一种基于EAP-IBTLS的无证书物联网终端认证协议

Certificateless authentication protocol based on EAP-IBTLS in IoT

针对物联网中终端设备安全认证机制薄弱、安全威胁较多的问题,提出了一个轻量化的物联网终端认证协议。由于物联网中感知终端资源受限,根据身份标识密码技术的思想,对互联网中广泛使用的EAP-TLS(Extensible Authentication Protocol-Transport Layer Security)认证标准进行改进,提出了轻量化的无证书认证协议:EAP-IBTLS,设计了认证协议的系统架构以及具体的实现流程。在此基础上,提出了一种轻量化的标识密码认证算法。最后,设计了物联网终端设备认证系统原型,通过具体的应用实现,验证了所提出协议的安全性与高效性。

Aiming at the problem of weak security authentication mechanism and security threats of terminal devices in the Internet of Things(IoT),a lightweight IoT terminal authentication protocol is proposed.Due to the limited resource of the terminal device in the IoT environment,a lightweight authentication protocol is required.According to the idea of identity-based cryptograph,a certificateless authentication protocol,called the EAP-IBTLS,is improved based on the EAP-TLS in the Internet.Also,the system architecture and the specific implementation process of the protocol are designed.Based on it,a lightweight algorithm on IBC is proposed.Finally,the prototype of the terminal device authentication system in IoT is designed,and the security and the efficiency of the proposed protocol are verified by the specific application.