摘要
面向物联网的大量端对端相互访问、综合性密码保护、多因素验证保护等需求,提出了基于零知识证明的单向增强验证模型。该模型由单向一次性计算类型任务组成,融合五种共识验证技术形成多因素的链式共识验证方法,通过区块链架构分布式共识机制,实现多因素的一次性难题任务链式增强处理,以及高性能的本地并发验证,支撑端到本地中心授权、点对点离线认证等应用。同时,通过动态设置令牌中零知识证据的种类,实现了弹性的访问控制和隐私保护。实验结果表明,该模型实现了动态难度策略的简明点对点验证,展示出毫秒级高性能和灵活性,并提升了物联网认证方法的安全性。
Aiming at the problems of weak keys,low security and many loopholes in the lightweight cryptography and authentica⁃tion protocols used in most authentication models of the Internet of Things,a multi-factor enhanced authentication model was pro⁃posed based on zero-knowledge proof.The model was composed of one-way one-time computing type tasks,and combines vari⁃ous consensus verification technologies to form a multi-factor consensus verification method.And through the distributed consenalized.At the same time,flexible access control and privacy protection were realized by dynamically setting the type of evidence in the token.Finally,a simulation experiment was carried out to verify,and a prototype scene was constructed for the offline smart lock scene.Experimental results show that the model implements concise peer-to-peer verification of dynamic difficulty policies,exhibiting millisecond-level high performance and flexibility.Compared with other IoT authentication models,it has better securi⁃ty and practicality.
作者
韩道岐
朱江文
陆月明
喻涛
刘洋
陈亮
HAN Daoqi;ZHU Jiangwen;LU Yueming;YU Tao;LIU Yang;CHEN Liang(School of Information and Communication Engineering,Beijing University of Posts and Telecommunications,Beijing 100876,China;School of Cyberspace Security,Beijing University of Posts and Telecommunications/Key Laboratory of Trustworthy Distributed Computing and Service,Ministry of Education,Beijing 100876,China;Education Management Information Center,Ministry of Education,Beijing 100816,China;School of Automation,Beijing Institute of Technology,Beijing 100081,China;Beijing Institute of Astronautical Systems Engineering,Beijing 100000,China;National Computer Emergency Network Response Technical Team/Coordination Center of China,Beijing 100029,China)
出处
《武汉大学学报(理学版)》
CAS
CSCD
北大核心
2023年第5期577-586,共10页
Journal of Wuhan University:Natural Science Edition
基金
国家重点研发计划项目(2021YFB3101904)。
关键词
物联网
零知识证明
共识验证技术
区块链
Internet of Things
zero-knowledge proof
consensus verification technology
blockchain