Lightweight identity authentication key negotiation method for resource-constrained terminal

Abstract

The invention discloses a lightweight identity authentication key agreement protocol for a resource-constrained terminal. According to the method, a set of identity authentication and session key agreement service is provided between a resource-constrained terminal and a server. The method can ensure that the identities of the resource-limited terminal and the server are real and effective, and malicious attacks are avoided. The scheme comprises four stages: a registration stage, a login and authentication stage, a password modification stage and an intelligent card revocation stage. According to the method, an elliptic curve algorithm is introduced to encrypt key data in a login authentication process. A one-way Hash algorithm is introduced in the protocol design process, the risk of data plaintext transmission leakage is avoided on the basis that the intelligent card and password double factors serve as important links of identity authentication, and security vulnerabilities such as intelligent card loss attacks and offline dictionary attacks are resisted. Compared with other key negotiation protocols, the protocol is small in key size, system parameters and storage space, high in operation speed and suitable for terminal equipment with limited computing resources and storage resources.

Description

technical field [0001] The invention relates to the field of information security, in particular to a lightweight identity authentication key negotiation method for resource-limited terminals. Background technique [0002] With the rapid development of IoT technology, the number of resource-constrained terminal devices has increased dramatically, such as smart watches, TVs, wearable devices, home security systems, driverless cars, and robots, which use and generate data all the time. exponential growth. Resource-constrained terminal devices have many limitations. On the one hand, compared with servers or computers, resource-constrained terminals have limitations in storage capacity, computing power, battery power, etc., and resource-constrained terminals are more mobile and hierarchical. It is complex, and multiple security domains coexist, so it is not suitable to deploy the original identity authentication key agreement protocol with high consumption to ensure secure comm...

AI Technical Summary

Problems solved by technology

However, for resource-constrained terminals, some original authentication schemes have certain limitations.

On the one hand, the high computational complexity is not conducive to resource-constrained terminals with weak computing capabilities

On the other hand, most of the original solutions have one or more vulnerability attacks such as smart card loss attack, offline dictionary attack, key disclosure attack, and lack of forward security, which is not conducive to resource-constrained terminals with high security requirements.

Images