面向智能家居的轻量型互认证协议

针对现有智能家居远程控制互认证协议不能兼顾效率与安全性的现状,提出一个面向智能家居的轻量型互认证协议,实现用户、网关与测控节点间的相互认证及密钥协商.协议基于USBkey和用户口令,采用挑战/应答机制,仅利用伪随机数及异或与哈希运算;在认证与协商阶段,通过单向哈希当前会话密钥获得可变共享密钥参与下一次认证,实现认证协议的一次一密,这种方法有助于提高协议的安全性及运行效率.最后,对比分析结果表明:本文协议有更高的安全性,且通过降低网关和节点的计算量、通信量及能源消耗,避免无线传感网的时间戳机制,实现了轻量型目标.

A Lightweight Mutual Authentication Protocol for Smart Home

Aiming at the state of not taking into account both efficiency and security of the existing mutual authenti-cation protocol used in remote control for smart home,a lightweight mutual authentication protocol for smart home is proposed to achieve mutual authentication and key agreement among users,gateway and nodes serving measure-ment and control operations. The proposed protocol does work based on USBkey and password by challenge/re-sponse mechanism,which only involves a pseudo-random number,lightweight XOR operation and hash transforma-tion. At the authentication and negotiation stage,the variable shared key characterized by one-time pad is achieved by one-way hash current session key and can be used in next authentication,this method is helpful to improve secu-rity and efficiency of the proposed protocol. Finally,the compared results show that the proposed protocol holds higher security and has realized the lightweight goal by saving computation,traffic and energy consumption of gate-way or nodes and avoiding the timestamp mechanism in wireless sensor network.