Cluster security authentication method, device and equipment based on aggregated MAC

Abstract

The present invention discloses a cluster security authentication method, device and equipment based on aggregated MAC, wherein the method comprises: a seed device node in a device network receives an authentication request sent by a remote verifier, and forwards the authentication request to other non-seed device nodes; the device node generates a corresponding MAC authentication report based on the authentication request, and aggregates the MAC authentication report generated by itself with the MAC authentication report of the child node through the seed device node to obtain a target aggregated MAC authentication report; the seed device node sends the target aggregated MAC authentication report to the remote verifier, so that the remote verifier recalculates the MAC label according to the standard value provided by the device supplier, and compares it with the aggregated MAC label in the received aggregated MAC authentication report to determine whether the device is credible. The present invention not only optimizes the utilization of communication and computing resources, but also realizes efficient authentication of large-scale device networks under the premise of ensuring information security.

Description

Technical Field

[0001] The present invention relates to the fields of distributed systems, Internet of Things device authentication and information security communication technology, and in particular to a cluster security authentication method, device and equipment based on aggregated MAC. Background Art

[0002] In the era of the Internet of Things, cluster authentication of devices has become increasingly important. With the surge in the number of devices, the traditional one-to-one authentication method is not only time-consuming and labor-intensive, but also creates tremendous pressure on network bandwidth and processing power. Especially in large-scale IoT scenarios, the frequent joining and exiting of devices and the dynamic changes of the network have put forward higher requirements for the efficiency and security of cluster authentication.

[0003] Traditional cluster authentication technologies, especially those that separate authentication keys from device configurations, often require storing a large amount of authentication codes and reference values ​​in the trusted computing base (TCB), which not only increases the burden on the TCB but also may lead to security vulnerabilities. For example, once the TCB is attacked, the security and credibility of the entire system will be seriously affected. Summary of the invention

[0004] In view of the technical problems existing in the prior art, the present invention proposes a cluster security authentication method, device and equipment based on aggregated MAC.

[0005] The technical solution adopted by the present invention is as follows:

[0006] A first aspect provides a cluster security authentication method based on aggregated MAC, including:

[0007] The seed device node in the device network receives the authentication request sent by the remote verifier and forwards the authentication request to other non-seed device nodes. The seed device node creates a cluster, and the non-seed device nodes join the cluster through the Gossip protocol to build a logical tree structure.

[0008] The device node generates a corresponding MAC authentication report based on the authentication request, and obtains a target aggregated MAC authentication report by aggregating the MAC authentication report generated by itself with the MAC authentication report of the child node through the seed device node, wherein the leaf node in the device node sends the generated MAC authentication report to the parent node, and the non-leaf node aggregates the MAC authentication report generated by itself with the MAC authentication report of the child node and sends it to the parent node, and the device node includes a seed device node and a non-seed device node;

[0009] The seed device node sends the target aggregate MAC authentication report to the remote verifier, so that the remote verifier recalculates the MAC tag according to the standard value provided by the device vendor, and compares it with the aggregate MAC tag in the received aggregate MAC authentication report to determine whether the device is trustworthy.

[0010] In one embodiment, each device node shares a corresponding device secret value with a remote verifier before startup, generates a corresponding first symmetric key according to the corresponding device secret value based on the DICE mechanism, the authentication request includes the shared identity of the device node, and the device node generates a corresponding MAC authentication report based on the authentication request, including:

[0011] The device node uses a hash function to combine the random number N and its own first symmetric key to generate a MAC tag;

[0012] According to the generated MAC tag, the shared identity of the device node and the random number N, a corresponding MAC authentication report is generated.

[0013] In one implementation, the non-leaf node aggregates the MAC authentication report generated by itself and the MAC authentication report of the child node and sends the aggregated MAC authentication report to the parent node, including:

[0014] If the non-leaf node is a non-seed device node, the non-leaf node aggregates the MAC authentication report generated by itself with the MAC authentication report of the child node through an XOR operation and sends it to the parent node;

[0015] If the non-leaf node is a seed device node, the non-leaf node aggregates the MAC authentication report generated by itself with the MAC authentication report of the child node through an XOR operation and sends it to the remote verifier.

[0016] In one implementation, the remote verifier recalculates the MAC tag based on the standard value provided by the device vendor, and compares it with the aggregated MAC tag in the received aggregated MAC authentication report to determine whether the device is trustworthy, including:

[0017] The remote verifier recalculates the second symmetric key based on the shared identity of the device and the standard value provided by the device vendor, and reconstructs the MAC tag according to the second symmetric key;

[0018] The reconstructed MAC tag is compared with the aggregated MAC tag in the received aggregated MAC authentication report. If the two match, it indicates that the cluster created by the device node is credible. If they do not match, it indicates that an untrusted device exists.

[0019] In one embodiment, when the reconstructed MAC tag does not match the aggregated MAC tag in the received aggregated MAC authentication report, the method further includes the remote verifier finding the untrusted device node in the logical tree composed of the device nodes by dividing the groups layer by layer and verifying them, specifically:

[0020] The remote verifier divides the entire device network into several top-level groups according to the logical tree structure, and verifies the aggregate report of each top-level group. If the verification result of a top-level group fails, the top-level group is further divided into sub-groups, and then the aggregate reports of these sub-groups are verified until the untrusted device node is found.

