Chebyshev polynomial-based multi-party authentication method and system for internet of things

Abstract

The application discloses a Chebyshev polynomial-based multi-party authentication method and system for Internet of Things, and the authentication method comprises the following steps: step S1: constructing a Chebyshev polynomial T s (x), wherein s is a random number, generating a user authentication token {TID, SID, L1, L2, T s (x), TS1} and sending the token to a gateway node; step S2: authenticating the user authentication token at the gateway node, if the authentication is successful, generating a time stamp TS2, generating a gateway authentication token {L4, L5, T s (x), TS2} and sending the token to an Internet of Things device; step S3: authenticating the gateway authentication token at the Internet of Things device, if the authentication is successful, generating a time stamp TS3; substituting the Chebyshev polynomial T s (x) into a Chebyshev generating function L6=T u (x), obtaining a Chebyshev calculation result T u (T s (x)); generating an Internet of Things device authentication token {L6, L7, L8, TS3} and sending the token to a user; and step S4: authenticating the Internet of Things device authentication token at the user end, if the authentication is successful, authorizing the user end and the Internet of Things device to communicate.

Description

Technical Field

[0001] This invention relates to the field of computers, specifically to a method and system for multi-party authentication of the Internet of Things based on Chebyshev polynomials. Background Technology

[0002] With the rapid development of internet technology, people's demand for information and data is constantly increasing. The internet has become one of the main ways for people to obtain information and achieve connectivity. The Internet of Things (IoT) is an extension of internet technology, enabling the interconnection of physical devices to achieve information and data sharing. IoT devices refer to various physical devices connected to the internet. These devices have functions such as sensors, actuators, and processors, and can collect and exchange data to achieve functions such as automation, remote control, and monitoring. IoT devices can be widely used in smart homes, smart cities, industrial control, healthcare, agriculture, and other fields.

[0003] As the data and functions involved in IoT devices become increasingly important, security issues are receiving growing attention. Therefore, IoT device certification has become a crucial means of ensuring their security. Certification verifies the legitimacy of IoT devices, preventing unauthorized devices from accessing the network and thus improving device security. Certification also ensures the accuracy of data sources for IoT devices, effectively preventing data tampering or malicious attacks, and improving data credibility and accuracy.

[0004] Existing authentication methods commonly use user identifiers and passwords as authentication factors. However, user identifiers and keys are vulnerable to dictionary attacks, which could allow unauthorized users to easily join IoT networks, steal valuable information, and send commands to IoT devices.

[0005] Existing IoT devices are popular due to their portability and ease of deployment, which limits their computing power. Among existing authentication methods, elliptic curve authentication can effectively protect IoT privacy and security. However, the computational overhead of elliptic curve authentication is prohibitive for easily deployed IoT devices. Summary of the Invention

[0006] The purpose of this invention is to address the problems existing in the prior art by providing an IoT multi-party authentication method and system based on Chebyshev polynomials, thereby solving at least one of the aforementioned technical problems.

[0007] Based on one aspect of this invention, an IoT multi-party authentication method based on Chebyshev polynomials is provided, comprising the following steps:

[0008] Step S1: Obtain the user's pseudo-identity TID and the accessed IoT device's pseudo-identity number SID, and generate a timestamp TS1; construct the Chebyshev polynomial T.s (x), where s is a random number, generates a user authentication token {TID, SID, L1, L2, T s (x),TS1}, where L1 and L2 are user authentication token parameters, and the user authentication token is sent to the gateway node;

[0009] Step S2: Authenticate the user authentication token on the gateway node. If the authentication is successful, generate a timestamp TS2 and a gateway authentication token {L4, L5, T}. s (x),TS2}, where L4 and L5 are gateway authentication token parameters; send the gateway authentication token to the IoT device;

[0010] Step S3: Authenticate the gateway authentication token on the IoT device. If authentication is successful, generate a timestamp TS3; convert the Chebyshev polynomial T... s (x) Substitute into the Chebyshev generating function L6 = T u In (x), Chebyshev's calculation result T is obtained. u (T s (x)); Based on Chebyshev's calculation results T u (T s (x) Generate the session key sk and IoT device authentication token parameters L7 and L8 between the user and the IoT device, generate the IoT device authentication token {L6,L7,L8,TS3} and send it to the user;

[0011] Step S4: Authenticate the IoT device authentication token on the user terminal. If the authentication is successful, communication between the user terminal and the IoT device is authorized. If the authentication fails, communication between the user terminal and the IoT device is prohibited.

