School of Computer and Communication, Lanzhou University of Technology, Lanzhou 730050, China.
Sensors (Basel). 2022 Sep 22;22(19):7191. doi: 10.3390/s22197191.
To solve the problem regarding the lack of a lightweight and secure authentication and key agreement protocol in the Constrained Application Protocol of the Internet of Things environment, we explore the security flaws and applicability problems in the current related research. Then, we propose a new lightweight authentication and key agreement protocol based on the CoAP framework. The scheme adopts shared secret and elliptic curve public key technology, which ensures the anonymity of the communicators and provides strong security and anti-attack capacity. In terms of security analysis, the Dolev-Yao Adversary model and a security model checking analysis method based on CPN Tools are improved, in order to verify the correctness and security of the proposed scheme. Compared with other schemes, regarding communication overhead, computational cost, and security, the proposed scheme provides a robust and comprehensive security guarantee, although it is not the lightest.
为了解决物联网环境中约束应用协议中缺乏轻量级和安全的认证和密钥协商协议的问题，我们探讨了当前相关研究中的安全漏洞和适用性问题。然后，我们提出了一种新的基于 CoAP 框架的轻量级认证和密钥协商协议。该方案采用共享秘密和椭圆曲线公钥技术，确保了通信者的匿名性，并提供了强大的安全性和抗攻击能力。在安全性分析方面，改进了 Dolev-Yao 攻击者模型和基于 CPN Tools 的安全模型检查分析方法，以验证所提出方案的正确性和安全性。与其他方案相比，在所提出的方案中，关于通信开销、计算成本和安全性，虽然不是最轻量级的，但提供了强大而全面的安全保障。
