MQTT protocol security communication method based on secret sharing algorithm

Abstract

The invention discloses an MQTT protocol secure communication method based on a secret sharing algorithm, and aims at a scene that a user and multiple devices in an MQTT protocol communicate through the same theme in the MQTT, a threshold encryption algorithm based on secret sharing is utilized to complete one-to-many group authentication, so that the devices are accessed securely, and the security of the MQTT protocol is improved. And finally, the sent message is encrypted to realize secure communication between the user and the equipment. According to the method, firstly, a user and an agent are subjected to one-to-one authentication, then group authentication of multiple devices and the agent is completed through secret sharing, the user, the multiple devices and a common theme which pass authentication are bound to establish a secure channel, and finally key negotiation is performed among the user, the devices and the theme to complete encryption of sent information. And thus, secure communication of the MQTT protocol is completed. The method provided by the invention can be applied to a one-to-many secure communication scene in the MQTT protocol.

Description

technical field [0001] The invention relates to the technical field of computer security, in particular to an MQTT protocol security communication method based on a secret sharing algorithm. Background technique [0002] Among the many IoT communication protocols, the MQTT (Message Queuing Telemetry Transport) protocol is the most popular. It was designed to provide a lightweight and easy-to-use communication protocol for IoT, so the protocol itself has only a few security mechanisms explicitly specified, and it lacks basic security-related features such as access control, mutual authentication, and control message security. In order to solve these problems, the current MQTT data transmission process can use the encrypted TLS protocol to protect the communication channel between the client and the agent. This method has several problems: (1) It cannot provide access login control, such as for agents and agents Medium and fine-grained topic security access control; (2) TLS's...

AI Technical Summary

Problems solved by technology

In order to solve these problems, the current MQTT data transmission process can use the encrypted TLS protocol to protect the communication channel between the client and the agent. There are several problems in this method: (1) cannot provide access login control, such as for the agent and the agent Medium and fine-grained topic security access control; (2) TLS has a large computational load, resulting in low efficiency, and is not suitable for secure information transmission in a large number of devices such as one-to-many scenarios

Images