基于物理层信道特征的无线网络认证机制

Wireless Network Authentication Method Based on Physical Layer Channel Characteristics

在轻量级物联网中,针对传统认证方式存在的高能耗、高时延等问题,文中提出一种基于物理层信道特征的无线网络认证机制。该方案利用信道冲激频率响应(Channel Impulse Response,CIR)进行身份认证,并将其作为初始消息认证码(Message Authentication Code,MAC)进行消息认证;采用“哈希链”迭代的方式生成标签信号,进而实现MAC的更新,提高通信双方对数据包调换、篡改等攻击行为的敏感度;将身份认证与消息认证、标签信号与数据包紧密结合,适用于工业物联网、智能家居等安全要求高、设备资源有限的通信环境。安全性分析与仿真结果表明,与HMAC(Hash-based Message Authentication Code)、祖冲之完整性算法(EIA3)等相比,该方案的认证时延较短,具有一定的实用性。

In lightweight Internet of Things(IoT),the traditional authentication method has problems such as high energy consumption and high delay.Therefore,this paper proposed a wireless network authentication mechanism based on physical layer channel characteristics.The channel impulse frequency response(CIR)is used for identity authentication,and it is used as the initial message authentication code(MAC)for message authentication.It uses“Hash chain”to generate tag signals,so as to realize MAC updating and improve the sensitivity of packet exchange,tampering and other attacks.This method combines identity authentication with message authentication,tag signal and communication information,and is suitable for the communication environment with high security requirements and limited equipment resources,such as industrial Internet of Things and smart home.The security analysis and simulation results show that compared with HMAC,EIA3 and other algorithms,the authentication delay of this scheme is small and it has certain practicability.