基于身份认证的物联网服务器安全性研究

Research on Security of Internet of Things Servers Based on Identity Authentication

随着物联网的快速发展,大量的智能终端设备接入互联网。物联网服务器承担接收、处理和存储来自成千上万的物联网设备终端传输数据的任务,给服务器带来巨大压力。然而,目前各厂商的物联网服务器在身份认证方面存在明显缺陷,对未授权设备终端的请求依然进行回应。当多个未授权设备终端同时向服务器发起请求时,会极大地加剧服务器的负载,严重可能导致服务器拒绝服务,进而造成重大损失。本文通过对来自不同品牌的11个扫地机器人进行实验,通过分析实验结果来判断不同扫地机器人对应的物联网服务器是否存在身份认证缺陷。最后,为解决这一问题提出了利用单包认证机制解决方案。这一研究可提升物联网服务器的整体安全性,确保物联网生态系统的稳健运行。

With the rapid development of the Internet of Things,a large number of smart terminal devices are connected to the Internet.The Internet of Things server is responsible for receiving,processing and storing data transmitted from thousands of Internet of Things device terminals,which puts huge pressure on the server.However,currently,The IoT servers of various manufacturers have obvious flaws in identity authentication,and they still respond to requests from unauthorized device terminals.When multiple unauthorized device terminals initiate requests to the server at the same time,it will greatly increase the load on the server,which may seriously lead to The server refuses service,causing heavy losses.This article conducts experiments on 11 sweeping robots from different brands and analyzes the experimental results to determine whether the loT servers corresponding to different sweeping robots have identity authentication flaws.Finally,in order to solve this problem A solution using a single-package authentication mechanism is proposed.This research can improve the overall security of the IoT server and ensure the robust operation of the IoT ecosystem.