A multi-party key authentication method based on Internet of Things data transmission

Abstract

The present application discloses a multi-party key authentication method based on data transmission of the Internet of Things, which relates to the field of communication technology. The method is based on necessary parameters generated by a key generation center; user registration information and device registration information are determined based on the biometric features of the user and a gateway private key of the key generation center; the biometric key, user identity and user first timestamp are sent to the gateway to verify the legitimacy of the user; the device identity and device first timestamp are sent to the gateway to verify the validity of the device; when the user is legal and the device is valid, a group key, a user second timestamp, a device second timestamp, target device information and target user information are determined based on the gateway; the device is verified according to the target device information and the device second timestamp; the user is verified according to the target user information and the user second timestamp; when the user is legal and the device is valid, the group key and the device private key are sent to the device and the user, thereby effectively ensuring the security of data transmission in the Internet of Things.

Description

Technical Field

[0001] The present application relates to the field of communication technology, and in particular to a multi-party key authentication method based on Internet of Things data transmission. Background Art

[0002] In recent years, the application of the Internet of Things (such as the Internet of Vehicles, the Internet, and the Medical Internet of Things) in the fields of industry, agriculture, environment, transportation, logistics, security and other infrastructure has effectively promoted the intelligent development of these areas, making limited resources more reasonably used and allocated, thereby improving industry efficiency and benefits. Although the development of the Internet of Things has gradually become large-scale in recent years, all countries have invested huge manpower, material and financial resources in research and development. However, there are still many problems that need to be overcome in terms of technology, management, cost, policy, and security.

[0003] Large-scale computing in the Internet of Things represents a reform of traditional industrial systems, increasing data transmission efficiency and providing more personalized consumer services. Currently, most manufacturers provide a wide range of healthcare services by deploying sensors and other collection devices. The Internet of Things transforms traditional medical practices from general management to personalized services of information-based healthcare. In this process, the basic equipment stores the collected IoT data in the cloud server, and only legitimate users can access this data. If you are not careful, it will cause the leakage of data and user privacy. If it is accessed by bad merchants or attackers, it will lead to irreversible serious consequences. Obviously, ensuring the security of device data and the legitimacy and privacy of user identities are key issues in this process.

[0004] As the consumer base continues to expand, the number of IoT devices in each region has also increased significantly. As the number of smart devices in the IoT increases, the cost of protecting user and device privacy increases. At the same time, the large amount of communication costs and computing resource overhead cannot be ignored. Therefore, designing a key authentication and management protocol between a user and multiple smart devices has become an issue that cannot be ignored.

[0005] However, when performing multi-device authentication in existing technologies, users need to send a verification request to each device, that is, users need to initiate verification requests multiple times and communicate multiple times, and most traditional information exchange methods are not suitable for the application environment of large-scale IoT devices with limited resources. Therefore, how to reduce the computational complexity and improve the communication efficiency under the premise of reducing communication overhead to resist most network attacks and ultimately ensure secure data transmission in the IoT has become an urgent problem to be solved. Summary of the invention

[0006] The purpose of this application is to provide a multi-party key authentication method based on Internet of Things data transmission, which can solve the problem that the data transmission security in the Internet of Things cannot be effectively guaranteed due to the high computational complexity and low communication efficiency caused by the user's need to communicate with different devices multiple times.

[0007] To achieve the above objectives, this application provides the following solutions:

[0008] The present application provides a multi-party key authentication method based on IoT data transmission, which is applied to a multi-party key authentication protocol in an IoT scenario. The protocol involves users, devices, and gateways. The multi-party key authentication method based on IoT data transmission includes:

