基于CK01模型的物联网节点密钥交换和更新算法研究

Research on the Io T Nodes Key Exchange and Update Algorithm Based on CK01 Model

随着物联网网络管理规模的增大和对安全性要求的提高,简单网管协议第3版标准中的用户安全模型的密钥交换已经不能满足需求。针对当前流行的用户安全模型,提出基于Canetti-Krawczyk模型的安全密钥交换算法,并进行形式化的证明和相应的方案设计与实现。经过实验系统检验,该方案能较好地提高系统的安全性、性能和易部署维护性。

With the IOT network management scale and security requirements increasing, it is hard to meet the requirements with USM based SNMPv3 key exchange model. Based on the popular USM security model, it not only proposes a CK01 based security solution and verifies it with formal proof method, but also the design and implementation. It has been deployed in the experiment systems and proved to be better security, performance and deployment/maintenance.