A lightweight certificateless industrial internet of things access control method and system

Abstract

The invention discloses a lightweight access control method and system for the industrial internet of things without a certificate. According to the idea of ​​OAuth, the local central server responsible for authorization authenticates both parties. Unlike ACE‑OAuth, which requires traditional (such as certificate-based) communication key negotiation before authentication, this method uses the local server as a trusted first Three parties, use public key-based challenge responses, tokens and passwords to realize two-way authentication between users and resource servers, and integrate communication key negotiation into the authentication process, while ensuring security, resource servers do not need to distribute and receive certificates and verification, which can effectively reduce the number of interactive rounds in the authentication process, thereby effectively reducing the amount of communication data transmission and key negotiation calculation consumption, including CPU occupation, disk occupation, memory occupation, etc., which is more advantageous in terms of security and practicability , more suitable for resource-constrained environments such as the Industrial Internet of Things.

Description

technical field [0001] The invention belongs to the technical field of computers, and in particular relates to a lightweight certificateless industrial Internet of Things access control method and system. Background technique [0002] The "Internet of Everything" feature of the Internet of Things allows IoT devices that were originally isolated from the external network to be seamlessly integrated into the Internet infrastructure, which makes IoT devices vulnerable to attacks and abuse. How to optimize the security authentication and Access control of resource devices has become an urgent problem in the current security protection of the Internet of Things. However, traditional solutions, such as Radius authentication protocol, NAC authentication scheme, OpenID, etc., do not take into account the limited computing resources of IoT devices, making it difficult for them to meet the scalability, interoperability and portability of IoT systems. internal needs. [0003] In this...

AI Technical Summary

Problems solved by technology

[0011] The purpose of the present invention is to propose a lightweight access control method for the Industrial Internet of Things without a certificate, aiming at the problem of limited computing resources of the equipment in the security protection of the Industrial Internet of Things

Images