Lee Dae-Hwi, Lee Im-Yeong
Department of Computer Science and Engineering, Soonchunhyang University, Asan 31538, Korea.
Sensors (Basel). 2020 Sep 18;20(18):5350. doi: 10.3390/s20185350.
In the Internet of Things (IoT) environment, more types of devices than ever before are connected to the internet to provide IoT services. Smart devices are becoming more intelligent and improving performance, but there are devices with little computing power and low storage capacity. Devices with limited resources will have difficulty applying existing public key cryptography systems to provide security. Therefore, communication protocols for various kinds of participating devices should be applicable in the IoT environment, and these protocols should be lightened for resources-restricted devices. Security is an essential element in the IoT environment, so for secure communication, it is necessary to perform authentication between the communication objects and to generate the session key. In this paper, we propose two kinds of lightweight authentication and key agreement schemes to enable fast and secure authentication among the objects participating in the IoT environment. The first scheme is an authentication and key agreement scheme with limited resource devices that can use the elliptic curve Qu-Vanstone (ECQV) implicit certificate to quickly agree on the session key. The second scheme is also an authentication and key agreement scheme that can be used more securely, but slower than first scheme using certificateless public key cryptography (CL-PKC). In addition, we compare and analyze existing schemes and propose new schemes to improve security requirements that were not satisfactory.
在物联网（IoT）环境中，连接到互联网以提供物联网服务的设备类型比以往任何时候都更多。智能设备正变得越来越智能且性能不断提升，但也存在计算能力弱和存储容量低的设备。资源有限的设备在应用现有的公钥加密系统以提供安全性方面会存在困难。因此，适用于各种参与设备的通信协议应能在物联网环境中使用，并且这些协议应对资源受限设备进行轻量化处理。安全性是物联网环境中的一个基本要素，所以为了实现安全通信，有必要在通信对象之间进行认证并生成会话密钥。在本文中，我们提出了两种轻量级认证和密钥协商方案，以实现参与物联网环境的对象之间的快速且安全的认证。第一种方案是一种针对有限资源设备的认证和密钥协商方案，该方案可以使用椭圆曲线Qu-Vanstone（ECQV）隐式证书快速协商会话密钥。第二种方案也是一种认证和密钥协商方案，它可以更安全地使用，但比使用无证书公钥密码学（CL-PKC）的第一种方案速度慢。此外，我们对现有方案进行了比较和分析，并提出了新的方案以改进那些不尽人意的安全要求。
