T-NTRU物联网动态接入认证技术

doi:10.19665/j.issn1001-2400.2021.03.023

摘要/Abstract

摘要：

物联网终端安全接入认证是保证电力物联网大规模建设的关键性技术。传统认证方案通常采用的椭圆曲线密码算法,计算量大,不能抵抗量子攻击。数论研究单元算法可以抵抗量子攻击,与椭圆曲线密码采用点乘算法相比,计算速度快。因此提出了一种时间变换数论研究单元算法物联网动态安全接入认证算法,使用动态变化时间序列通过哈希函数产生动态密钥,解决了固定哈希函数产生固定密钥的内部攻击安全问题。分别在计算机和单片机上进行了实验。实验结果表明,与传统椭圆曲线密码计算相比较,时间变换数论研究单元算法减少了约97%计算量,与典型的数论研究单元算法计算量相当,适合资源受限的电力物联网应用需求。

关键词: 物联网, 数论研究单元算法, 安全认证

Abstract:

The secure access authentication of the Internet of the things terminal is the key technology to ensure the large-scale construction of the power Internet of things.The elliptic curve cryptography (ECC) algorithm is usually used in the transmission authentication scheme,and it requires a large amount of calculation.Furthermore it is proved that its security against quantum attacks is poor.The number theory research unit (NTRU) algorithm can resist quantum attacks,and its computational speed is faster than that of the ECC.This paper proposes a dynamic T-NTRU secure access authentication algorithm based on time information in the Internet of things.It uses the dynamic changing time series as the secret key of the hash function to solve the internal attack security problem caused by the fixed hash function.Experiments are carried out on the computer and single chip microcomputer,respectively.Experimental results show that compared with the traditional ECC calculation,the T-NTRU algorithm proposed in this paper reduces about 97% of the calculational amount,which is equivalent to the typical NTRU algorithm,and is suitable for the need of the resource constrained power IOT network application.

Key words: power iot network, number theory reseach unit, secure access protocol

中图分类号:

TP391

李兴华,蔡觉平,李晓龙,王峰,闫振华. T-NTRU物联网动态接入认证技术[J]. 西安电子科技大学学报, 2021, 48(3): 188-196.

LI Xinghua,CAI Jueping,LI Xiaolong,WANG Feng,YAN Zhenhua. T-NTRU IoT dynamic access authentication technology[J]. Journal of Xidian University, 2021, 48(3): 188-196.