[0012] In the above technical solution, after a user logs into the IoT system, a user authentication token is constructed based on Chebyshev polynomials. The user authentication token is then authenticated at the gateway node. After successful authentication, a gateway authentication token is generated and sent to the accessed IoT device. The gateway authentication token is then authenticated on the IoT device. After successful authentication, an IoT device authentication token is generated and sent to the user for authentication. Once authentication is successful, the user is authorized to communicate with the IoT device.

[0013] The method of this invention enables mutual authentication between the user terminal, gateway node, and IoT devices. In complex IoT networks, the successful joining of unauthorized users can lead to privacy breaches and introduce unknown dangers. Therefore, user authentication is an effective method for verifying user legitimacy. Through user authentication, only authorized users can access and operate devices and data, thereby ensuring the security and privacy protection of the IoT.

[0014] Furthermore, prior to step S1, user registration is also included, which includes:

[0015] Step 1: Set the user identifier (ID) and password (PW), implant the biometric identifier (BIO), and calculate:

[0016] Gen(BIO)→(σ,τ)

[0017] RPW = h(PW||σ||p)

[0018] Where: h(·) is the anti-collision hash function, Gen(·) is the biometric feature fuzzy extraction generation function, σ is the feature parameter, τ is the auxiliary parameter for recovering the feature parameter; p is a random number;

[0019] Will Send to the gateway node, where This is the XOR operator, where n is a random number.

[0020] Step 2: Randomly select a pseudo-identity TID on the gateway node and calculate:

[0021]

[0022] In the formula: X GWN The identity credentials generated by the gateway node for the user;

[0023] Generate a smart card SC = {x, TID, G, h(·)} and send it to the user, where x is a random number;

[0024] Step 3: Perform the following calculations on the user's end:

[0025]

[0026] V = h(ID||σ||PW)

[0027]

[0028] N, V, and G1 are embedded in the smart card.

[0029] Furthermore, the feature is that after user registration, user login is also included, and the user login specifically includes:

[0030] Implant the smart card and input the ID, PW, and BIO;

[0031] The login device calculates σ = Rep(BIO,τ) and V. * = h(ID||σ||PW), where Rep(·) is the biometric feature fuzzy extraction recovery function;

[0032] Determine V *Is it equal to V? If so, then login is allowed.

[0033] Verifying user legitimacy during the login process prevents unauthorized users from accessing the IoT system and ensures the security of the IoT system.

[0034] Furthermore, the calculation formulas for the user authentication token parameters L1 and L2 are as follows:

[0035]

[0036]

[0037] L2 = h(L1||TS1||L0||TID||r)

[0038] In the formula: r is a random number.

[0039] Further, in step S2, the gateway node authenticates the user authentication token, which includes:

[0040] Step S201: Obtain the time TS'1 when the gateway node receives the user authentication token, and determine whether |TS'1-TS1| is less than or equal to the time threshold. If so, proceed to step S202.

[0041] Step S202: Extract L * =h(ID||X GWN ), calculate r * =L1L * And further calculations:

[0042]

[0043] Step S303: Determine Check if it is equal to L2. If it is equal, the authentication is successful.

[0044] Furthermore, the calculation formulas for the gateway authentication token parameters L4 and L5 are as follows:

[0045]

[0046] L5=h(L AN ||TS2||TID||r GWN ||AN)

[0047] in:

[0048] L AN =h(AN||X TP-AN )

[0049] In the formula: r GWN Let X be a random number, AN be the pseudo-identity number of the IoT device, and X be a random number. TP-ANIt serves as the identity credential for IoT devices.

[0050] Furthermore, the authentication gateway authentication token in step S3 includes:

[0051] Step S301: Obtain the time TS'2 when the IoT device receives the gateway authentication token, and determine whether |TS'2-TS2| is less than or equal to the time threshold. If so, proceed to step S302.

[0052] Step S302: Calculation

[0053]

[0054] in:

[0055] Step S303: Determine Is it equivalent to L5? If so, the authentication is successful.

[0056] Furthermore, the calculation method for the IoT device authentication token parameters L7 and L8 is as follows:

[0057]

[0058] L8=h(sk||TS3||T u (T s (x))||v)

[0059] in:

[0060] sk = h(ID||SD||L6||T) u (T s (x))||TS3||v)

[0061] In the formula: v and u are random numbers generated by the IoT device.

