面向智能电网移动终端的轻量级认证方案

Light weight authentication scheme for smart grid mobile terminals

针对智能电网移动终端秘密存储数据容易受到攻击,提出一个基于BS-PUF的轻量级认证方案。使用随机假名实现了身份信息隐私保护,基于椭圆曲线构造有效降低智能电网节点的计算量,实现了轻量化、低时延认证。采用BS-PUF不仅可减少敏感信息存储,还可抵御侧信道攻击。动态更新机制进一步提高了口令安全性。使用BAN逻辑对协议的正确性进行了验证,基于eCK模型对协议的安全性进行了形式化分析,通过仿真实验评估了协议的性能。分析结果表明,所提出的协议可满足智能电网移动终端认证协议的安全性及性能需求,且能有效保护用户身份隐私。

A BS-PUF based lightweight authentication scheme for smart grid mobile terminals is proposed to address the vulnerability in data storage.Random pseudonym is adopted to protect the privacy of identity information,and an ECC-based authentication protocol is constructed to effectively reduce the computation of smart grid nodes and achieve lightweight and low delay authentication.BS-PUF cannot only reduce the storage of sensitive information,but also resist side channel attacks.Dynamic update mechanism is adopted to further improve password security.BAN logic is used to prove the correctness of the protocol,eCK model is used to prove the security of the protocol,and the performance of the protocol is evaluated through simulation experiments.The analysis results show that the proposed protocol meets the security and performance requirements of authentication protocols for mobile terminals in smart grids,and can effectively protect user identity privacy.