Zhao Xingwen, Li Dexin, Li Hui
State Key Laboratory of Integrated Service Networks, Xidian University, Xi'an 710071, China.
School of Cyber Engineering, Xidian University, Xi'an 710000, China.
Sensors (Basel). 2022 Oct 3;22(19):7510. doi: 10.3390/s22197510.
Because the majority of information in the industrial Internet of things (IIoT) is transmitted over an open and insecure channel, it is indispensable to design practical and secure authentication and key agreement protocols. Considering the weak computational power of sensors, many scholars have designed lightweight authentication protocols that achieve limited security properties. Moreover, these existing protocols are mostly implemented in a single-gateway scenario, whereas the multigateway scenario is not considered. To deal with these problems, this paper presents a novel three-factor authentication and key agreement protocol based on elliptic curve cryptography for IIoT environments. Based on the elliptic curve Diffie-Hellman problem, we present a protocol achieving desirable forward and backward secrecy. The proposed protocol applies to single-gateway and is also extended to multigateway simultaneously. A formal security analysis is described to prove the security of the proposed scheme. Finally, the comparison results demonstrate that our protocol provides more security attributes at a relatively lower computational cost.
由于工业物联网（IIoT）中的大多数信息是通过开放且不安全的信道传输的，因此设计实用且安全的认证和密钥协商协议必不可少。考虑到传感器的计算能力较弱，许多学者设计了具有有限安全特性的轻量级认证协议。此外，这些现有协议大多是在单网关场景中实现的，而未考虑多网关场景。为了解决这些问题，本文提出了一种适用于IIoT环境的基于椭圆曲线密码学的新型三因素认证和密钥协商协议。基于椭圆曲线Diffie-Hellman问题，我们提出了一种实现理想的前向和后向保密性的协议。所提出的协议适用于单网关，同时也扩展到了多网关。描述了形式化安全分析以证明所提方案的安全性。最后，比较结果表明我们的协议以相对较低的计算成本提供了更多的安全属性。