[0021] Based on the same inventive concept, the second aspect of the present invention provides a cluster security authentication device based on aggregated MAC, comprising:

[0022] An authentication request receiving module is used to receive the authentication request sent by the remote verifier through the seed device node in the device network, and forward the authentication request to other non-seed device nodes, wherein the seed device node creates a cluster, and the non-seed device nodes join the cluster through the Gossip protocol to build a logical tree structure;

[0023] The authentication report generation and aggregation module is used for the device node to generate the corresponding MAC authentication report based on the authentication request, and to obtain the target aggregated MAC authentication report by aggregating the MAC authentication report generated by itself with the MAC authentication report of the child node through the seed device node, wherein the leaf node in the device node sends the generated MAC authentication report to the parent node, and the non-leaf node aggregates the MAC authentication report generated by itself with the MAC authentication report of the child node and sends it to the parent node;

[0024] The report sending module is used to send the aggregated MAC authentication report to the remote verifier through the seed device node, so that the remote verifier can recalculate the MAC tag according to the standard value provided by the device supplier, and compare it with the aggregated MAC tag in the received aggregated MAC to determine whether the device is trustworthy.

[0025] In one embodiment, each device node shares a corresponding device secret value with a remote verifier before startup, generates a corresponding first symmetric key according to the corresponding device secret value based on the DICE mechanism, the authentication request includes the shared identity of the device node, and the device node generates a corresponding MAC authentication report based on the authentication request, including:

[0026] The device node uses a hash function to combine the random number N and its own first symmetric key to generate a MAC tag;

[0027] According to the generated MAC tag, the shared identity of the device node and the random number N, a corresponding MAC authentication report is generated.

[0028] Based on the same inventive concept, the third aspect of the present invention provides a cluster security authentication system based on aggregated MAC, including the device described in the second aspect, a remote verifier and a device supplier, wherein the device supplier is used to provide a standard value for calculating the MAC tag, the remote verifier is used to send an authentication request to the device network, and after receiving the aggregated MAC authentication report, recalculate the MAC tag according to the standard value provided by the device supplier, and compare it with the aggregated MAC tag in the received aggregated MAC authentication report to determine whether the device is trustworthy.

[0029] Based on the same inventive concept, the fourth aspect of the present invention provides a computer-readable storage medium on which a computer program is stored. When the program is executed by a processor, the cluster security authentication method based on aggregated MAC described in the first aspect is implemented.

[0030] Based on the same inventive concept, the fifth aspect of the present invention provides a computer device, including a memory, a processor, and a computer program stored in the memory and executable on the processor, wherein when the processor executes the program, the cluster security authentication method based on aggregated MAC described in the first aspect is implemented.

[0031] Compared with the prior art, the advantages and beneficial technical effects of the present invention are as follows:

[0032] The present invention provides a cluster security authentication method based on aggregated MAC. Compared with the traditional method that requires storing a large number of authentication codes and reference values ​​in a trusted computing base (TCB), the seed device node receives the authentication request sent by the remote verifier and forwards the authentication request to other non-seed device nodes. After each device node generates a corresponding MAC authentication report based on the authentication request, it does not directly send the MAC authentication report, but sends the generated MAC authentication report to the parent node through the leaf node, and the non-leaf node aggregates the MAC authentication report generated by itself with the MAC authentication report of the child node and sends it to the parent node; finally, the MAC authentication report generated by itself is aggregated by the seed device node with the MAC authentication report of the child node to obtain a target aggregated MAC authentication report, which is then sent to the verifier, and the verifier verifies the target aggregated MAC authentication report. In this way, the verifier only needs to verify the target aggregated MAC authentication report, and does not need to verify the MAC authentication report of each device node separately. Through the distributed aggregation of symmetric aggregated message authentication codes, the efficiency of device authentication can be achieved. In addition, by reducing the communication volume and the size of the authentication report, the authentication system can better cope with the device authentication requirements in a large-scale Internet of Things environment. BRIEF DESCRIPTION OF THE DRAWINGS

[0033] In order to more clearly illustrate the embodiments of the present invention or the technical solutions in the prior art, the drawings required for use in the embodiments or the description of the prior art will be briefly introduced below. Obviously, the drawings described below are some embodiments of the present invention. For ordinary technicians in this field, other drawings can be obtained based on these drawings without paying creative work.

[0034] Figure 1 A flowchart of a cluster security authentication method based on aggregated MAC provided by an embodiment of the present invention;

[0035] Figure 2 A schematic diagram of the overall framework of a cluster security authentication method based on an aggregated message authentication code (MAC) provided in an embodiment of the present invention;

[0036] Figure 3 A schematic diagram of the structure of a cluster security authentication device based on an aggregated message authentication code (MAC) provided in an embodiment of the present invention;

[0037] Figure 4 A schematic diagram of the overall architecture of a cluster security authentication system based on aggregated MAC provided in an embodiment of the present invention;

[0038] Figure 5 A schematic diagram of the structure of a DICE hierarchical TCB provided by an embodiment of the present invention;

[0039] Figure 6 A schematic diagram of the initialization process of a cluster security authentication system based on aggregated MAC provided in an embodiment of the present invention. DETAILED DESCRIPTION

