A secure and revocable anonymous authentication method for internet of things

Abstract

The application discloses a kind of enhanced security revocable anonymous authentication method of Internet of Things, including the following steps, S1: system initialization, for generating public parameters and user registration;S2: authentication between user and gateway, for identity authentication and session key establishment;S3: password update and revocation, authorized user can update password, gateway can revoke malicious user.It is beneficial to generate a pseudonym using the random number of gateway, provide a safe and effective identity privacy protection scheme, perfectly solve the problem of anonymity and message unlinkability.Add an effective revocation mechanism, when malicious user appears, gateway will record it to revocation list, and gateway does not provide key generation service for the user, so as to realize user revocation, realize identity authentication, anonymity, unlinkability, password update and revocation, etc.Security requirements such as.

Description

Technical Field

[0001] This invention relates to the field of data security and privacy protection in the Internet of Things (IoT), and specifically to an enhanced secure and revocable anonymous authentication method for IoT. Background Technology

[0002] With the development of internet technology, the Internet of Things (IoT), as a hallmark of the next generation of industrial revolution technology, tightly connects enterprises, devices, individuals, and homes. In the IoT, users can use various information sensing devices such as GPS, RFID, and infrared sensors to achieve information exchange between things and between things and people. Therefore, the IoT is widely used in green agriculture, telemedicine, intelligent transportation, smart homes, and urban management. Users can monitor and control devices anytime and anywhere. While the IoT brings great convenience to human production and life, its internal transmission channels are insecure, allowing unauthorized users to illegally collect sensor data. Data privacy and security in the IoT still face many challenges. Therefore, more and more researchers are focusing on and researching conditional privacy-preserving user authentication schemes.

[0003] Patel et al. proposed an efficient and reliable lightweight remote user authentication scheme that employs mutually verified key exchange for a user gateway model. They formally analyzed the proposed scheme using a Dolev-Yao channel and employed BAN logic to provide mutual authentication. However, we found that this scheme does not achieve anonymity and unlinkability. Based on Patel et al.'s RSU scheme, we propose a more secure revocable anonymity authentication scheme. Summary of the Invention

[0004] The purpose of this invention is to provide an enhanced, secure, and revocable anonymous authentication method for the Internet of Things (IoT), offering a secure and effective identity privacy protection scheme that perfectly solves the problems of anonymity and message unlinkability, and adds an effective revocation mechanism, thus fulfilling security requirements such as identity authentication, anonymity, unlinkability, password update, and revocation.

[0005] The technical solution of this invention is implemented as follows:

[0006] An enhanced secure and revocable anonymous authentication method for the Internet of Things includes the following steps.

[0007] S1: System initialization, used to generate common parameters and user registration;

[0008] S2: Authentication between the user and the gateway, used for identity verification and establishing a session key;

[0009] S3: Password update and revocation, enabling authorized users to update passwords and gateways to revoke passwords for malicious users.

[0010] Furthermore, the system initialization process in step S1 includes the following steps:

[0011] S1.1: Parameter generation: The system is initialized by generating parameters through the gateway. The gateway generates two random numbers and calculates the public and private key pairs of the system and the user respectively. The user's public and private keys are stored in the memory of the user's device, while the system's public key and the user's public key are made public.

[0012] S1.2 User Registration: Users submit their real identities to the gateway. After the gateway verifies their legitimacy, it calculates and generates an SC and stores {Bi, Vi, RIDi, TIDi, h()} for each user, then sends it to the user. The user then uses Enc... PK (U i Store in SC; SC = {B i V i RID i TID i ,h(),Enc PK (U i )}.

[0013] Furthermore, the parameter generation in step S1.1 includes the following steps:

[0014] S1.11: The gateway randomly selects a prime number p and an elliptic curve EP(a, b) defined on the finite field GF(p), and the elliptic curve is a set of equations satisfying y 2 =x 3 The sum of all points (x, y) of the sum of x and b mod p, plus a point O at infinity, constitutes the sum of all points (x, y) of the sum of x and b mod p.

[0015] S1.12: Gateway selected randomly and And calculate P pub =s·P and PK=sk·P, where s and P pub These are the system's master key and public key, respectively; sk and PK are the user's private key and public key, respectively.

[0016] S1.13: Store the user's public key (PK) and private key (sk) in the user equipment's memory; store the system's public key (PK) in the system's memory. pub The user's public key (PK) is made public.

