Method and system for certificateless m2m privacy protection and key management

Abstract

The invention discloses a method and system for M2M privacy protection and key management based on no certificate. In the method, different terminal devices send their identity information to the service platform, and use their system private key, initial value and identity information to generate the terminal device's identity information. The private key and dynamic factor are stored and returned; the terminal device selects a random value to generate the public-private key pair of the terminal device; when different terminal devices request to communicate, the requesting terminal device according to its random value, identity information and dynamic factors to generate an anonymous message and send it to the requested party; the requested party receives the anonymous message and verifies the public key of the requesting party with the system public key. If the verification is successful, the requested party uses its private key and the anonymous message Negotiate the session key of the two parties and process the session between the two parties; if the verification fails, the communication request is rejected. The invention solves the problems of energy consumption for maintaining certificates, easy leakage of various private information, and key security problems of the whole mechanism.

Description

technical field [0001] The present invention relates to the field of information security, in particular to a certificate-less M2M (Machine to Machine, machine-to-machine communication) privacy protection and key management method and system. Background technique [0002] At present, with the acceleration of the construction of the Internet of Things, various Internet of Things services (such as smart medical care, smart transportation, home furnishing, military, etc.) have gradually entered people's lives. [0003] Because the Internet of Things has the characteristics of compatibility in network technology types and unlimited expansion in business scope, security issues have become an important factor restricting its development. [0004] On the one hand, when national data and personal information are connected to the Internet of Things, more personal privacy information may be illegally obtained at any time and anywhere; [0005] On the other hand, since the country's i...

AI Technical Summary

Problems solved by technology

[0012] The main purpose of the present invention is to provide a method and system based on certificate-free M2M privacy protection and key management, so as to solve the problem of energy consumption for maintaining certificates due to the limited capabilities of MTC terminal devices in the Internet of Things. People are on duty, all kinds of private information are easy to leak, key escrow exists in the existing identity-based key management mechanism, the key cannot be updated by itself, and the key security of the entire mechanism

Images