[0040] In view of the technical problems existing in the prior art, the present invention provides a cluster authentication method based on aggregated message authentication code (MAC), which can significantly reduce the communication overhead and the size of the authentication report while ensuring device authentication, and improve efficiency. This method (technology) reduces the amount of data transmission and simplifies the authentication process by merging the authentication data of multiple devices into a unified authentication report, and is particularly suitable for large-scale Internet of Things environments. In addition, the authentication technology based on the device identifier combination engine (DICE) can derive the authentication key from the device configuration, which can not only simplify the requirements of the TCB, but also enhance the independence and security of the authentication system. Even if there are vulnerabilities in the TCB, the authentication system can still run and provide services. Therefore, developing a cluster authentication method based on aggregated MAC for devices equipped with DICE is a key technical problem to be solved in order to meet the needs of cluster authentication in modern Internet of Things systems and improve the efficiency and security of cluster authentication. This technology not only needs to be innovated in theory, but also needs to verify its feasibility and superiority in practice. In particular, in large-scale Internet of Things systems in distributed environments, how to effectively realize the aggregation of device nodes and remote cluster authentication will be the focus of research.

[0041] In order to make the purpose, technical solution and advantages of the embodiments of the present invention clearer, the technical solution in the embodiments of the present invention will be clearly and completely described below in conjunction with the drawings in the embodiments of the present invention. Obviously, the described embodiments are part of the embodiments of the present invention, not all of the embodiments. Based on the embodiments of the present invention, all other embodiments obtained by ordinary technicians in this field without creative work are within the scope of protection of the present invention.

[0042] Embodiment 1

[0043] The present invention discloses a cluster security authentication method based on aggregated MAC. Figure 1 , the method comprising:

[0044] S1: The seed device node in the device network receives the authentication request sent by the remote verifier and forwards the authentication request to other non-seed device nodes. The seed device node creates a cluster, and the non-seed device nodes join the cluster through the Gossip protocol to build a logical tree structure.

[0045] S2: The device node generates a corresponding MAC authentication report based on the authentication request, and aggregates the MAC authentication report generated by itself with the MAC authentication report of the child node through the seed device node to obtain a target aggregated MAC authentication report, wherein the leaf node in the device node sends the generated MAC authentication report to the parent node, and the non-leaf node aggregates the MAC authentication report generated by itself with the MAC authentication report of the child node and sends it to the parent node, and the device node includes a seed device node and a non-seed device node;

[0046] S3: The seed device node sends the target aggregate MAC authentication report to the remote verifier, so that the remote verifier recalculates the MAC tag according to the standard value provided by the device vendor, and compares it with the aggregate MAC tag in the received aggregate MAC authentication report to determine whether the device is trustworthy.

[0047] Specifically, seed devices (nodes) and non-seed devices (nodes) constitute a device network. The entire device network is a logical tree structure. The seed device is the top-level parent node, and the non-seed device node is the child node of the seed device. The non-seed device node includes leaf nodes (no child nodes) and non-leaf nodes.

[0048] The overall framework is as follows Figure 2 As shown in the figure. The remote verifier acts as a challenger, and the device supplier provides standard reference values. The seed device node creates a cluster, and the non-seed device nodes join the cluster through the Gossip protocol to build a logical tree structure to achieve data synchronization and information dissemination. The remote verifier sends an authentication request to the device network. After receiving the authentication request, the seed device in the device network broadcasts it to other non-seed device nodes.

[0049] The device node generates the corresponding MAC authentication report based on the authentication request, which means that each device node (seed device and non-seed device) generates the corresponding MAC authentication report based on the authentication request. These device nodes include leaf nodes and non-leaf nodes. For the leaf nodes, the generated MAC authentication report is sent directly to the parent node. For the non-leaf nodes, their own MAC authentication reports are also generated based on the authentication request, and then the MAC authentication reports generated by themselves are aggregated with the MAC authentication reports of their child nodes to obtain the aggregated MAC authentication report and then sent to the parent node. Finally, the seed device node aggregates the MAC authentication report generated by itself with the MAC authentication reports of its child nodes to obtain the target aggregated MAC authentication report.

[0050] In one embodiment, each device node shares a corresponding device secret value with a remote verifier before startup, generates a corresponding first symmetric key according to the corresponding device secret value based on the DICE mechanism, the authentication request includes the shared identity of the device node, and the device node generates a corresponding MAC authentication report based on the authentication request, including:

[0051] The device node uses a hash function to combine the random number N and its own first symmetric key to generate a MAC tag;

[0052] According to the generated MAC tag, the shared identity of the device node and the random number N, a corresponding MAC authentication report is generated.

[0053] Specifically, each device node needs to share its unique device secret value (UDS) with the remote verifier before startup, and generate a symmetric verification key based on the DICE mechanism (a program loaded from ROM at startup, unconditionally trusted execution). The underlying DICE structure of the device uses a one-way function and a key derivation function to generate the final layer CDI (the confidential value of each layer of TCB) from UDS and TCI0 ​​(the initial TCB measurement value), and then generates the first symmetric key key for the subsequent authentication process. The symmetric key plays a key role in the subsequent authentication process.

