Chen Yi, Wen Hong, Wu Jinsong, Song Huanhuan, Xu Aidong, Jiang Yixin, Zhang Tengyue, Wang Zhen
National Key Laboratory of Science and Technology on Communications, University of Electronic Science and Technology of China, Chengdu 611731, China.
School of Aeronautics and Astronautics, University of Electronic Science and Technology of China, Chengdu 611731, China.
Sensors (Basel). 2019 Apr 24;19(8):1926. doi: 10.3390/s19081926.
In this paper, we propose a clustering based physical-layer authentication scheme (CPAS) to overcome the drawback of traditional cipher-based authentication schemes that suffer from heavy costs and are limited by energy-constrained intelligent devices. CPAS is a novel cross-layer secure authentication approach for edge computing system with asymmetric resources. The CPAS scheme combines clustering and lightweight symmetric cipher with physical-layer channel state information to provide two-way authentication between terminals and edge devices. By taking advantage of temporal and spatial uniqueness in physical layer channel responses, the non-cryptographic physical layer authentication techniques can achieve fast authentication. The lightweight symmetric cipher initiates user authentication at the start of a session to establish the trust connection. Based on theoretical analysis, the CPAS scheme is secure and simple, but there is no trusted party, while it can also resist small integer attacks, replay attacks, and spoofing attacks. Besides, experimental results show that the proposed scheme can boost the total success rate of access authentication and decrease the data frame loss rate, without notable increase in authentication latencies.
在本文中，我们提出了一种基于聚类的物理层认证方案（CPAS），以克服传统基于密码的认证方案的缺点，这些方案成本高昂且受能量受限的智能设备限制。CPAS是一种针对具有不对称资源的边缘计算系统的新型跨层安全认证方法。CPAS方案将聚类和轻量级对称密码与物理层信道状态信息相结合，以在终端和边缘设备之间提供双向认证。通过利用物理层信道响应中的时间和空间唯一性，非加密物理层认证技术可以实现快速认证。轻量级对称密码在会话开始时启动用户认证以建立信任连接。基于理论分析，CPAS方案安全且简单，没有可信方，同时它还可以抵御小整数攻击、重放攻击和欺骗攻击。此外，实验结果表明，所提出的方案可以提高访问认证总成功率并降低数据帧丢失率，而认证延迟没有显著增加。
