面向轻量级物联网设备的高效匿名身份认证协议设计

Design of efficient anonymous identity authentication protocol for lightweight IoT devices

针对现有方案中复杂安全原语不适合资源受限的物联网设备的问题,基于物理不可克隆函数(PUF)为物联网设备设计了一种轻量级高效匿名身份认证协议。通过形式化安全模型和ProVerif协议分析工具,证明该协议满足信息传输机密性、完整性、不可追踪和前向/后向保密等13种安全属性。与近几年认证方案的性能对比分析表明,该协议在设备端与服务器端的计算开销分别为0.468 ms和0.072 ms,设备存储开销与通信开销分别为256 bit和896 bit,高度适用于资源受限的轻量级物联网设备。

Aiming at the problem that complex security primitives in existing schemes were not suitable for re-source-constrained IoT devices,a lightweight efficient anonymous identity authentication protocol for IoT devices was designed based on physical unclonable function(PUF).Through the formal security model and ProVerif tool,it was proved that the protocol satisfies 13 security properties such as information confidentiality,integrity,un-traceability,and forward/backward secrecy.Compared with existing relevant protocols,the computing overhead of the protocol on the de-vice side and the server side is 0.468 ms and 0.072 ms respectively,and the device storage and communication overheads are 256 bit and 896 bit respectively,which is highly suitable for lightweight IoT devices with limited resources.