[0054] In the specific implementation process, when a device or user needs to authenticate, a pre-shared symmetric key will be used to encrypt specific information to generate a security token (such as a SAS token). This token usually contains information such as an encrypted signature, expiration date, and resource URI. The signature is obtained by hashing a specific message (such as a combination of resource URI and expiration date) using a symmetric key. After receiving the security token, the receiver (such as a server) will use the same symmetric key to decrypt and verify the signature to confirm the sender's identity and the validity of the token. If the verification is successful, the authentication is passed, and the two parties can establish an encrypted session for subsequent communication. This authentication method based on symmetric keys provides higher security and authentication efficiency by ensuring key sharing and confidentiality. In the device network, the seed device node is responsible for building the cluster, and the non-seed device nodes join through the Gossip protocol to build a logical tree structure.

[0055] After receiving the authentication request, the device node can use the HMAC-SHA256 algorithm combined with the random number N and its own symmetric key to generate a MAC tag, and then further form an authentication report containing the device ID (the shared identity of the device node, which can be generated by the UDS through a hash function), the random number N and the MAC tag. The leaf node sends it directly to the parent node, and the non-leaf node first aggregates the child node report and then sends it to the parent node.

[0056] In one implementation, the non-leaf node aggregates the MAC authentication report generated by itself and the MAC authentication report of the child node and sends the aggregated MAC authentication report to the parent node, including:

[0057] If the non-leaf node is a non-seed device node, the non-leaf node aggregates the MAC authentication report generated by itself with the MAC authentication report of the child node through an XOR operation and sends it to the parent node;

[0058] If the non-leaf node is a seed device node, the non-leaf node aggregates the MAC authentication report generated by itself with the MAC authentication report of the child node through an XOR operation and sends it to the remote verifier.

[0059] Specifically, if a device node has child nodes, it will wait for the child nodes' authentication reports or aggregation reports to be collected, and then aggregate the MAC authentication reports of all child nodes with its own MAC authentication report to generate an aggregation report. If a device node has no child nodes, it is a leaf node, and the node will send its own MAC authentication report directly to the parent node. The aggregation process generates a single aggregate MAC tag through an XOR operation.

[0060] In one implementation, the remote verifier recalculates the MAC tag based on the standard value provided by the device vendor, and compares it with the aggregated MAC tag in the received aggregated MAC authentication report to determine whether the device is trustworthy, including:

[0061] The remote verifier recalculates the second symmetric key based on the shared identity of the device and the standard value provided by the device vendor, and reconstructs the MAC tag according to the second symmetric key;

[0062] The reconstructed MAC tag is compared with the aggregated MAC tag in the received aggregated MAC authentication report. If the two match, it indicates that the cluster created by the device node is credible. If they do not match, it indicates that an untrusted device exists.

[0063] Specifically, the shared identity of a device refers to an identity that is commonly recognized or shared between devices in a cluster environment. This identity is used to perform mutual authentication between devices within the cluster to ensure that only authorized devices can participate in cluster operations or communications. It may be a key, a certificate, a digital signature, or a string that can uniquely identify the identity of the device. In the present invention, the shared identity of the device is mainly used by the remote verifier (which may be the management center of the cluster or another security verification node) to identify whether the device requesting authentication belongs to the cluster and whether it has the right to perform subsequent communications or operations. The pre-stored reference value refers to the standard value provided by the remote verifier according to the device supplier or the pre-stored device reference information. This information usually includes the measurement value or identifier of the expected normal state of the device. In this embodiment, the role of the device supplier is merged with the remote verifier, so the remote verifier has these reference values. These reference values ​​are used to reconstruct the authentication key during the verification process and compare it with the aggregated MAC tag generated by the device to verify the credibility of the device cluster.

[0064] In one embodiment, when the reconstructed MAC tag does not match the aggregated MAC tag in the received aggregated MAC authentication report, the method further includes the remote verifier finding the untrusted device node in the logical tree composed of the device nodes by dividing the groups layer by layer and verifying them, specifically:

[0065] The remote verifier divides the entire device network into several top-level groups according to the logical tree structure, and verifies the aggregate report of each top-level group. If the verification result of a top-level group fails, the top-level group is further divided into sub-groups, and then the aggregate reports of these sub-groups are verified until the untrusted device node is found.

[0066] Specifically, the root node refers to the topmost node in the logical tree structure, which is the seed device node with which the remote verifier (RV) communicates directly. This seed device node plays the role of the receiver of the initial authentication request and the forwarder of the aggregate report during the cluster authentication process. The groups that pass the authentication are marked as trusted, and the groups that fail the authentication are further subdivided into smaller subgroups until the locations of all untrusted devices are determined. This process involves information exchange between devices and decision feedback from the remote verifier to maintain the security of the cluster. Specifically, when the remote verifier fails to verify the aggregate report, the group verification or subtree search method is used. Suppose that during a remote authentication process, the aggregate MAC label received by the remote verifier does not match the label calculated by itself, indicating that there is an untrusted device. At this time, the remote verifier will start from the seed device node and ask the seed device node to send the aggregate report of its child nodes to the remote verifier. If the aggregate report of a child node fails to be verified, the remote verifier will ask the child node to further divide the devices in its subtree into smaller groups (subgroups) and verify the aggregate reports of these groups. This process will be performed recursively until the specific untrusted device node is found at the bottom of the logical tree. During this process, packets that pass verification will be marked as trusted, while packets that fail will be subdivided and further verified until the security of the entire device network is confirmed.

