HIBE-MPJ:一种基于HIBE的物联网环境下跨域通信机制研究

HIBE-MPJ:cross-domain communication mechanism based on HIBE in Internet of Things environment

基于身份的加密方案解决了传统公钥加密体制在证书管理方面的不足,使基于身份的加密方案能适应物联网轻量级的环境。针对基于身份加密在物联网环境中的应用存在密钥托管和跨域认证等问题,提出一种分层的基于身份加密(Hierarchical Identity-Based Encryption,HIBE)的物联网环境下多私钥生成机构(Private Key Generator,PKG)联合跨域认证及通信机制HIBE-MPJ(Hierarchical Identity-Based Encryption-Multiple Private Key Generator Joint)。HIBE-MPJ使用不同信任域的PKG作为跨域认证时的信任网关,通过密钥共享解决不同信任域PKG的密钥托管问题,并建立安全的通信密钥协商机制,使得不同系统参数的两个物联网信任域内的用户节点能互相认证,并提高通信时的效率。随后对认证过程给出了正确性分析,并分析了该方案在随机预言模型下的安全性,并加以实验测试分析,实验结果表明,HIBE-MPJ具有安全性及可行性。最后通过理论证明和构建物联网环境进行实验测试,实验结果表明HIBE-MPJ模型的安全性和可行性。

The identity-based encryption solution solves the deficiencies of the traditional public key encryption system in certificate management,so that the identity-based encryption solution can adapt to the lightweight environment of the Internet of Things(IoT).Aiming at the problems of key escrow and cross-domain authentication based on the application of identity encryption in IoT environment,a multiple private key generator(PKG)joint cross-domain authentication and communication mechanism hierarchical identity-based encryption-multiple private key generator joint(HIBE-MPJ)based on hierarchical identity-based encryption(HIBE)is proposed.HIBE-MPJ uses PKGs of different trust domains as the trust gateway for cross-domain authentication,solves the key escrow problem of PKGs of different trust domains through key sharing,and establishes a secure communication key negotiation mechanism to make two of the different system parameters user nodes in the IoT trust domain can authenticate each other and improve the efficiency of communication.Then the correctness analysis of the authentication process is given,and the security of the scheme under the random prediction model is analyzed,and the experimental test analysis is carried out.The experimental results show that HIBE-MPJ is safe and feasible.Finally,through the theoretical proof and the construction of the Internet of Things environment,the experimental test showed that the HIBE-MPJ model is safe and feasible.