IoT P2P Method and apparatus for Providing Security Service of Peer to Peer Data in Internet of Things

摘要

Disclosed are a method and an apparatus for providing a peer-to-peer (P2P) data security service in an Internet of things (IoT) environment. According to the present invention, the method for providing a P2P data security service between devices in an IoT platform connected to a plurality of devices through a network comprises: a step of authenticating a first device by using a certificate and a unique key of the first device; a step of forming a security channel through exchange of an end-to-end (E2E) session key and allocating a group ID and a group key to the first device, when authentication is completed; and a step of allocating the group ID and the group key to a second device requested by the first device. According to the present invention, it is possible to maintain P2P data security in the IoT environment with a simple method by introducing the concept of a group key to a device which is authenticated by an authentication server.