安全增强的智能电网轻量级匿名认证方案

Security enhanced lightweight anonymous authentication scheme for smart grid

现有的智能电网身份认证方案大多存在计算成本高和认证流程复杂的问题,不适用于智能电网中资源受限的智能设备。而一些轻量级的方案却存在多种安全漏洞,这些方案都无法在效率和安全性之间实现所需的权衡。针对上述问题,基于椭圆曲线加密算法设计了一个增强的可证明安全的智能电网轻量级匿名认证方案。引入辅助验证器,摆脱在认证阶段对于电力供应商的依赖,在保护智能电表真实身份的条件下实现网关和智能电表之间的相互认证。同时,可以通过伪身份对恶意智能电表进行身份的溯源和撤销。通过在随机预言模型下的安全性分析和仿真工具ProVerif证明了方案具备较高的安全属性。性能分析表明,所提方案能够满足智能电网环境下对于安全性和高效性的要求。

Most of the existing smart grid authentication schemes suffer from high computational costs and complex authentication processes,which are not suitable for resource-constrained smart devices in the smart grid,while some lightweight schemes suffer from various security vulnerabilities,none of which can achieve the required trade-off between efficiency and security.To solve these problems,this paper designed an enhanced provably secure smart grid lightweight anonymous authentication scheme based on elliptic curve encryption algorithm.It introduced auxiliary validator to get rid of the reliance on the power supplier in the authentication phase and to achieve mutual authentication between the gateway and the smart meter under the condition of protecting the true identity of the smart meter.In addition,the scheme could trace and revoke the identity of malicious smart meters through pseudo identity.Through the security analysis under the random oracle model and simulation tool ProVerif verifies that the proposed scheme has high security properties.Performance analysis shows that the proposed scheme can meet the requirements for security and efficiency in smart grid environment.