基于集群架构的物联网终端动态认证仿真

Simulation of Internet of Things Terminal Dynamic Authentication Based on Cluster Architecture

为有效提高物联网终端认证的安全性,基于集群架构对物联网终端动态进行认证仿真。设计的认证策略主要基于双注册因子和对应认证结构,包括常数量和编码特征密匙,在此基础上设定集群架构下物联网双因子注册流程,第一认证因子与服务器达成一致,通过用户初始注册信息终端服务器生成注册凭证,第二因子通过SAS服务器认证,并生成注册会话密匙,完成最终双因子注册,根据注册因子,以X.509V3作为核心签发结构,构造认证数字证书,搭配公共密匙基础设置(PKI),确定身份认证协议,采用"挑战-应答"的形式完成物联网移动终端的认证实现集群架构下,当前物联网终端的整体认证工作。实验数据表明,在标准内核攻击下,设计的物联网终端认证方法可以有效保证自身数据的完整性,提高认证安全和可信性。

In order to effectively improve the security of Internet of things(IoT) terminal authentication, the dynamic authentication simulation based on cluster architecture was carried out. Firstly, the authentication strategy was mainly based on double-registration factor and the corresponding certification structure, including constant factors and coding feature keys. On this basis, IoT double factor registration process was determined under cluster architecture. The first factor came to an agreement with the server. Through user initial registration information, the terminal server generated registration evidence. The second factor was identified by SAS server, and then the registered session key was generated. Finally, the double factors were registered. After that, X509 V3 was taken as the core issuance to build a digital certificate. Combined with the public key basis instrument(PKI), the identity authentication protocol could be determined. Thus, the authentication of IoT mobile terminal was completed in the form of "challenge-reply". Eventually, the whole authentication of IoT terminals under the cluster architecture was achieved. Simulation data show that the designed method can effectively guarantee the integrity of data and improve the authentication security and credibility under the standard kernel attacks.