[0017] Furthermore, the user registration in step S1.2 specifically includes the following steps:

[0018] S1.21: User inputs ID, PSWi And randomly select a number Then calculate U i =r i ·P, ω i =h(PSW) i ||U i ), through a secure channel {ID, ω i Send to the gateway;

[0019] S1.22: The gateway verifies the validity of the user's identity and then calculates the TID. i =h(h(ID)||ω i Generate random numbers Calculate V i =v i ·P,RID i =EncPpub(ID||v i A i =h(V i ||s), Finally, the gateway generates an SC, which stores {B} for each user. i V i RID i TID i ,h()} and send it to the user;

[0020] S1.23: The user will Enc PK (U i Store in SC, SC = {B} i V i RID i TID i ,h(),Enc PK (U i )}.

[0021] Furthermore, in step S2, the user sends a verification message to the gateway to verify its validity. After the verification is successful, the gateway sends a verification message to the user to verify its validity. If the gateway and the user successfully verify each other, they can obtain the public session key and transmit encrypted information.

[0022] Furthermore, the identity authentication and session key establishment include the following steps:

[0023] S2.1: The user enters their ID and password, and inserts the SC into the card reader. The card reader calculates ω. i =h(PSW) i ||Dec sk (U i )), Then the card reader verifies the TID. i* Is it equal to TID? i Then, SCR calculates X. i，j =x i，j ·P, L i，j =h(X) i，j ||ID), The user sends {PID} to the gateway through an insecure channel. i，j X i，j T, R i，j};

[0024] S2.2: Upon receiving the user's information {PID} i，j X i，j T, R i，j After that, the gateway first verifies ΔT≤T * The -T option is used to check the freshness of the login request; if valid, the gateway calculates... Dec s (RID i ), N i =h(X) i，j ||ID), A i =h(v i ||s), And check Is it equal to PID? i，j To verify the user's authenticity; if successful, the gateway will randomly generate a [user ID]. and the current timestamp T new ;

[0025] The gateway also calculates

[0026] Y i，j =y i，j ·P, key i，j =h(ID||A i ||y i，j ·X i，j ||Y i，j ||X i，j ), SKV i =h(key) i，j ||Y i，j ||A i ||X i，j ||T new The gateway sends {Y} to the user through an open channel. i，j SKV i T new};

[0027] S2.3: After receiving the broadcast message, the user first needs to authenticate. To check the freshness of the message; if the inequality is false, the user calculates the key. To verify the session key and gateway; then user calculation T new And check If so, the session key has been successfully established.

[0028] Furthermore, in step S3, authorized users can use password update and user revocation mechanisms at this stage without involving the gateway.

[0029] Furthermore, the password update includes the following steps:

[0030] S3.1: The user first inserts the SC into the card reader and enters personal credentials, including ID and PSW. i 、PSW′ i One of them;

[0031] S3.2: SCR calculation Dec sk (U i ) to obtain U i Calculate ω i =h(PSW) i ||U i ), And check Is it equal to TID? i To verify the user's authenticity; if it is valid, the gateway will generate a noncer'. i ∈Z·P and calculate U′ i =r′ i ·P,ω′ i =h(PSW′) i ||U′ i ), TID′ i =h(h(ID)||ω′ i );

[0032] SCR now generates updated versions.

[0033] Furthermore, the revocation of user identity includes the following steps:

[0034] 1) The gateway establishes a revocation list. When a malicious user appears, the gateway finds out the user's real identity and records it in the list.

[0035] 2) The gateway will no longer provide key generation services for users on the revocation list, preventing them from establishing session keys with sensor devices and thus enabling the revocation of malicious users.

[0036] Beneficial effects: Compared with the prior art, the present invention has the following characteristics:

[0037] Using a gateway's random number generator to produce a pseudonym provides a secure and effective identity privacy protection scheme, perfectly solving the problems of anonymity and message unlinkability. An effective revocation mechanism is added: when a malicious user appears, the gateway records them in the revocation list and stops providing key generation services for that user, thus achieving user revocation. This fulfills security requirements such as identity authentication, anonymity, unlinkability, password update, and revocation. Attached Figure Description

[0038] Figure 1 This is a system model diagram of the present invention;

[0039] Figure 2 A flowchart illustrating the user registration process;

[0040] Figure 3 A flowchart illustrating the process of identity authentication and session key establishment phases;

[0041] Figure 4 This is a flowchart of the password update phase. Detailed Implementation

[0042] The technical solution of the present invention will be described in detail below, but the scope of protection of the present invention is not limited to the embodiments described.