[0009] Based on the key generation center, the user, gateway and device are initialized to generate necessary parameters; the necessary parameters include the gateway public key and the gateway private key; the device includes at least two; the necessary parameters are sent to the gateway, device and user in the Internet of Things; based on the key generation center, the user's biometrics and the gateway private key are hashed to determine the user registration information and the device registration information; wherein the device registration information includes the device identity, the device identity hash value and the device public key; the user registration information includes the biometric key, the user identity, the user identity hash value and the user public key; the biometric key is determined based on the fuzzy extractor, the user identity, the user password and the biometrics; the biometrics include at least the user's pupil or the user's fingerprint; the biometric key, the user identity and the user's first timestamp are sent to the gateway as user authentication data, and based on the gateway and the user The device authentication data is used to verify the legitimacy of the user; the device identity and the first timestamp of the device are sent to the gateway as the device authentication data, and the validity of the device is verified based on the gateway and the device authentication data; when it is verified that the user is legitimate and the device is valid, a random number is generated for each device based on the gateway to determine the group key, the user second timestamp and the device second timestamp; based on the gateway, the device registration information and the user registration information are bilinearly mapped by a hash function, and the group key is XORed to determine the target device information and the target user information; the validity of the device is verified according to the target device information and the second timestamp of the device; the legitimacy of the user is verified according to the target user information and the second timestamp of the user; when the user is legitimate and the device is valid, the group key and the device private key are sent to the device and the user; wherein the device private key is determined based on the group key and the device identity.

[0010] According to the specific embodiments provided in this application, this application discloses the following technical effects:

[0011] The present application provides a multi-party key authentication method based on data transmission of the Internet of Things. First, the key generation center generates necessary parameters so as to be disclosed to devices and users in the Internet of Things. The user will generate a biometric key based on his or her own biometrics using a fuzzy extractor to prepare for subsequent verification. Among them, adding the user's biometrics can resist multiple imitation attacks on the user's identity and ensure the privacy and security of the user. Further, based on the key generation center, a gateway identity and a gateway private key, user registration information and device registration information are generated. During the verification process, first the user and the smart device must be verified with the gateway respectively, that is, the gateway ensures the legitimacy of the user and the authenticity and validity of the device. Based on the user's first timestamp, the gateway verifies the user's biometric key with the biometrics stored internally. If the verification is completed, the legitimacy of the user's identity is indicated. Subsequently, based on the device's first timestamp, the gateway compares the device information stored internally with the device identity. If the comparison is successful, the authentication is completed. It is worth noting that adding time nodes (i.e., the user's first timestamp and the device's first timestamp) can effectively resist conventional network attacks such as key exposure attacks and replay attacks to ensure secure data transmission in the Internet of Things. Finally, the gateway performs a hash operation based on the device identity to generate a group key, performs an XOR operation on the group key, and sends the hashed information and the encrypted group key together to the user and device. Only legitimate users and devices can complete the authentication from the gateway. In the end, each device gets its own private key, and the user also gets the device private key. In other words, the user can complete the communication with multiple different devices through one communication. It can be seen that the computational complexity is reduced, the communication efficiency between users and devices is improved, and it can resist most network attacks and effectively ensure the security of data transmission in the Internet of Things. BRIEF DESCRIPTION OF THE DRAWINGS

[0012] In order to more clearly illustrate the embodiments of the present application or the technical solutions in the prior art, the drawings required for use in the embodiments will be briefly introduced below. Obviously, the drawings described below are only some embodiments of the present application. For ordinary technicians in this field, other drawings can be obtained based on these drawings without paying creative work.

[0013] Figure 1 This is a method flow chart of a multi-party key authentication method based on Internet of Things data transmission provided in an embodiment of the present application.

[0014] Figure 2 This is a model design diagram of a multi-party key authentication method based on Internet of Things data transmission provided in an embodiment of the present application. DETAILED DESCRIPTION

[0015] The following will be combined with the drawings in the embodiments of the present application to clearly and completely describe the technical solutions in the embodiments of the present application. Obviously, the described embodiments are only part of the embodiments of the present application, not all of the embodiments. Based on the embodiments in the present application, all other embodiments obtained by ordinary technicians in this field without creative work are within the scope of protection of this application.

[0016] This application proposes a multi-party key authentication method based on IoT data transmission, which can be applied to multi-device scenarios to complete multi-party verification of gateways, users, and devices. Compared with previous authentication protocols, the same user only needs to initiate one request to complete the authentication of multiple devices, so this authentication scheme greatly reduces communication overhead. In addition, this application uses biometric fuzzy extractors and bilinear mappings to protect keys and resist key exposure attacks. In general, this application is suitable for large-scale IoT device communication scenarios, can effectively protect the communication security of devices and users, and plays a key role in data transmission.