[0067] For example, a device network consists of 8 devices, which are connected through a logical tree structure, where device A is a seed node (seed device node), which is directly connected to devices B, C and D. Devices B and C are each connected to a sub-device, and device D is connected to two sub-devices. If the aggregation report verification of seed node A fails in the aggregation verification phase, the remote verifier will require A, B, C and D to each provide an aggregation report of its subtree. If the subtree verification of devices B and C passes, and the subtree verification of device D fails, device D needs to further divide its subtree and re-aggregate verification. This process will continue until a specific untrusted device node, such as device E or F, is located in the subtree of device D. Through this step-by-step subdivision and verification method, untrusted devices can be effectively identified and isolated to ensure the security of the entire network.

[0068] The cluster security authentication method based on the aggregate message authentication code (MAC Message Authentication Code) provided in the embodiment of the present invention not only focuses on the implementation of encryption, secure communication and network protocols, but also realizes the use of the Pittacus library to carry out message propagation, encryption algorithm, generation of authentication keys and generation of authentication reports between nodes; and introduces these methods during device startup and verification, so that the device can operate and communicate safely and reliably.

[0069] Specifically, DICE adopts a layered trusted computing base (TCB) structure. The bottom layer is the hardware layer, which contains the unique device secret value (UDS) and the DICE engine. This layer is the most trusted. The second layer is the firmware layer, which contains the first mutable code (First Mutable Code). The DICE engine measures the code in this layer and uses it together with the UDS to generate a composite device identifier (CDI). The upper layer is the operating system and application layer. They cannot directly access the UDS and the DICE engine and can only authenticate and communicate through the CDI. This layered structure ensures the security of the system and prevents unauthorized access or attacks. Even if there are vulnerabilities or attacks in the upper layer, the DICE engine and UDS in the lower layer can ensure the credibility of the system. The specific structure diagram is shown below. Figure 5 shown.

[0070] Figure 5 In the , DICE indicates the program loaded from ROM at boot time, which is executed with unconditional trust. TCI0 ​​indicates the measurement value of the TCB at the bottom layer (layer 0), TCI1~TCIn indicate the measurement values ​​of the TCB at layer 1 (layer1) to layer n-1 (layer n-1), and TCB (Trusted Computing Base) refers to the components at each layer executed during the system startup process. UDS (Unique Device Secret): The device's unique secret value, which is only accessible to the DICE layer and cannot be directly accessed by the lower TCB. CDI (Compound Device Identifier): The secret value of each layer of TCB. fow() is a one-way function that generally generates a fixed-length output based on the input parameters. UDS and TCI0 ​​derive CDI0, CDI0 and TCI1 derive CDI1, and CDIn-1 and TCIn derive CDIn. CDI0~CDIn indicate the secret values ​​of the TCB at layers 0 to n-1, respectively.

[0071] Embodiment 2

[0072] Based on the same inventive concept, this embodiment discloses a cluster security authentication device based on aggregated MAC, see Figure 3 , the device comprises:

[0073] The authentication request receiving module 201 is used to receive the authentication request sent by the remote verifier through the seed device node in the device network, and forward the authentication request to other non-seed device nodes, wherein the seed device node creates a cluster, and the non-seed device nodes join the cluster through the Gossip protocol to build a logical tree structure;

[0074] The authentication report generation and aggregation module 202 is used for the device node to generate a corresponding MAC authentication report based on the authentication request, and to obtain a target aggregated MAC authentication report by aggregating the MAC authentication report generated by itself with the MAC authentication report of the child node through the seed device node, wherein the leaf node in the device node sends the generated MAC authentication report to the parent node, and the non-leaf node aggregates the MAC authentication report generated by itself with the MAC authentication report of the child node and sends it to the parent node;

[0075] The report sending module 203 is used to send the aggregate MAC authentication report to the remote verifier through the seed device node, so that the remote verifier recalculates the MAC tag according to the standard value provided by the device supplier, compares it with the aggregate MAC tag in the received aggregate MAC, and determines whether the device is credible.

[0076] It should be noted that the cluster security authentication device based on aggregated MAC in the present invention, namely, the device network, includes seed device nodes and non-seed device nodes.

[0077] Seed device nodes create and manage clusters. Seed device nodes play a key role in this process, responsible for initializing the cluster and inviting other device nodes to join. After receiving the invitation, non-seed device nodes will join the cluster to form an organized device network. The creation and management of clusters is the prerequisite for the smooth progress of the subsequent authentication process.

[0078] The authentication report generation and aggregation module includes the generation and aggregation of authentication reports, specifically generating a MAC authentication report based on the received authentication request. The leaf node (device without child nodes) will directly calculate and send its own MAC report, while the non-leaf node needs to first collect the authentication reports of its child nodes, generate a comprehensive authentication report (aggregate MAC authentication report) through aggregation operations, and then send it to its parent node or directly to the remote verifier.

