一个基于物理不可克隆函数的智能电网设备认证协议

A physical unclonable function based device authentication protocol for smart grid

为了解决智能电网中的数据安全和隐私保护问题,减少由于对智能电表的物理攻击以及对网络中传输的数据进行窃听、伪造或篡改造成的损失,利用物理不可克隆函数(PUF),结合模糊提取器和椭圆曲线密码技术,设计了一种智能电表与邻域网关间的轻量级匿名认证协议.协议具有双向认证、匿名性、前向安全性等安全属性,临时密钥可动态更新且智能电表无需存储任何秘密信息,适用于缺乏安全保护且资源受限的设备认证.

In order to provide a solution for data security and privacy protection in smart grid,and avoid the losses caused by physical attacks on smart meters and eavesdropping,forgery or tampering with the data transmitted on the network,a lightweight anonymous authentication protocol between smart meters and neighborhood gateways is proposed by using a physical unclonable function(PUF)combined with a fuzzy extractor and elliptic curve cryptography.The protocol has security attributes such as mutual authentication,anonymity,and forward security.The temporary key can be dynamically updated,and the smart meter does not need to store any secret information.It is suitable for the authentication of devices with weak security protection and constrained resources.