[0017] In order to make the above-mentioned objects, features and advantages of the present application more obvious and easy to understand, the present application is further described in detail below in conjunction with the accompanying drawings and specific implementation methods.

[0018] like Figure 1 and Figure 2 As shown, the present application provides a multi-party key authentication method based on IoT data transmission, which is applied to a multi-party key authentication protocol in an IoT scenario. The protocol involves users, devices, and gateways. The multi-party key authentication method based on IoT data transmission includes:

[0019] Step 101: Based on the key generation center, the user, gateway and device are initialized to generate necessary parameters; the necessary parameters include a gateway public key and a gateway private key; the device includes at least two.

[0020] The device is a smart device, stored in Figure 2 The smart device layer stores the collected IoT data in the server, and only legitimate users can access this data.

[0021] Step 102: Send the necessary parameters to the gateway, devices and users in the Internet of Things.

[0022] In some embodiments, the necessary parameters include ;in, , are all multiplicative cyclic groups of order q, Q is The generator of is a bilinear function; GID Gateway identity; his a hash function; the gateway private key is s=h(GID||msk) ,in, s The gateway private key; msk is the master key of the entire IoT system; || is the connection symbol of the string; the gateway public key is ;in, The gateway public key.

[0023] Among them, step 101 and step 102 are the initialization stage. First, the key generation center generates a multiplication cyclic group G1 of order q and a multiplication cyclic group G2 of order q, where Q is the generator of G1 and e:G1×G1→G2 is a bilinear mapping. msk As the master key. According to the gateway identity GID and msk To calculate the gateway private key s=h(GID|| msk) , calculate the gateway public key based on the gateway private key .choose h As a hash function, finally Sent to gateways, devices and users in the Internet of Things.

[0024] It is worth noting that the difficult problem used in this application is the Elliptic Curve Discrete Logarithm Problem (ECDLP), which is defined as: given a base point on an elliptic curve (that is, ) and another point Q, such that s Q= , given Q and In the case of polynomial algorithm, it is difficult to calculate the following in this application: s , which is the gateway private key.

[0025] Step 103: Based on the key generation center, a hash operation is performed on the user's biometric features and the gateway private key to determine the user registration information and the device registration information; wherein the device registration information includes a device identity, a device identity hash value and a device public key; the user registration information includes a biometric key, a user identity, a user identity hash value and a user public key; the biometric key is determined based on a fuzzy extractor, the user identity, a user password and a biometric feature; the biometric feature includes at least a user pupil or a user fingerprint.

[0026] In some embodiments, step 103 performs a hash operation on the user's biometrics and the gateway private key based on the key generation center to determine the user registration information and the device registration information, and also includes: authorizing the gateway to obtain the user identity and the device identity through the key generation center; authorizing the user to obtain the device identity through the key generation center.

[0027] Among them, user registration information determined based on biometrics strengthens the protection of user identity security and will not be stolen or imitated by a third party.

[0028] Specifically, step 103 is the registration phase, which is divided into three steps:

[0029] The first step of the registration phase: the key generation center generates a device identity for the smart device , and then Perform hash operation, device identity hash value , and calculate the device public key , and then Send to every smart device.

[0030] The second step of the registration phase: the key generation center generates an identity for the smart device user , and then Perform hash operation to obtain the user identity hash value , and calculate the user's public key , and then and the smart card is sent to the user.

[0031] The third step of the registration phase: The key generation center authorizes the gateway to obtain the identity of the user and the smart device , and the gateway private key Sent to the gateway to prepare for subsequent authentication.

[0032] In some embodiments, when a new device needs to be added, a new random number is generated for each device using the gateway. , recalculate the group key and the device private key, and distribute them to each device; wherein, is a new random number, is an intermediate parameter; when any device needs to be deleted, the key generation center sends deletion information to the gateway, generates a new random number for each device, recalculates the group key and the device private key, and distributes them to each device; wherein the deletion information is to delete the device registration information corresponding to the device.