[0062] Furthermore, the authentication token for the IoT device in step S4 includes:

[0063] Step S401: Obtain the time TS'3 when the user receives the IoT device authentication token, and determine whether |TS'3-TS3| is less than or equal to the time threshold. If so, proceed to step S402.

[0064] Step S402: Calculate T s (T u (x)), and based on T s (T u (x) is calculated to obtain v * :

[0065]

[0066] Based on v * Calculate sk * :

[0067] sk * =h(ID||SD||L6||T s (T u (x))||TS3||v * ;

[0068] Calculated

[0069] Step S403: Determine the equation If the condition is met, the authentication is successful.

[0070] According to another aspect of this invention, an IoT multi-party authentication system based on Chebyshev polynomials is provided, comprising:

[0071] User authentication token generation module: used to generate user authentication tokens;

[0072] First authentication module: used to authenticate user authentication tokens;

[0073] Gateway authentication token generation module: used to generate gateway authentication tokens;

[0074] Second authentication module: used to authenticate gateway authentication tokens;

[0075] IoT Device Authentication Token Generation Module: Used to generate IoT device authentication tokens;

[0076] The third authentication module: used to authenticate IoT device authentication tokens;

[0077] Authorization module: Used to authorize or prohibit communication between the user terminal and IoT devices.

[0078] In the above technical solution, corresponding authentication tokens are generated through various token generation modules, and the generated authentication tokens are authenticated based on the authentication module. Only when all authentications are successful can the authorized user terminal and IoT devices communicate. This system implements multi-party authentication, ensuring the security of IoT devices and communication.

[0079] Compared with the prior art, the beneficial effects of the present invention are:

[0080] (1) This invention provides a multi-party authentication method for the Internet of Things (IoT) based on Chebyshev polynomials. After a user logs into the IoT system, a user authentication token is constructed based on Chebyshev polynomials. The user authentication token is then authenticated at the gateway node. Upon successful authentication, a gateway authentication token is generated and sent to the accessed IoT device. The gateway authentication token is then authenticated on the IoT device. Upon successful authentication, an IoT device authentication token is generated and sent to the user for authentication. Once authentication is successful, the user and the IoT device are authorized to communicate. This invention enables mutual authentication between the user, the gateway node, and the IoT device. In complex IoT networks, the successful joining of unauthorized users can lead to privacy leaks and unknown dangers. Therefore, user authentication is an effective method for verifying user legitimacy. Through user authentication, only authorized users can access and operate devices and data, thereby ensuring the security and privacy protection of the IoT.

[0081] (2) The authentication method of this invention is based on Chebyshev polynomial authentication protocols, providing high security. These protocols utilize strong techniques in cryptography to protect devices and communications from attacks, thereby protecting data and privacy in IoT systems. Chebyshev polynomial-based authentication protocols are generally more efficient than other protocols because they use mathematical optimization techniques to reduce communication and computational loads, thus improving the performance of IoT systems. Chebyshev polynomial-based authentication protocols can be easily scaled to larger systems and more devices. These protocols can support large-scale IoT systems, and devices can be added or removed as needed.

[0082] (3) This invention provides an IoT multi-party authentication system based on Chebyshev polynomials. Each token generation module generates a corresponding authentication token, and the authentication module authenticates the generated tokens. When all authentications pass, the authorized user terminal and IoT device can communicate. This system implements multi-party authentication, ensuring the security of IoT devices and communication. Attached Figure Description

[0083] Figure 1 This is a flowchart of a method according to an embodiment of the present invention;

[0084] Figure 2 This is a schematic diagram of the user registration communication process according to an embodiment of the present invention;

[0085] Figure 3 This is a schematic diagram of the multi-party authentication communication process according to an embodiment of the present invention;

[0086] Figure 4 This is a schematic diagram of the system structure according to an embodiment of the present invention. Detailed Implementation

[0087] The technical solution of the present invention will now be clearly and completely described with reference to the accompanying drawings. Obviously, the described embodiments are merely some embodiments of the present invention, and not all embodiments. Based on the embodiments of the present invention, all other embodiments obtained by those skilled in the art without creative effort are within the scope of protection of the present invention.

