A remote attestation method and system for software-defined Internet of Things nodes

Abstract

The invention discloses a software-defined Internet of Things node remote certification method and system. The method comprises the following steps: (1) a software-defined Internet of Things controller generates a random number, encrypts the random number and sends the encrypted random number to a node m; (2) the node m acquires information of a software package currently installed in the node m,and encrypts the information with the random number and the shared master key to serve as proof information; (3) the controller analyzes software package information when the node m is added into thesoftware-defined Internet of Things; (4) the controller combines and encrypts the software package information when the node m is added into the software-defined Internet of Things, the random numberand the shared master key in the same way as the node m in the step (2) to obtain standard information; and (5) comparing the proof information with the standard information. The system comprises a key management server and a software-defined Internet of Things controller. The software-defined Internet of Things node remote proving method provided by the invention can effectively verify the integrity state of the software-defined Internet of Things node.

Description

technical field [0001] The invention belongs to the technical field of Internet of Things security, and more specifically, relates to a remote certification method and system for software-defined Internet of Things nodes. Background technique [0002] The software-defined IoT is based on the software-defined network, inherits the network architecture of centralized control and separation of forwarding and control, and can flexibly realize the programmable IoT management mode. Referring to the southbound interface in software-defined networking, software-defined IoT can facilitate network communication between different IoT network protocols. Through the software-defined IoT controller, the software-defined IoT can efficiently manage each software-defined IoT node, thereby reducing the operation and maintenance cost of the entire IoT. Therefore, software-defined IoT has become the main form of current IoT deployment. [0003] However, in a software-defined Internet of Thing...

AI Technical Summary

Problems solved by technology

Patent application document CN103560887A discloses a remote attestation method and system suitable for intelligent terminals, patent application document CN103220300A discloses a mobile terminal system supporting dynamic remote attestation, and patent application document CN103179129A discloses a cloud-based IaaS environment The remote attestation method, the patent application document CN 101951388A discloses a remote attestation method in a trusted computing environment, but the network environment used by these remote attestation systems and methods is different from the software-defined Internet of Things network topology environment, and cannot be applied to software Define the Internet of Things

[0006] In summary, the existing remote attestation systems and methods do not consider the network topology of the software-defined Internet of Things, nor do they consider the changes in the network topology caused by adding new software-defined Internet of Things nodes or moving the original software-defined Internet of Things nodes. Therefore, it cannot be directly applied to software-defined IoT

Images