Park Namje, Kang Namhi
Department of Computer Education, Teachers College, Jeju National University, 61 Iljudong-ro, Jeju-si, Jeju Special Self-Governing Province 690-781, Korea.
Sensors (Basel). 2015 Dec 24;16(1):20. doi: 10.3390/s16010020.
The Internet of Things (IoT), which can be regarded as an enhanced version of machine-to-machine communication technology, was proposed to realize intelligent thing-to-thing communications by utilizing the Internet connectivity. In the IoT, "things" are generally heterogeneous and resource constrained. In addition, such things are connected to each other over low-power and lossy networks. In this paper, we propose an inter-device authentication and session-key distribution system for devices with only encryption modules. In the proposed system, unlike existing sensor-network environments where the key distribution center distributes the key, each sensor node is involved with the generation of session keys. In addition, in the proposed scheme, the performance is improved so that the authenticated device can calculate the session key in advance. The proposed mutual authentication and session-key distribution system can withstand replay attacks, man-in-the-middle attacks, and wiretapped secret-key attacks.
物联网(IoT)可被视为机器对机器通信技术的增强版,其旨在通过利用互联网连接实现智能的物与物通信。在物联网中,“物”通常是异构的且资源受限。此外,这些物通过低功耗有损网络相互连接。在本文中,我们为仅具备加密模块的设备提出了一种设备间认证和会话密钥分发系统。在所提出的系统中,与现有由密钥分发中心分发密钥的传感器网络环境不同,每个传感器节点都参与会话密钥的生成。此外,在所提出的方案中,性能得到了提升,使得经过认证的设备能够提前计算会话密钥。所提出的相互认证和会话密钥分发系统能够抵御重放攻击、中间人攻击和窃听密钥攻击。