[0033] Among them, after completing the registration phase, if a new device wants to join or a device leaves, the gateway will initiate a key update, that is, use the key generation center to send a deletion message to the gateway, and then return to step 101 to recalculate the group key and the device private key, and distribute them to each device to complete the update of all device private keys and group keys. Unsafe devices will be kicked out, and newly authenticated devices will be allowed to join the device group to ensure the communication security of the entire Internet of Things. This process is the key update phase of this application.

[0034] Step 104: Send the biometric key, the user identity identifier and the user's first timestamp as user authentication data to the gateway, and verify the legitimacy of the user based on the gateway and the user authentication data.

[0035] In some embodiments, step 104 sends the biometric key, the user identity and the user's first timestamp as user authentication data to the gateway, and verifies the legitimacy of the user based on the gateway and the user authentication data, specifically including steps 201-204:

[0036] Step 201: The user authentication data is ;in, For users; For users The user's first parameter; For users The second user parameter, , ; A random number chosen by the user, For users The first timestamp.

[0037] Step 202: After the gateway receives the user authentication data, it determines the timestamp of the gateway receiving the user information.

[0038] Step 203: Determine a first difference based on the user's first timestamp and the timestamp of the gateway receiving the user information.

[0039] Step 204: Compare whether the first difference is less than or equal to the preset maximum interval time to obtain a first result. If the first result is no, the verification fails and the user is determined to be illegal. If the first result is yes, compare Is it equal to , determine the second result. If the second result is yes, the verification is passed, and the user is determined to be legitimate. If the second result is no, the verification fails, and the user is determined to be illegitimate.

[0040] In actual applications, after the gateway receives the user's user authentication data, it first verifies whether it meets the , if not satisfied, the authentication terminates. Then, the gateway calculates Is it equal to , if not satisfied, the authentication terminates. Collect user information timestamp for the gateway; The preset maximum interval time.

[0041] It is worth noting that the key authentication phase of this application includes the user key authentication phase and the device key authentication phase. Perform key authentication. During the authentication process, the user and the smart device interact through the gateway.

[0042] Specifically, in the key authentication phase, the user and the smart device must first authenticate with the gateway respectively, that is, the gateway ensures the authenticity of the user and the smart device. The gateway checks the biometric features stored internally with the user's biometric key. If the authentication is completed, it indicates the legitimacy of the user's identity. Subsequently, the gateway compares the device information stored internally with the device identity. If the comparison is successful, the authentication is completed.

[0043] Step 104 is the user's key authentication phase, and the specific process is as follows: the user enters the user's identity ,password and biometrics The smart card then reconstructs the biometric key through a fuzzy extractor. The user will pick a random number , and the current timestamp ,calculate , , and then Sent to the gateway to authenticate the user.

[0044] Step 105: Send the device identity and the first timestamp of the device as device authentication data to the gateway, and verify the validity of the device based on the gateway and the device authentication data.

[0045] Among them, step 105 is the key authentication stage of the device, and the smart device selects a random number and a timestamp , and calculate , , and then Sent to the gateway to verify the device.

[0046] In some embodiments, step 105 sends the device identity and the first device timestamp as device authentication data to the gateway, and verifies the validity of the device based on the gateway and the device authentication data, specifically including steps 301-304:

[0047] Step 301: The device authentication data is ;in, For the j The first device parameter of each device; For the j The second parameter of the device. , ; For the j The random number selected by each device, For the j The device first timestamp of the device.

[0048] Step 302: After the gateway receives the device authentication data, it determines the timestamp of the gateway receiving the device information.

[0049] Step 303: Determine a second difference based on the first timestamp of the device and the timestamp of the device information received by the gateway.

[0050] Step 304: Compare whether the second difference is less than or equal to the preset maximum interval time to obtain a third result. If the third result is no, the verification fails and the device is determined to be invalid; if the third result is yes, compare Is it equal to , determine a fourth result; if the fourth result is yes, the verification passes, and the device is determined to be valid; if the fourth result is no, the verification fails, and the device is determined to be invalid.

[0051] In actual applications, after the gateway receives the device authentication data, it first verifies whether it meets , if not satisfied, the authentication terminates. Then, the gateway calculates Is it equal to , if not satisfied, the authentication terminates. Receive device information timestamp for the gateway; The preset maximum interval time.