[0043] like Figure 1 As shown, the system model of the enhanced secure revocable IoT anonymous authentication method of this invention mainly includes three participants: a gateway (GW), a node (SN), and a user (US). The gateway (GW) is a universally trusted authoritative entity placed within a secure environment. When a new user joins the IoT, the gateway needs to verify the legitimacy of the user's identity and then establish a session secret between the user and the sensor so that they can communicate securely.

[0044] If the gateway detects a user maliciously attacking a device to steal information, it can revoke their identity. Node (SN): Sensors are deployed in a specific area or open environment, monitoring and collecting environmental data which is transmitted to the gateway via a wireless channel. Due to the openness of the wireless channel, it is vulnerable to malicious attacks. Sensors have limited computing, storage, and power resources. User (US): After being authenticated by the gateway, the user can obtain real-time data from the target sensor node and remotely control it.

[0045] The enhanced security and revocable anonymous authentication method for the Internet of Things of the present invention includes the following steps:

[0046] (1) System initialization phase, including public parameter generation and user registration.

[0047] (2) The authentication phase between the user and the gateway, including identity authentication and the establishment of session keys.

[0048] (3) Password update and revocation phase, including authorized users can update their passwords and gateways can revoke the passwords of malicious users.

[0049] In the parameter generation phase of step (1), the system generates parameters through the gateway for initialization. The specific steps are as follows:

[0050] 1) The gateway randomly selects a prime number p and an elliptic curve EP(a, b) defined on the finite field GF(p), and the elliptic curve is a set of equations satisfying y 2 =x 3 The expression consists of all points (x, y) of the sum of a, b, x, and y, plus a point O at infinity, where a, b, x, and y are evaluated over the finite field GF(p).

[0051] 2) Gateway selected randomly and And calculate P pub =s·P and PK=sk·P, where s and P pub These are the system's master key and public key, respectively, while sk and PK are the user's private key and public key, respectively.

[0052] 3) Store the user's public key (PK) and private key (sk) in the user's device's secret storage; store the system's public key (P) in the secret storage of the user's device. pub The user's public key (PK) is made public.

[0053] like Figure 2 As shown, the specific steps for user registration are as follows:

[0054] 1) User enters ID, PSW i And randomly select a number Then calculate U i =r i ·P, ω i =h(PSW) i ||U i ), through a secure channel {ID, ω i Send to the gateway.

[0055] 2) The gateway verifies the validity of the user's identity and then calculates the TID. i =h(h(ID)||ωi Generate random numbers Calculate V i =v i ·P,RID i =EncPpub(ID||v i ), A i =h(V i ||s), Finally, the gateway generates an SC, stores {Bi, Vi, RIDi, TIDi, h()} for each user, and sends it to the user.

[0056] 3) The user stores EncP K(Ui) into SC. SC = {Bi, Vi, RIDi, TIDi, h(), EncP K(Ui)}.

[0057] like Figure 3 As shown, the specific steps for the identity authentication and session key establishment phases are as follows:

[0058] 1) The user enters their ID and password, and inserts the SC into the card reader. The card reader then calculates... Then the card reader verifies. Is it equal to TID? i Then, SCR calculates X. i，j =x i，j ·P, L i，j =h(X) i，j ||ID), The user sends {PID} to the gateway through an insecure channel. i，j X i，j T, R i，j}

[0059] 2) Upon receiving the user's information {PID} i，j X i，j T, R i，j After that, the gateway first verifies ΔT≤T * The `-T` option is used to check the freshness of the login request. If it is true, the gateway calculates... Dec s (RID i ), N i =h(X) i，j ||ID), A i =h(v i ||s), And check Is it equal to PID? i，j This verifies the user's authenticity. If successful, the gateway will randomly generate a [user ID / identity]. and the current timestamp Tnew The gateway also calculates Y. i，j =y i，j ·P, key i，j =h(ID||A i ||y i，j ·X i，j ||Y i，j ||X i，j ), SKV i =h(key) i，j ||Y i，j ||A i ||X i，j ||T new The gateway sends {Y} to the user through an open channel. i，j SKV i T new}

[0060] 3) Upon receiving the broadcast message, the user first needs to verify their identity. This checks the freshness of the message. If the inequality holds, the user calculates the key. To verify the session key and gateway. Then the user calculates. T new And check If so, the session key has been successfully established.

[0061] like Figure 4 As shown, the specific steps in the password update phase are as follows:

[0062] 1) The user first inserts the SC into the card reader and enters personal credentials, such as ID or PSW. i 、PSW′ i .