[0079] The report sending module sends the aggregated authentication report from the seed device node to the remote verifier. After collecting the authentication reports of all child nodes, the seed device node aggregates them into a unified report, which represents the device status of the entire cluster and is sent to the remote verifier for further verification. The verification process includes: the remote verifier uses the standard value provided by the device supplier and recalculates the MAC value based on the information in the received aggregate report. By comparing the recalculated MAC with the MAC provided in the aggregate report, the credibility of the device network is determined.

[0080] Based on the content of the above device embodiment, as an optional embodiment, in the cluster security authentication device based on the aggregated message authentication code (MAC) provided in the embodiment of the present invention, each device node shares the corresponding device secret value with the remote verifier before startup, generates the corresponding first symmetric key according to the DICE mechanism based on the corresponding device secret value, the authentication request includes the shared identity of the device node, and the device node generates the corresponding MAC authentication report based on the authentication request, including:

[0081] The device node uses a hash function to combine the random number N and its own first symmetric key to generate a MAC tag;

[0082] According to the generated MAC tag, the shared identity of the device node and the random number N, a corresponding MAC authentication report is generated.

[0083] Since the device introduced in the second embodiment of the present invention is a device used to implement the cluster security authentication method based on aggregated MAC in the first embodiment of the present invention, based on the method introduced in the first embodiment of the present invention, the person skilled in the art can understand the specific structure and deformation of the device, so it is not repeated here. All devices used in the method in the first embodiment of the present invention belong to the scope of protection of the present invention.

[0084] Embodiment 3

[0085] Based on the same inventive concept, the present invention also provides a cluster security authentication system based on aggregated MAC, including the cluster security authentication device based on aggregated MAC, a remote verifier and a device supplier as described in Example 2, wherein the device supplier is used to provide a standard value for calculating the MAC tag, the remote verifier is used to send an authentication request to the device network, and after receiving the aggregated MAC authentication report, recalculate the MAC tag according to the standard value provided by the device supplier, and compare it with the aggregated MAC tag in the received aggregated MAC authentication report to determine whether the device is trustworthy.

[0086] Specifically, an embodiment of the present invention provides a cluster security authentication system based on aggregated MAC, such as Figure 4As shown in the figure, the system includes: a device network (i.e., a cluster security authentication device based on aggregated MAC), a device supplier, and a remote verifier. The device network consists of many embedded devices based on DICE technology, including seed devices and non-seed devices. The remote verifier is considered to be trusted and is responsible for verifying the aggregated authentication report received from the device network. The device supplier is responsible for providing the remote verifier with known correct reference values ​​or measurements. In the experiment, the device supplier and the remote verifier are merged into one role. Three types of device nodes need to be simulated in the system: remote verifier, seed device, and non-seed device. The seed device node creates a cluster, and the non-seed device node joins the cluster through the Gossip protocol. Through this layered architecture, the entire aggregation system can be established and operated.

[0087] According to the above-mentioned cluster security authentication system based on aggregate message authentication code (MAC), security authentication is performed. First, the security authentication system includes three parts: device network, device supplier and remote verifier. The device network is composed of many embedded devices based on DICE technology, including seed devices and non-seed devices. During the initialization process, the corresponding device nodes are first created and configured for the remote verifier, seed devices and non-seed devices. The seed device node creates a cluster, and the non-seed device node joins the cluster through the Gossip protocol; after the non-seed device node is initialized, it will find the parent node. If there is no child node, it will directly send an authentication report to the parent node. If there is a child node, it will first collect the authentication report of the child node, and then aggregate the authentication report of the child node with its own authentication report and send it to the parent node; the seed device node is responsible for collecting the aggregate report of the child node, aggregating it with its own authentication report to obtain the target MAC authentication report, and then sending it to the remote verifier. Through this hierarchical initialization process, the entire aggregation system can be established and operated. The initialization process of the entire security authentication system is as follows: Figure 6 shown.

[0088] The implementation basis of each embodiment of the present invention is to implement programmed processing through a device with a processor function. Therefore, in engineering practice, the technical solutions and functions of each embodiment of the present invention can be encapsulated into various modules. Based on this reality, on the basis of the above embodiments, the embodiment of the present invention provides a cluster security authentication system based on an aggregate message authentication code (MAC), which is used to execute the cluster security authentication method based on an aggregate message authentication code (MAC) in the above method embodiment. Figure 4The system includes: a device network, a remote verifier and a device supplier, wherein the device network includes a seed device (Seed Node) and a non-seed device (Non-seed Nodes), the seed device is a special device in the device network, responsible for receiving the authentication request of the remote verifier and propagating the request in the device network, the non-seed device is an ordinary device in the device network, and they generate an authentication report after receiving the authentication request; the remote verifier (Remote Verifier), the remote verifier is an independent entity, which can communicate with the devices in the device network through the network, and is responsible for receiving and verifying the aggregate MAC; the Gossip protocol is used for random communication and data synchronization between devices; the authentication report (Attestation Report), the authentication report generated by each non-seed device after receiving the authentication request; the aggregate MAC, which is generated by aggregating the MAC tags of multiple devices; the logical tree structure, the logical tree structure constructed in the device network, the seed device is at the top, and the non-seed devices are represented in layers below; the reference value and the device standard value are used to verify the authenticity and security of the device; the device supplier (Device Supplier), the device supplier provides the standard value of the device, and generally, in the actual structure, the function of the device supplier is merged into the remote verifier.