[0052] Step 106: When the user is verified to be legitimate and the device is valid, a random number is generated for each device based on the gateway to determine the group key, the user's second timestamp, and the device's second timestamp.

[0053] Step 106 is the first step in the key generation phase, where the gateway generates a random number for each device. , then calculate .

[0054] In some embodiments, the group key is: ,in, is the group key; is the total number of devices; j For the j Devices; is the bilinear function value, , and All are intermediate parameters.

[0055] Step 107: Based on the gateway, bilinear mapping of the hash function is performed on the device registration information and the user registration information, and an XOR operation is performed on the group key to determine the target device information and the target user information.

[0056] Among them, step 107 is the second step of the key generation phase, that is, the gateway then calculates , , , , then the gateway will Send to every smart device ,Will Sent to the user, the specific process is as follows:

[0057] In some embodiments, the target user information in step 107 is ;

[0058] ;

[0059] ;

[0060] in, is the biometric key; is the user public key; is the group key; is an XOR operation; For users The user's third parameter; For users The fourth parameter of the user; For users The second timestamp; The user's identity.

[0061] The target device information is ;

[0062] ;

[0063] ;

[0064] in, is the public key of the device; For the j The third parameter of the device; For the j The fourth parameter of the device of the device; For the j The device second timestamp of each device; is the identity of the jth device.

[0065] Step 108: Verify the validity of the device according to the target device information and the second timestamp of the device.

[0066] Among them, step 108 is the third step of the key generation phase, and the specific process is as follows.

[0067] In some embodiments, step 108 verifies the validity of the device according to the target device information and the second timestamp of the device, specifically including steps 401 to 403:

[0068] Step 401: When the device receives the target user information, a device third timestamp when the device receives the information is determined.

[0069] Step 402: Determine a fourth difference value according to the second timestamp of the device and the third timestamp of the device.

[0070] Step 403: Compare whether the fourth difference is less than or equal to the preset maximum interval time to obtain a sixth result; if the sixth result is yes, the verification is passed, and verification is performed. Is it equal to , determine the seventh result; among which, is the multiplicative cyclic group The generator of is a bilinear function; h is a hash function; is the gateway public key; is the hash value of the device identity; || is the connection symbol of the string; if the seventh result is yes, the verification is successful, and it is determined that the device obtains the group key and the device private key; if the seventh result is no, the verification is unsuccessful.

[0071] In actual applications, after the device receives the information, it calculates , For the third timestamp of the device, calculate , and verify Is it equal to After success, it confirms that the information sent by the gateway is correct and the device can obtain the group key And calculate the private key of this device .

[0072] Step 109: Verify the legitimacy of the user based on the target user information and the user's second timestamp.

[0073] Among them, step 109 is the fourth step of the key generation phase, and the specific process is as follows.

[0074] In some embodiments, step 109 verifies the legitimacy of the user according to the target user information and the second timestamp of the user, and specifically includes steps 501 to 503:

[0075] Step 501: When the user receives the target user information, a third timestamp of the user receiving the information is determined.

[0076] Step 502: Obtain a third difference value according to the second timestamp of the user and the third timestamp of the user.

[0077] Step 503: Compare the third difference to see whether it is less than or equal to the preset maximum interval time to obtain a fifth result; if the fifth result is yes, the verification is passed, and verify Is it equal to The sixth result is obtained; wherein, is the multiplicative cyclic group The generator of is a bilinear function; h is a hash function; is the gateway public key; is the hash value of the user identity; || is the connection symbol of the character string; if the sixth result is yes, the verification is successful, and it is determined that the user obtains the group key and the device private key; if the sixth result is no, the verification is unsuccessful.

[0078] In actual applications, after receiving the target user information, the user calculates , Second timestamp for the user; The third timestamp for the user, is the preset maximum interval time. Further, calculate , and verify Is it equal to After success, it confirms that the information sent by the gateway is correct, and the user can obtain the group key And the private key for each device , convenient for communication with different devices.

[0079] Step 110: When the user is legitimate and the device is valid, the group key and the device private key are sent to the device and the user; wherein the device private key is determined based on the group key and the device identity.