[0088] like Figure 1 As shown, this embodiment provides an IoT multi-party authentication method based on Chebyshev polynomials, including the following steps:

[0089] (1) Preprocessing:

[0090] In this invention, preprocessing is the initialization of system parameters and only needs to be performed once. During this stage, the gateway node generates a pseudo-identity number AN for each IoT device. j (j is the IoT device ID) and an identity credential X TP -AN j The gateway node selects a collision-resistant hash function h(·) and a random number x as public parameters and makes them public.

[0091] (2) User registration:

[0092] Step 1: Set User Identifier ID i (i represents user U) i (Number) and password PW i And implanted biometric BIO i And calculate:

[0093] Gen(BIO i )→(σ i ,τ i )

[0094] RPW i =h(PW i ||σ i ||p i )

[0095] Where: h(·) is the collision-resistant hash function, Gen(·) is the biometric feature fuzzy extraction generator function, and σ i For user U i The characteristic parameter, τ i For user U i Auxiliary parameters for the recovery characteristic parameters; p i The result is a random number generated by user U. i Obtained by random selection;

[0096] Will It is sent to the gateway node GWN via a secure channel, where The XOR operator, n i For user U i A randomly selected number;

[0097] Step 2: On the gateway node GWN, for user U i Randomly select a pseudo-identity TID i And calculate:

[0098]

[0099] In the formula: For the gateway node for user U i The generated identity credentials;

[0100] Generate smart card SC i ={x,TID i G i ,h(·)} and send it to the user, where x is a random number;

[0101] Step 3: Perform the following calculations on the user's end:

[0102]

[0103] V i =h(ID) i ||σ i ||PW i )

[0104]

[0105] N i V i And G1 is embedded in the smart card.

[0106] (3) User Login:

[0107] The user inserts a smart card using a card reader and enters their ID. i PW i and reading biometrics BIO i ;

[0108] Login device calculates σ i =Rep(BIO i ,τ i ), Where Rep(·) is the recovery function for fuzzy extraction of biological features.

[0109] Login device passes inspection Check if the condition is met. If it is met, the logged-in user is a legitimate user; otherwise, the login fails.

[0110] (4) Multi-party authentication:

[0111] Step S1: Obtain user U i TID (Telematic Identity) i And the accessed IoT device AN j Fake ID SID j Generate a timestamp TS1; construct the Chebyshev polynomial T. s (x), where s is a random number, generates the user authentication token {TID}. i SID j ,L1,L2,T s (x),TS1}, where L1 and L2 are user authentication token parameters, and the user authentication token is sent to the gateway node;

[0112] The calculation formulas for the user authentication token parameters L1 and L2 are as follows:

[0113]

[0114]

[0115] L2=h(L1||TS1||L0||TID i ||r i )

[0116] In the formula: r i For user U i A number selected randomly.

[0117] Step S2: Authenticate the user authentication token on the gateway node. If the authentication is successful, generate a timestamp TS2 and a gateway authentication token {L4, L5, T}. s (x),TS2}, where L4 and L5 are gateway authentication token parameters; the gateway authentication token is sent to the IoT device.

[0118] Gateway node authentication user authentication tokens include:

[0119] Step S201: Obtain the time TS'1 when the gateway node receives the user authentication token, and determine whether |TS'1-TS1| is less than or equal to the time threshold (i.e., whether |TS'1-TS1|≤Δt holds true, where Δt is the time threshold). If yes, proceed to step S202.

[0120] Step S202: Extraction calculate And further calculations:

[0121]

[0122] Step S303: Determine Check if it is equal to L2. If it is equal, the authentication is successful.

[0123] The calculation formulas for the gateway authentication token parameters L4 and L5 are as follows:

[0124]

[0125]

[0126] in:

[0127] In the formula: r GWN AN is a number randomly generated for the gateway node. j For IoT devices, a pseudo-identity number It serves as the identity credential for IoT devices.

[0128] Step S3: Authenticate the gateway authentication token on the IoT device. If authentication is successful, generate a timestamp TS3; convert the Chebyshev polynomial T... s (x) Substitute into the Chebyshev generating function L6 = T u In (x), Chebyshev's calculation result T is obtained. u (T s (x)); Based on Chebyshev's calculation results T u (T s (x) Generate the session key sk and IoT device authentication token parameters L7 and L8 between the user and the IoT device, generate the IoT device authentication token {L6,L7,L8,TS3} and send it to the user.

[0129] The authentication gateway authentication token in step S3 includes:

[0130] Step S301: Obtain the time TS'2 when the IoT device receives the gateway authentication token, and determine whether |TS'2-TS2| is less than or equal to the time threshold (i.e., whether |TS'2-TS2|≤Δt holds true, where Δt is the time threshold). If yes, proceed to step S302.