图/表 8

表1

图1

图2

图3

图4

表2

表3

表4

参考文献 20

[1]	LIU X T, ZHANG T, HU N, et al. The Method of Internet of Things Access and Network Communication Based on MQTT[J]. Computer Communications, 2020,153:169-176. doi: 10.1016/j.comcom.2020.01.044
[2]	FRUSTACI M, PACE P, ALOI G, et al. Evaluating Critical Security Issues of the IoT World:Present and Future Challenges[J]. IEEE Internet of Things Journal, 2018,5(4):2483-2495. doi: 10.1109/JIoT.6488907
[3]	XIE Y, WU L B, KUMAR N, et al. Analysis and Improvement of a Privacy-Aware Handover Authentication Scheme for Wireless Network[J]. Wireless Personal Communications, 2017,93(2):523-541. doi: 10.1007/s11277-016-3352-3
[4]	HE D B, WANG D, XIE Q, et al. Anonymous Handover Authentication Protocol for Mobile Wireless Networks with Conditional Privacy Preservation[J]. Science in China Series F:Information Sciences, 2017,60(5):52104.
[5]	钦豪, 张勇军, 陈佳琦, 等. 泛在电力物联网发展形态与挑战[J], 电力系统自动化, 2020,44(1):13-22.
	QIN Hao, ZHANG Yongjun, CHEN Jiaqi, et al. Development Formsand Challenges of Ubiquitous Power Internet of Things[J]. Automation of Electric Power Systems, 2020,44(1):13-22.
[6]	王海峰, 李朝阳, 吕政, 等. 泛在电力物联网环境下网络安全攻击研究[J]. 浙江电力, 2019,38(12):76-81.
	WANG Haifeng, LI Chaoyang, LV Zheng, et al. Researchon Network Security Attack in Ubiquitous Power Internet of Things[J]. ZheJiang Electric Power, 2019,38(12):76-81.
[7]	SHOR P W. Polynomial-Time Algorithms for Prime Factorization and Discrete Logarithms on a Quantum Computer[J]. SIAM Review, 1999,41(2):303-332. doi: 10.1137/S0036144598347011
[8]	XIE Y, WU L, KUMAR N, et al. Analysis and Improvement of a Privacy-Aware Handover Authentication Scheme for Wireless Network[J]. Wireless Personal Communications, 2017,93(2):523-541. doi: 10.1007/s11277-016-3352-3
[9]	DING XJ, DING F, CHEN X S, et al. Security-Reliability Tradeoff for Multi-Terminal Multi-Mode Coexisting Systems in the Presence of Multiple Eavesdroppers[J]. IET Communications, 2020,14(8):1221-1227. doi: 10.1049/cmu2.v14.8
[10]	HOFFSTEIN J, PIPHER J, SILVERMAN J H. NTRU:a Ring-Based Public Key Cryptosystem[C]// Proceedings of the 3rd International Symposium on Algorithmic Number Theory.Heidelberg:Springer, 1998: 267-288.
[11]	CHEN R, PENG D Z. A Novel NTRU-Based Handover Authentication Scheme for Wireless Networks[J]. IEEE Communications Letters, 2018,22(3):586-589. doi: 10.1109/LCOMM.2017.2786228
[12]	HARN L, LIN C L. Authenticated Group Key Transfer Protocol Based on Secret Sharing[J]. IEEE Transactions on Computers, 2010,59(6):842-846. doi: 10.1109/TC.2010.40
[13]	WANG Q X, CHENG C, ZUO L. Analysis and Improvement of a NTRU-Based Handover Authentication Scheme[J]. IEEE Communications Letters, 2019,23(10):1692-1695. doi: 10.1109/COML.4234
[14]	GORBENKO I D. Analysis,Assessment and Proposals Regarding the Method for Generation of System Parameters in NTRU-Like Asymmetric Systems[J]. Telecommunications and Radio Engineering, 2017,76(6):511-520. doi: 10.1615/TelecomRadEng.v76.i6
[15]	喻小宝, 谭忠富, 屈高强. 基于能源互联网的电力商业模式及关键技术研究[J]. 智慧电力, 2019,47(2):9-14.
	YU Xiaobao, TAN Zhongfu, QU Gaoqiang. Researchon Power Business Model and Key Technologies Based on Energy Internet[J]. Smart Power, 2019,47(2):9-14.
[16]	谢忠良, 江凌云. 一种基于NTRU算法的物联网设备接入认证方案[J]. 南京邮电大学学报, 2019,39(3):98-103.
	XIE Zhongliang, JIANG Lingyun. An Internetof Things Access Authentication Scheme Based on NTRU Algorithm[J]. Journal of Nanjing University of Post and Telecommunications, 2019,39(3):98-103.
[17]	CHANG C C, WU H L, SUN C Y. Notes on Secure Authentication Scheme for IoT and Cloud Servers[J]. Pervasive and Mobile Computing, 2017,38:275-278. doi: 10.1016/j.pmcj.2015.12.003
[18]	LoRa Alliance.LoRa WAN Sepcification:LoRa WAN^TM Sepecification 3[S/OL]. [2020-10-03]. https://www.lora-alliance.org/lor-awan-for-developers.
[19]	WANG Y P E, LIN X Q, ADHIKARY A, et al. A Primer on 3GPP Narrowband Internet of Things[J]. IEEE Communications Magazine, 2017,55(3):117-123.
[20]	3GPP Technical Specification Group. Revised WID for Furter Enhancal MTC for LTE:3GPP RP-161464[S/OL]. [2020-10-03]. http://www.3gpp.org,accessed Apr.30,2017.

安全级别	参数集
112 bit 对称密码系统(“商业强度”)	NTRU_EES401EP2
128 bit 对称密码系统(“工业强度”)	NTRU_EES439EP1
192 bit 对称密码系统	NTRU_EES593EP1
256 bit 对称密码系统(“军事强度”)	NTRU_EES743EP1

方案	物联网终端计算时间	边缘计算服务器计算时间	总执行时间
ECC^[17]	5T_P=873.51	5T_P=12.24	855.75
NTRU^[16]	4T_E+2T_D=147.44	2T_E+4T_D=2.97	150.41
NTRU^[11]	T_E+T_MUL=24.06	T_D+T_MUL=0.72	24.78
T-NTRU	T_E+T_MUL+T_H=24.86	T_D+T_MUL+T_H=0.73	25.59

方案	物联网终端计算时间	边缘计算服务器计算时间	总执行时间
ECC^[17]	5T_P=25.43	5T_P=12.24	37.67
NTRU^[16]	4T_E+2T_D=7.56	2T_E+4T_D=2.97	10.53
NTRU^[11]	T_E+T_MUL=1.83	T_D+T_MUL=0.72	2.55
T-NTRU	T_E+T_MUL+T_H=1.84	T_D+T_MUL+T_H=0.73	2.57

技术标准	最小时间	最大时间	平均时间
NB-IoT	4.73	19.45	8.73
LoRa	1.45	6.34	4.25
eMTC	0.45	1.21	0.53