[0089] Since the system introduced in the third embodiment of the present invention is a system used to implement the cluster security authentication method based on aggregated MAC in the first embodiment of the present invention, the specific structure and deformation of the system can be understood by those skilled in the art based on the method introduced in the first embodiment of the present invention, so it is not repeated here. All systems used in the method in the first embodiment of the present invention belong to the scope of protection of the present invention.

[0090] Embodiment 4

[0091] Based on the same inventive concept, the present invention further provides a computer-readable storage medium on which a computer program is stored. When the program is executed by a processor, the method described in the first embodiment is implemented.

[0092] Since the computer-readable storage medium introduced in the fourth embodiment of the present invention is the computer-readable storage medium used to implement the cluster security authentication method based on aggregated MAC in the first embodiment of the present invention, based on the method introduced in the first embodiment of the present invention, the person skilled in the art can understand the specific structure and deformation of the computer-readable storage medium, so it is not repeated here. All computer-readable storage media used in the method of the first embodiment of the present invention belong to the scope of protection of the present invention.

[0093] Embodiment 5

[0094] The present invention also provides a computer device, including a memory, a processor, and a computer program stored in the memory and executable on the processor, wherein the processor implements the method described in Embodiment 1 when executing the program.

[0095] Since the computer device introduced in the fifth embodiment of the present invention is a computer device used to implement the cluster security authentication method based on aggregated MAC in the first embodiment of the present invention, based on the method introduced in the first embodiment of the present invention, the person skilled in the art can understand the specific structure and deformation of the computer device, so it is not repeated here. All computer devices used in the method of the first embodiment of the present invention belong to the scope of protection of the present invention.

[0096] It will be appreciated by those skilled in the art that embodiments of the present invention may be provided as methods, systems, or computer program products. Therefore, the present invention may take the form of a complete hardware embodiment, a complete software embodiment, or an embodiment combining software and hardware. Furthermore, the present invention may take the form of a computer program product implemented on one or more computer-usable storage media (including but not limited to disk storage, CD-ROM, optical storage, etc.) containing computer-usable program code.

[0097] The present invention is described with reference to flowcharts and / or block diagrams of methods, devices (systems), and computer program products according to embodiments of the present invention. It should be understood that each process and / or block in the flowchart and / or block diagram, as well as the combination of processes and / or blocks in the flowchart and / or block diagram, can be implemented by computer program instructions. These computer program instructions can be provided to a processor of a general-purpose computer, a special-purpose computer, an embedded processor, or other programmable data processing device to produce a machine, so that the instructions executed by the processor of the computer or other programmable data processing device generate instructions for implementing the processes in the flowchart and / or block diagram. Figure 1 A process or multiple processes and / or boxes Figure 1 A device that provides the functions specified in a block or multiple blocks.

[0098] Although preferred embodiments of the present invention have been described, additional changes and modifications may be made to these embodiments by those skilled in the art once the basic creative concepts are known. Therefore, the appended claims are intended to be interpreted as including the preferred embodiments and all changes and modifications that fall within the scope of the present invention. Obviously, those skilled in the art may make various changes and modifications to the embodiments of the present invention without departing from the spirit and scope of the embodiments of the present invention. Thus, if these modifications and variations of the embodiments of the present invention fall within the scope of the claims of the present invention and their equivalents, the present invention is also intended to include these modifications and variations.

Claims

1. A cluster security authentication method based on aggregated MAC, characterized in that: include: The seed device node in the device network receives the authentication request sent by the remote verifier and forwards the authentication request to other non-seed device nodes. The seed device node creates a cluster, and the non-seed device nodes join the cluster through the Gossip protocol to build a logical tree structure. The device node generates a corresponding MAC authentication report based on the authentication request, and obtains a target aggregated MAC authentication report by aggregating the MAC authentication report generated by itself with the MAC authentication report of the child node through the seed device node, wherein the leaf node in the device node sends the generated MAC authentication report to the parent node, and the non-leaf node aggregates the MAC authentication report generated by itself with the MAC authentication report of the child node and sends it to the parent node, and the device node includes a seed device node and a non-seed device node; The seed device node sends the target aggregate MAC authentication report to the remote verifier, so that the remote verifier recalculates the MAC tag according to the standard value provided by the device supplier, and compares it with the aggregate MAC tag in the received aggregate MAC authentication report to determine whether the device is trustworthy, wherein the aggregate MAC tag in the received aggregate MAC authentication report is generated by the device node using a hash function combined with a random number N and its own first symmetric key; The remote verifier recalculates the MAC tag based on the standard value provided by the device vendor and compares it with the aggregated MAC tag in the received aggregated MAC authentication report to determine whether the device is trustworthy, including: The remote verifier recalculates the second symmetric key based on the shared identity of the device and the standard value provided by the device vendor, and reconstructs the MAC tag according to the second symmetric key; Compare the reconstructed MAC tag with the aggregated MAC tag in the received aggregated MAC authentication report. If the two match, it indicates that the cluster created by the device node is credible. If they do not match, it indicates that an untrusted device exists. When the reconstructed MAC tag does not match the aggregated MAC tag in the received aggregated MAC authentication report, the method further includes the remote verifier finding untrusted device nodes in the logical tree composed of device nodes by dividing the groups layer by layer and verifying them, specifically: The remote verifier divides the entire device network into several top-level groups according to the logical tree structure, and verifies the aggregate report of each top-level group. If the verification result of a top-level group fails, the top-level group is further divided into sub-groups, and then the aggregate reports of these sub-groups are verified until the untrusted device node is found.