[0131] Step S302: Calculation

[0132]

[0133] in:

[0134] Step S303: Determine Is it equivalent to L5? If so, the authentication is successful.

[0135] The calculation method for the IoT device authentication token parameters L7 and L8 is as follows:

[0136]

[0137] L8=h(sk||TS3||Tu(x)||T u (T s (x))||v)

[0138] in:

[0139] sk = h(ID) i ||AN j ||L6||T u (T s (x))||TS3||v)

[0140] In the formula: v and u are random numbers generated by the IoT device.

[0141] Step S4: Authenticate the IoT device authentication token on the user terminal. If the authentication is successful, communication between the user terminal and the IoT device is authorized. If the authentication fails, communication between the user terminal and the IoT device is prohibited.

[0142] The authentication token for authenticating IoT devices in step S4 includes:

[0143] Step S401: Obtain the time TS'3 when the user receives the IoT device authentication token, and determine whether |TS'3-TS3| is less than or equal to the time threshold (i.e., whether |TS'3-TS3|≤Δt holds true, where Δt is the time threshold). If yes, proceed to step S402.

[0144] Step S402: Calculate T s (T u (x)), and based on T s (T u (x) is calculated to obtain v * :

[0145]

[0146] Based on v * Calculate sk * :

[0147] sk * =h(ID) i ||AN j ||L6||T s (T u (x))||TS3||v * ;

[0148] Calculated

[0149] Step S403: Determine the equation If the authentication is successful, the user is authorized to communicate with the IoT device. Simultaneously, set sk = sk. * This allows IoT devices and users to generate the same session key, improving secure communication between users and IoT devices.

[0150] like Figure 4 As shown, this embodiment also provides an IoT multi-party authentication system based on Chebyshev polynomials, which implements the steps of the IoT multi-party authentication method based on Chebyshev polynomials, including:

[0151] User authentication token generation module: used to generate user authentication tokens;

[0152] First authentication module: used to authenticate user authentication tokens;

[0153] Gateway authentication token generation module: used to generate gateway authentication tokens;

[0154] Second authentication module: used to authenticate gateway authentication tokens;

[0155] IoT Device Authentication Token Generation Module: Used to generate IoT device authentication tokens;

[0156] The third authentication module: used to authenticate IoT device authentication tokens;

[0157] Authorization module: Used to authorize or prohibit communication between the user terminal and IoT devices.

[0158] Specifically, the user authentication token generation module is used to complete the following process:

[0159] Get user U i TID (Telematic Identity) i And the accessed IoT device AN j Fake ID SID j Generate a timestamp TS1; construct the Chebyshev polynomial T. s (x), where s is a random number, generates the user authentication token {TID}. i SID j ,L1,L2,T s (x),TS1}, and send the user authentication token to the gateway node.

[0160] Specifically, the first authentication module is used to complete the following process:

[0161] Obtain the time TS'1 when the gateway node receives the user authentication token, and determine whether |TS'1-TS1| is less than or equal to the time threshold (i.e., whether |TS'1-TS1|≤Δt holds true, where Δt is the time threshold). If yes, proceed to step S202.

[0162] Extract L * =h(ID) i ||X GWN- U i ),calculate And further calculations:

[0163]

[0164] judge Check if it is equal to L2. If it is equal, the authentication is successful.

[0165] The calculation formulas for the gateway authentication token parameters L4 and L5 are as follows:

[0166]

[0167]

[0168] in:

[0169] In the formula: r GWN AN is a number randomly generated for the gateway node. j For IoT devices, a pseudo-identity number It serves as the identity credential for IoT devices.

[0170] Specifically, the gateway authentication token generation module is used to complete the following process:

[0171] Generate timestamp TS2 and generate gateway authentication token {L4,L5,T}. s (x),TS2}, and will send the gateway authentication token to the IoT device.

[0172] Calculate L4 and L5:

[0173]

[0174]

[0175] Specifically, the second authentication module is used to complete the following process:

[0176] Obtain the time TS'2 when the IoT device receives the gateway authentication token, and determine whether |TS'2-TS2| is less than or equal to the time threshold (i.e., whether |TS'2-TS2|≤Δt holds true, where Δt is the time threshold). If yes, proceed to step S302.