[0080] The present application is a key authentication and management protocol based on elliptic curve cryptography, which can realize that users only need to initiate a request once to complete authentication with multiple smart devices, greatly reducing communication overhead. The specific method is mainly divided into five stages: initialization stage, registration stage, key authentication stage, key generation stage and key update stage. First, the gateway, user and smart device need to complete registration and obtain their respective public and private keys. Subsequently, the user, smart device and gateway need to perform key authentication separately to ensure the identity security of each other. The present application adopts bilinear pairing to implement the three-party authentication protocol, and at the same time adds time nodes to resist conventional network attacks such as key exposure attacks and replay attacks. After the three parties complete the authentication through bilinear pairing, if there are problems such as new devices joining, device damage and device erosion, the device can be updated, and then the group key can be updated to ensure the security of the key during the data transmission of the Internet of Things.

[0081] The technical features of the above embodiments may be combined arbitrarily. To make the description concise, not all possible combinations of the technical features in the above embodiments are described. However, as long as there is no contradiction in the combination of these technical features, they should be considered to be within the scope of this specification.

[0082] This article uses specific examples to illustrate the principles and implementation methods of this application. The description of the above embodiments is only used to help understand the method and core ideas of this application. At the same time, for those skilled in the art, according to the ideas of this application, there will be changes in the specific implementation methods and application scope. In summary, the content of this specification should not be understood as limiting this application.

Claims

1. A multi-party key authentication method based on Internet of Things data transmission, applied to a multi-party key authentication protocol in an Internet of Things scenario, wherein the protocol involves users, devices and gateways, and is characterized in that: The multi-party key authentication method based on Internet of Things data transmission includes: Based on the key generation center, the user, gateway and device are initialized to generate necessary parameters; the necessary parameters include ;in, , are all multiplicative cyclic groups of order q, Q is The generator of is a bilinear function; GID Gateway identity; h is a hash function; the gateway private key is s=h (GID||msk) ,in, s The gateway private key; msk is the master key of the entire IoT system; || is the string concatenation symbol; the gateway public key is ;in, is the gateway public key; the device includes at least two; Sending the necessary parameters to gateways, devices and users in the Internet of Things; Based on the key generation center, a hash operation is performed on the user's biometric features and the gateway private key to determine the user registration information and the device registration information; wherein the device registration information includes a device identity, a device identity hash value and a device public key; the user registration information includes a biometric key, a user identity, a user identity hash value and a user public key; the biometric key is determined based on a fuzzy extractor, the user identity, a user password and a biometric feature; the biometric feature includes at least a user pupil or a user fingerprint; Sending the biometric key, the user identity identifier and the user's first timestamp as user authentication data to a gateway, and verifying the legitimacy of the user based on the gateway and the user authentication data; Sending the device identity and the first timestamp of the device as device authentication data to the gateway, and verifying the validity of the device based on the gateway and the device authentication data; When the user is verified to be legitimate and the device is valid, a random number is generated for each device based on the gateway to determine the group key, the user's second timestamp, and the device's second timestamp; the group key is: ;in, is the group key; is the total number of devices; j For the j Devices; is the bilinear function value, , and All are intermediate parameters; is a bilinear function; For the j The second parameter of the device; Based on the gateway, bilinear mapping of the hash function is performed on the device registration information and the user registration information, and an XOR operation is performed on the group key to determine the target device information and the target user information; Verifying the validity of the device according to the target device information and the second timestamp of the device; Verifying the legitimacy of the user according to the target user information and the second timestamp of the user; When the user is legitimate and the device is valid, the group key and the device private key are sent to the device and the user; wherein the device private key is determined based on the group key and the device identity.

2. The multi-party key authentication method based on Internet of Things data transmission according to claim 1 is characterized in that: After the key generation center performs a hash operation on the user's biometrics and the gateway private key to determine the user registration information and the device registration information, the method further includes: Obtaining the user identity and the device identity through the key generation center authorization gateway; The key generation center authorizes the user to obtain the device identity.