2. The cluster security authentication method based on aggregated MAC according to claim 1, characterized in that: Each device node shares the corresponding device secret value with the remote verifier before startup, generates the corresponding first symmetric key according to the corresponding device secret value based on the DICE mechanism, and the authentication request includes the shared identity of the device node. The device node generates the corresponding MAC authentication report based on the authentication request, including: The device node uses a hash function to combine the random number N and its own first symmetric key to generate a MAC tag; According to the generated MAC tag, the shared identity of the device node and the random number N, a corresponding MAC authentication report is generated.

3. The cluster security authentication method based on aggregated MAC according to claim 1, characterized in that: The non-leaf node aggregates the MAC authentication report generated by itself with the MAC authentication report of the child node and sends it to the parent node, including: If the non-leaf node is a non-seed device node, the non-leaf node aggregates the MAC authentication report generated by itself with the MAC authentication report of the child node through an XOR operation and sends it to the parent node; If the non-leaf node is a seed device node, the non-leaf node aggregates the MAC authentication report generated by itself with the MAC authentication report of the child node through an XOR operation and sends it to the remote verifier.

4. A cluster security authentication device based on aggregated MAC, characterized in that: include: An authentication request receiving module is used to receive the authentication request sent by the remote verifier through the seed device node in the device network, and forward the authentication request to other non-seed device nodes, wherein the seed device node creates a cluster, and the non-seed device nodes join the cluster through the Gossip protocol to build a logical tree structure; The authentication report generation and aggregation module is used for the device node to generate a corresponding MAC authentication report based on the authentication request, and to obtain a target aggregated MAC authentication report after aggregating the MAC authentication report generated by itself with the MAC authentication report of the child node through the seed device node, wherein the leaf node in the device node sends the generated MAC authentication report to the parent node, and the non-leaf node aggregates the MAC authentication report generated by itself with the MAC authentication report of the child node and sends it to the parent node, and the device node includes a seed device node and a non-seed device node; A report sending module, used to send the aggregated MAC authentication report to the remote verifier through the seed device node, so that the remote verifier recalculates the MAC tag according to the standard value provided by the device supplier, and compares it with the aggregated MAC tag in the received aggregated MAC to determine whether the device is credible, wherein the aggregated MAC tag in the received aggregated MAC authentication report is generated by the device node using a hash function combined with a random number N and its own first symmetric key; The report sending module is specifically used for: Recalculate the second symmetric key based on the shared identity of the device and the standard value provided by the device vendor through the remote verifier, and reconstruct the MAC tag according to the second symmetric key; Compare the reconstructed MAC tag with the aggregated MAC tag in the received aggregated MAC authentication report. If the two match, it indicates that the cluster created by the device node is credible. If they do not match, it indicates that an untrusted device exists. When the reconstructed MAC tag does not match the aggregated MAC tag in the received aggregated MAC authentication report, the report sending module is further used for the remote verifier to find untrusted device nodes in the logical tree composed of device nodes by dividing the groups layer by layer and verifying them, specifically: The remote verifier divides the entire device network into several top-level groups according to the logical tree structure, and verifies the aggregate report of each top-level group. If the verification result of a top-level group fails, the top-level group is further divided into sub-groups, and then the aggregate reports of these sub-groups are verified until the untrusted device node is found.

5. The cluster security authentication device based on aggregated MAC according to claim 4, characterized in that: Each device node shares the corresponding device secret value with the remote verifier before startup, generates the corresponding first symmetric key according to the corresponding device secret value based on the DICE mechanism, and the authentication request includes the shared identity of the device node. The device node generates the corresponding MAC authentication report based on the authentication request, including: The device node uses a hash function to combine the random number N and its own first symmetric key to generate a MAC tag; According to the generated MAC tag, the shared identity of the device node and the random number N, a corresponding MAC authentication report is generated.

6. A cluster security authentication system based on aggregated MAC, characterized in that: It includes a cluster security authentication device based on aggregated MAC as described in claim 4, a remote verifier and a device supplier, wherein the device supplier is used to provide a standard value for calculating the MAC tag, the remote verifier is used to send an authentication request to the device network, and after receiving the aggregated MAC authentication report, recalculate the MAC tag according to the standard value provided by the device supplier, and compare it with the aggregated MAC tag in the received aggregated MAC authentication report to determine whether the device is trustworthy.

7. A computer-readable storage medium having a computer program stored thereon, characterized in that: When the program is executed by a processor, the cluster security authentication method based on aggregated MAC as described in any one of claims 1 to 3 is implemented.

8. A computer device comprising a memory, a processor and a computer program stored in the memory and executable on the processor, characterized in that: When the processor executes the program, the cluster security authentication method based on aggregated MAC as described in any one of claims 1 to 3 is implemented.

Images