocol

为了实现家居和建筑自动化(HBA)的数据安全传输,在欧洲安装总线(KNX/EIB)标准协议引入加密和认证机制;使用迪菲-赫尔曼(Diffie-Hellman)算法实现非对称密钥共享,高级加密标准(AES)实现数据加密,基于哈希算法的挑战握手认证协议实现设备认证,使用控制器协调密钥分享和设备认证过程。模拟实验表明,所提方法在空间和时间上都是可行的,比其他改进方法更容易实现,操作更简单,能够保证数据的安全。

To implement secure data transition in Home and Building Automation （HBA）, an encryption and authentication mechanism was introduced into Konnex/European Installation Bus （ KNX/EIB）. Diffie-Hellman algorithm was used to realize asymmetric key sharing, Advanced Encryption Standard （AES） was applied to data encryption, Hash algorithm was adopted for challenge authentication, a device named controller was employed to coordinate the procedure of key sharing and device authentication. The simulation results show the proposed method is feasible concerning the space and time cost. Compared to other improvement methods, this one is easier to implement and operate, and it can ensure data security.