[0063] 2) SCR calculation Dec sk (U i ) to obtain U i Calculate ω i =h(PSW) i ||U i ), And check Is it equal to TID? i This verifies the user's authenticity. If verified, the gateway randomly generates a [user ID / identity]. And calculate U′ i =r′ i ·P,ω′ i =h(PSW′) i ||U′ i ), TID′ i =h(h(ID)||ω′i Now SCR generates the updated SC = (B′) i V i RID i , TID′ i ,h(),Enc PK (U′ i )).

[0064] User identity revocation includes the following steps:

[0065] 1) The gateway establishes a revocation list. When a malicious user appears, the gateway finds out the user's real identity and records it in the list.

[0066] 2) The gateway will no longer provide key generation services for users on the revocation list, preventing them from establishing session keys with sensor devices and thus enabling the revocation of malicious users.

Claims

1. An enhanced security and revocable anonymous authentication method for the Internet of Things, characterized in that, It includes the following steps: S1: System initialization, used to generate common parameters and user registration; S2: Authentication between the user and the gateway, used for identity verification and establishing a session key; S3: Password update and revocation, enabling authorized users to update passwords and gateways to revoke the passwords of malicious users; The identity authentication and session key establishment include the following steps: S2.1: User input , password, and Insert the card reader, and the card reader will calculate... , Then the card reader verifies. Is it equal to Then, SCR calculation Users send data to the gateway through insecure channels. Gateway selected randomly and And calculate and ,in and These are the system's master key and public key. and These are the user's private key and public key, respectively. S2.2: Upon receiving the user's information { After that, the gateway first verifies... To check the freshness of the login request; if it is valid, the gateway calculates... , and check Is it equal to To verify the user's authenticity; if successful, the gateway will randomly generate a [user ID]. and current timestamp ; The gateway also calculates The gateway sends data to the user through an open channel. }; S2.3: After receiving the broadcast message, the user first needs to authenticate. To check the freshness of the message; if the inequality is false, the user calculates the key. To verify the session key and gateway; then user calculation And check If so, the session key has been successfully established. In step S3, authorized users can use the password update and user revocation mechanism at this stage, without involving the gateway; the password update includes the following steps: S3.1: The user will first... Insert the card reader and enter your personal credentials, including One of them; S3.2: SCR Calculation get ,calculate and check Is it equal to To verify the user's authenticity; if it is valid, the gateway will generate a... And calculate , , ; SCR now generates updated versions. .

2. The enhanced security revocable anonymous authentication method for the Internet of Things according to claim 1, characterized in that, The system initialization process in step S1 includes the following steps: S1.1: Parameter generation: The system is initialized by generating parameters through the gateway. The gateway generates two random numbers and calculates the public and private key pairs of the system and the user respectively. The user's public and private keys are stored in the memory of the user's device, while the system's public key and the user's public key are made public. S1.2 User Registration: Users submit their real identities to the gateway. After the gateway verifies their legitimacy, it generates a user registration form. And store for each user Send it to the user, and then the user will deposit ; .

3. The enhanced security revocable anonymous authentication method for the Internet of Things according to claim 2, characterized in that, The parameter generation in step S1.1 includes the following steps: S1.11: The gateway randomly selects a prime number. and a definition in a finite field Elliptic curve on Furthermore, the elliptic curve is a set of equations that satisfy... All points It consists of a point O at infinity; S1.12: Transfer the user's public key and the user's private key Stored in the user equipment's memory; the system's public key and the user's public key To make it public.

4. The enhanced security revocable anonymous authentication method for the Internet of Things according to claim 3, characterized in that, The user registration process in step S1.2 specifically includes the following steps: S1.21: User Input , And randomly select a number Then calculate Through the secure passage { , Send to the gateway; S1.22: The gateway verifies whether the user's identity is valid, and then calculates... Generate random numbers ,calculate Finally, the gateway is generated. Store { for each user And send it to the user; S1.23: The user will deposit , ={ } 5. The enhanced security revocable anonymous authentication method for the Internet of Things according to claim 1, characterized in that, In step S2, the user sends a verification message to the gateway to verify its validity. After the verification is successful, the gateway sends a verification message to the user to verify its validity. If the gateway and the user successfully verify each other, they can obtain the public session key and transmit encrypted information.

6. The enhanced security revocable anonymous authentication method for the Internet of Things according to claim 1, characterized in that, User identity revocation includes the following steps: 1) The gateway establishes a revocation list. When a malicious user appears, the gateway finds out the user's real identity and records it in the list. 2) The gateway will no longer provide key generation services for users on the revocation list, preventing them from establishing session keys with sensor devices and thus enabling the revocation of malicious users.

Images