3. The multi-party key authentication method based on Internet of Things data transmission according to claim 2 is characterized in that: The biometric key, the user identity identifier and the user's first timestamp are sent to the gateway as user authentication data, and the legitimacy of the user is verified based on the gateway and the user authentication data, specifically including: The user authentication data is ;in, For users; For users The user's first parameter; For users The second user parameter, , ; A random number chosen by the user, For users The user's first timestamp; After the gateway receives the user authentication data, determining a timestamp of the gateway receiving the user information; Determine a first difference based on the user's first timestamp and the gateway's timestamp for receiving the user information; Compare whether the first difference is less than or equal to a preset maximum interval time to obtain a first result; If the first result is no, the verification fails and the user is determined to be illegal; If the first result is yes, compare Is it equal to , determine the second result; If the second result is yes, the verification is successful and the user is confirmed to be legitimate; If the second result is no, the verification fails and the user is determined to be illegal.

4. The multi-party key authentication method based on Internet of Things data transmission according to claim 2 is characterized in that: Sending the device identity and the first timestamp of the device as device authentication data to the gateway, and verifying the validity of the device based on the gateway and the device authentication data, specifically includes: The device authentication data is ;in, For the j The first device parameter of each device; For the j The second parameter of the device, , ; For the j The random number selected by each device, For the j a first timestamp of the device of the device; After the gateway receives the device authentication data, determining a timestamp of the gateway receiving the device information; Determine a second difference based on the first timestamp of the device and the timestamp of the device information received by the gateway; Compare whether the second difference is less than or equal to a preset maximum interval time to obtain a third result; If the third result is no, the verification fails and the device is determined to be invalid; If the third result is yes, compare Is it equal to , determine a fourth result; If the fourth result is yes, the verification is successful and the device is determined to be valid; If the fourth result is no, the verification fails and the device is determined to be invalid.

5. The multi-party key authentication method based on Internet of Things data transmission according to claim 1 is characterized in that: The target user information is ; ； ； in, is the biometric key; is the user public key; is the group key; is an XOR operation; For users The user's third parameter; For users The fourth parameter of the user; For users The user's second timestamp; Identify the user; The target device information is ; ； ； in, is the public key of the device; For the j The third parameter of the device; For the j The fourth parameter of the device of the device; For the j The device second timestamp of each device; is the identity of the jth device.

6. The multi-party key authentication method based on Internet of Things data transmission according to claim 5 is characterized in that: According to the target user information and the second timestamp of the user, the legitimacy of the user is verified, specifically including: When the user receives the target user information, determining a third timestamp of the user receiving the information; Obtaining a third difference value according to the second timestamp of the user and the third timestamp of the user; Comparing whether the third difference is less than or equal to a preset maximum interval time to obtain a fifth result; If the fifth result is yes, the verification is passed, and verification Is it equal to , and obtain the sixth result; among them, is the multiplicative cyclic group The generator of is a bilinear function; h is a hash function; is the gateway public key; is the hash value of the user identity; || is the string connection symbol; If the sixth result is yes, the verification is successful, and it is determined that the user obtains the group key and the device private key; If the sixth result is no, the verification is unsuccessful.

7. The multi-party key authentication method based on Internet of Things data transmission according to claim 5 is characterized in that: Verifying the validity of the device according to the target device information and the second timestamp of the device, specifically including: When the device receives the target user information, determining a third timestamp of the device when the device receives the information; Determining a fourth difference value according to the second timestamp of the device and the third timestamp of the device; Comparing whether the fourth difference is less than or equal to a preset maximum interval time, to obtain a sixth result; If the sixth result is yes, the verification is passed, and verification Is it equal to , determine the seventh result; among which, is the multiplicative cyclic group The generator of is a bilinear function; h is a hash function; is the gateway public key; is the hash value of the device identity; || is the string connection symbol; If the seventh result is yes, the verification is successful, and the device is determined to obtain the group key and the device private key; If the seventh result is no, the verification is unsuccessful.

8. The multi-party key authentication method based on Internet of Things data transmission according to claim 2 is characterized in that: When a new device needs to be added, the gateway generates a new random number for each device. , recalculate the group key and the device private key, and distribute them to each device; wherein, is a new random number, is the intermediate parameter; When any device needs to be deleted, the key generation center sends deletion information to the gateway, generates a new random number for each device, recalculates the group key and the device private key, and distributes them to each device; wherein the deletion information is to delete the device registration information corresponding to the device.

Images