Lightweight security authentication method and device based on device fingerprint and PUF

Abstract

The invention discloses a lightweight security authentication method and device based on a device fingerprint and a PUF. The method comprises the steps that edge Internet of Things equipment generates a message M<0> and an authentication parameter I<0> and sends the message M<0> and the authentication parameter I<0> to a device manager; the device manager calculates a Hash value I<0>' based on the received message M<0>, and if I<0>' is equal to I<0>, M<1> is generated, and an authentication parameter I<1> is further generated; the device manager sends the message M<1> and the authentication parameter I<1> to the edge Internet of Things equipment through a connection manager; the edge Internet of Things equipment calculates a Hash value I<1>' based on the received message M<1>, if I<1>' is equal to I<1>, a session key ki is generated, a false identity label of the session key k is updated, and then I<2> is sent to the device manager; and the device manager generates a new false identity label and verifies I<2>, if I<2> passes the verification, the device manager stores the new false identity label for future identity verification requests. According to the invention, anonymity and security of the Internet of Things equipment can be realized.

Description

technical field [0001] The invention belongs to the fields of security authentication and the Internet of Things, and in particular relates to a lightweight security authentication method and device based on device fingerprints and PUF. Background technique [0002] With the continuous growth of Internet of Things (IoT) devices, especially in the scenario where a large number of terminals are connected to the Internet of Things, the large amount of data generated by these devices may cause many security and privacy issues. In IoT, the most important security requirements include device authentication and privacy security. But existing research on IoT device authentication is not exhaustive, and most schemes are vulnerable to impersonation, cloning, denial of service (DoS), and physical attacks. [0003] Existing IoT device authentication research can be divided into three categories, namely security primitive-based, hardware-based, and wireless channel feature-based device ...

AI Technical Summary

Problems solved by technology

However, this technique has high communication and computational overhead due to the length of wireless fingerprints and optimization

Another scheme using multi-hop source protocols uses RSSI values ​​but has no authentication mechanism, so attackers can easily spoof RSSI values ​​to hide their location

[0005] In fact, we found that the existing device authentication technologies in the Internet of Things have one or more of the following problems: (1) rely on security hardware that is too expensive for IoT devices; (2) all devices must have the same architecture system; (3) Computationally too complex for IoT devices; (4) Vulnerable to physical attacks and cloning attacks, without privacy protection; (5) Ephemeral Secret Leakage (ESL) attacks can be used

Images