一种适用于物联网的群组接入认证协议

摘要

Wireless Local Area Network ( WLAN ) can be combined together with 3 G network to be the carrier of Internet of Things ( IoT ) . To solve the problem of security and group communication in recent access authentication schemes, this paper proposes a Secure and Efficient Group Access Authentication Protocol ( SEGAP ) . It sets up the equipment group in initialization and registration stage and accomplishes the secure access in authentication and key agreement stage. Compared with conventional EAP-AKA,this scheme guarantees stronger forward security by adopting Elliptic Curve Diffie-Hellman (ECDH),enables first equipment in group to acquire group authentication vector,this paper shares it with others who come later, and provides better authentication performance by realizing group access authentication. The analysis results illustrate that the protocol can reduce the cost of group communication and can be applied to the business of IoT very well.%无线局域网与3G网络互联可作为物联网业务的承载。针对现有接入认证方案中的安全和群组通信问题，提出一种基于可扩展身份验证协议认证框架的群组接入认证协议。在初始化和注册阶段完成设备群组的建立，在认证和密钥协商阶段实现设备的安全接入。与传统EAP-AKA协议相比，该协议采用基于椭圆曲线密码体制的Diffie-Hellman密钥交换协议以保证前向安全性，通过先到设备完成群认证向量的获取，并与后来者共享认证的方式，实现群组认证功能并提高认证效率。分析结果表明，该协议提供相互认证并能抵抗多种类型的攻击，有效减少了群组认证开销，可满足物联网的业务要求。