[0177] calculate

[0178]

[0179] in:

[0180] judge Is it equivalent to L5? If so, the authentication is successful.

[0181] Specifically, the IoT device authentication token generation module is used to complete the following process:

[0182] Generate timestamp TS3; convert Chebyshev polynomial T s (x) Substitute into the Chebyshev generating function L6 = T u In (x), Chebyshev's calculation result T is obtained. u (T s (x)); Based on Chebyshev's calculation results T u (T s (x) Generate the session key sk and IoT device authentication token parameters L7 and L8 between the user and the IoT device, generate the IoT device authentication token {L6,L7,L8,TS3} and send it to the user.

[0183] Specifically, the third authentication module is used to complete the following process:

[0184] Obtain the time TS'3 when the user receives the IoT device authentication token, and determine whether |TS'3-TS3| is less than or equal to the time threshold (i.e., whether |TS'3-TS3|≤Δt holds true, where Δt is the time threshold). If yes, proceed to step S402.

[0185] Calculate T s (T u (x)), and based on T s (T u (x) is calculated to obtain v * :

[0186]

[0187] Based on v * Calculate sk * :

[0188] sk * =h(ID) i ||AN j ||L6||T s (T u (x))||TS3||v * ;

[0189] Calculated

[0190] Judgment Equation If the condition is met, the authentication is successful.

[0191] As a preferred embodiment, the authentication system further includes:

[0192] The preprocessing module is used to implement the following processes:

[0193] The gateway node generates a pseudo-identity number AN for each IoT device. j (j is the IoT device ID) and an identity credential. The gateway node selects a collision-resistant hash function h(·) and a random number x as public parameters and makes them public.

[0194] The user registration module is used to implement the following processes:

[0195] Step 1: Set User Identifier ID i (i represents user U) i (Number) and password PW i And implanted biometric BIO i And calculate:

[0196] Gen(BIO i )→(σ i ,τ i )

[0197] RPW i =h(PW i ||σ i ||p i )

[0198] Where: h(·) is the collision-resistant hash function, Gen(·) is the biometric feature fuzzy extraction generator function, and σ i For user U i The characteristic parameter, τ i For user U i Auxiliary parameters for the recovery characteristic parameters; p i The result is a random number generated by user U. i Obtained by random selection;

[0199] Will It is sent to the gateway node GWN via a secure channel, where The XOR operator, n i For user U i A randomly selected number;

[0200] Step 2: On the gateway node GWN, for user U i Randomly select a pseudo-identity TID i And calculate:

[0201]

[0202] In the formula: For the gateway node for user U i The generated identity credentials;

[0203] Generate smart card SC i ={x,TID i G i ,h(·)} and send it to the user, where x is a random number;

[0204] Step 3: Perform the following calculations on the user's end:

[0205]

[0206] V i =h(ID) i ||σ i ||PW i )

[0207]

[0208] N i V i And G1 is embedded in the smart card.

[0209] The user login module is used to implement the following processes:

[0210] The user inserts a smart card using a card reader and enters their ID. i PW i and reading biometrics BIO i ;

[0211] Login device calculates σ i =Rep(BIO i ,τ i ), Where Rep(·) is the recovery function for fuzzy extraction of biological features.

[0212] Login device passes inspection Check if the condition is met. If it is met, the logged-in user is a legitimate user; otherwise, the login fails.

[0213] Although embodiments of the invention have been shown and described, it will be understood by those skilled in the art that various changes, modifications, substitutions and alterations can be made to these embodiments without departing from the principles and spirit of the invention, the scope of which is defined by the appended claims and their equivalents.

Claims

1. A multi-party authentication method for the Internet of Things based on Chebyshev polynomials, characterized in that, Includes the following steps: Step S1: Obtain the user's pseudo-identity identifier (TID) and the pseudo-identity number of the accessed IoT device. And generate a timestamp TS1; construct the Chebyshev polynomial T s (x), where s is a random number, generates the user authentication token {TID, ,L1,L2,T s (x),TS1}, where L1 and L2 are user authentication token parameters, and the user authentication token is sent to the gateway node; wherein, before step S1, user registration is also included, and user registration includes: Step 1: Set the user identifier (ID) and password (PW), implant the biometric identifier (BIO), and calculate: in: For collision-resistant hash functions, ( ) is the generator function for fuzzy extraction of biometric features. For characteristic parameters, Auxiliary parameters for recovering feature parameters; p is a random number; {ID, RPW n} is sent to the gateway node, where This is the XOR operator, where n is a random number. Step 2: Randomly select a pseudo-identity TID on the gateway node and calculate: In the formula: The identity credentials generated by the gateway node for the user; Generate a smart card SC={x,TID,G,h(·)} and send it to the user, where x is a random number; Step 3: Perform the following calculations on the user's end: Incorporate N, V, and G1 into the smart card; Step S2: Authenticate the user authentication token on the gateway node. If the authentication is successful, generate a timestamp TS2 and a gateway authentication token {L4, L5, T}. s (x),TS2}, where L4 and L5 are gateway authentication token parameters; send the gateway authentication token to the IoT device; Step S3: Authenticate the gateway authentication token on the IoT device. If authentication is successful, generate a timestamp TS3; convert the Chebyshev polynomial T... s (x) Substitute into the Chebyshev generating function L6=T u In (x), we obtain Chebyshev's calculation results. Based on Chebyshev's calculations Generate the session key sk between the user and the IoT device and the IoT device authentication token parameters L7 and L8, generate the IoT device authentication token {L6,L7,L8,TS3} and send it to the user; Step S4: Authenticate the IoT device authentication token on the user terminal. If the authentication is successful, communication between the user terminal and the IoT device is authorized. If the authentication fails, communication between the user terminal and the IoT device is prohibited.

2. The IoT multi-party authentication method based on Chebyshev polynomials according to claim 1, characterized in that, Following user registration is user login, which specifically includes: Implant the smart card and input the ID, PW, and BIO; Login device calculation and , where Rep(·) is the biometric feature fuzzy extraction recovery function; judge Is it equal to V? If so, then login is allowed.

3. The IoT multi-party authentication method based on Chebyshev polynomials according to claim 2, characterized in that, The calculation formulas for the user authentication token parameters L1 and L2 are as follows: In the formula: r is a random number.

4. The IoT multi-party authentication method based on Chebyshev polynomials according to claim 3, characterized in that, In step S2, the gateway node authenticates the user authentication token, which includes: Step S201: Obtain the time when the gateway node received the user authentication token. ,judge If the time threshold is less than or equal to the time threshold, proceed to step S202. Step S202: Extraction ,calculate And further calculations: ； Step S303: Determine Check if it is equal to L2. If it is equal, the authentication is successful.

5. The IoT multi-party authentication method based on Chebyshev polynomials according to claim 4, characterized in that, The calculation formulas for the gateway authentication token parameters L4 and L5 are as follows: in: In the formula: Let X be a random number, AN be the pseudo-identity number of the IoT device, and X be a random number. TP-AN It serves as the identity credential for IoT devices.

6. The IoT multi-party authentication method based on Chebyshev polynomials according to claim 5, characterized in that, The authentication gateway authentication token in step S3 includes: Step S301: Obtain the time when the IoT device receives the gateway authentication token ,judge If the time threshold is less than or equal to the time threshold, proceed to step S302. Step S302: Calculation : in: ; Step S303: Determine Is it equal to If so, then the authentication is successful.

7. The IoT multi-party authentication method based on Chebyshev polynomials according to claim 6, characterized in that, The calculation method for the IoT device authentication token parameters L7 and L8 is as follows: in: In the formula: v and u are random numbers generated by the IoT device.

8. The IoT multi-party authentication method based on Chebyshev polynomials according to claim 7, characterized in that, The authentication token for authenticating IoT devices in step S4 includes: Step S401: Obtain the time when the user received the IoT device authentication token ,judge If the time threshold is less than or equal to the time threshold, proceed to step S402. Step S402: Calculation and based on Calculate v * : based on Calculate sk * : ； Calculated : ; Step S403: Determine the equation = Check if it is valid; if so, the authentication is successful.

9. An IoT multi-party authentication system based on Chebyshev polynomials, used to implement the steps of the IoT multi-party authentication method based on Chebyshev polynomials as described in any one of claims 1-8, characterized in that, include: User authentication token generation module: used to generate user authentication tokens; First authentication module: used to authenticate user authentication tokens; Gateway authentication token generation module: used to generate gateway authentication tokens; Second authentication module: used to authenticate gateway authentication tokens; IoT Device Authentication Token Generation Module: Used to generate IoT device authentication tokens; The third authentication module: used to authenticate IoT device authentication tokens; Authorization module: Used to authorize or prohibit communication between the user terminal and IoT devices.

Images