Group device identity authentication and key agreement method and system in mobile edge computing environment based on distributed learning

Abstract

The invention provides a group equipment identity authentication and key negotiation method and system in a mobile edge computing environment based on distributed learning, and relates to the technical field of information security. The method comprises an initialization stage, a registration stage and an authentication and key negotiation stage. Wherein in the authentication and key negotiation stage, the terminal equipment selects a temporary public key and signs, generates a request message and sends the request message to the mobile edge server so as to complete self authentication; the mobile edge server authenticates the collected request message of the terminal equipment, selects a temporary key to sign the identity label of the terminal equipment after the authentication is passed, and sends the signed identity label to the cloud server to apply for a group identity label; the cloud server verifies the signature successfully and then returns an encrypted group identity identifier; the mobile edge server decrypts to obtain the group identity, calculates a group session key, and sends the group session key to the terminal equipment to complete response; and the terminal equipment generates a group session key after receiving the response message, and key confirmation is completed.

Description

Technical Field

[0001] The present invention relates to the field of information security technology, and in particular to a method and system for group device identity authentication and key negotiation in a mobile edge computing environment based on distributed learning. Background Art

[0002] Distributed Learning (DL) is an emerging machine learning paradigm that allows users to jointly train models without sharing training data, thereby solving data silos and protecting user privacy. Combining DL technology with mobile edge computing can more effectively utilize the distributed characteristics of both and improve data utilization efficiency. In a DL-based mobile edge computing environment, the system model consists of terminal devices, cloud servers, and mobile edge servers. Among them, terminal devices are mainly used to collect data, such as vehicles and mobile phones; cloud servers mainly play the role of coordinating the system. They do not directly contact the original data, but update and integrate the learning model; mobile edge servers are used to coordinate and coordinate joint learning and data sharing between terminal devices. Terminal devices collaborate to complete model training without sharing original data with each other.

[0003] In order to ensure secure communication between devices in group communication scenarios in DL-based mobile edge computing environments, authentication schemes and key agreement schemes (AKA) have been proposed in recent years. These schemes should not only be able to securely complete mutual authentication and session key establishment, but also be able to meet high efficiency. However, most existing lightweight authentication mechanisms and key agreement mechanisms, although they can also be applied to the field of mobile edge computing and provide asymmetric encryption security mechanisms, have high computational costs, leading to many security issues. Traditional identity authentication and key agreement protocols are not applicable to DL-based mobile edge computing environments. Traditional encryption methods and protocols are subject to specific constraints in the perception layer environment. Because smart terminal devices in mobile edge computing environments generally have weak storage and computing capabilities and cannot undertake large amounts of data processing and data calculation, further requirements are put forward for the authentication protocol during identity authentication and the key agreement protocol after authentication. Summary of the invention

[0004] In view of the problems of high computational cost and poor security of existing device authentication and key negotiation schemes in DL-based mobile edge computing environments, the present invention provides a method and system for group device identity authentication and key negotiation in a mobile edge computing environment based on distributed learning.

[0005] On the one hand, the present invention provides a method for group device identity authentication and key negotiation in a mobile edge computing environment based on distributed learning, including: an initialization phase, a registration phase, an authentication and key negotiation phase;

[0006] In the initialization phase, the trusted center generates and publishes system parameters;

[0007] In the registration phase, the terminal device and the mobile edge server complete the registration at the trusted center using the system parameters to obtain their respective long-term private keys and identities during the communication process;

[0008] During the authentication and key negotiation stage, the terminal device generates a temporary public key and signs the temporary public key using system parameters, its own long-term private key and identity, generates a request message and sends it to the mobile edge server to complete its own authentication; the mobile edge server authenticates the request message collected from the terminal device and after the authentication is passed, selects a temporary key and signs the identity of the terminal device using the temporary key, system parameters and its own long-term private key and sends it to the cloud server to apply for a group identity from the cloud server; after the cloud server successfully verifies the signature, it returns the encrypted group identity to the mobile edge server; after the mobile edge server decrypts the group identity, it calculates the group session key and sends it to the terminal device to complete the response; after receiving the response message from the mobile edge server, the terminal device generates a group session key and completes the key confirmation.

[0009] Furthermore, the trusted center generates and publishes system parameters, including:

[0010] The trusted center selects the cyclic point group G on the elliptic curve, sets the group generator P∈G, the order to q, and the security parameter to λ; selects the one-way hash function h1,h2,h3,h4,h5; randomly selects the system master private key And calculate the corresponding public key P pub =sP; publish system parameters {P,q,h1,h2,h3,h4,h5,P pub}.

[0011] Furthermore, the terminal device and the mobile edge server complete registration at the trusted center using system parameters to obtain their respective long-term private keys and identities during communication, specifically including:

[0012] The terminal device or mobile edge server randomly selects an integer locally And calculate the intermediate parameter X = xP, and send {RID, X} to the trusted center; where RID is the real identity of the terminal device or mobile edge server;

[0013] The trusted center verifies whether the RID is in the user list and within the registration validity period. If it is not in the user list or the registration information has expired, it randomly selects an integer for the terminal device or mobile edge server. And perform the following operations on the terminal device or mobile edge server: if it is a terminal device, encrypt the RID of the terminal device with the system master private key to generate the pseudonym PID of the terminal device, and calculate the intermediate parameters R=rP and y=r+sh1(PID,R), and reply {PID,R,y} to the terminal device through a secure channel; if it is a mobile edge server, directly calculate the intermediate parameter R=rP, and directly use the RID of the mobile edge server to calculate y=r+sh1(RID,R), and reply {RID,R,y} to the mobile edge server through a secure channel;

[0014] After receiving the response from the secure channel, the terminal device or mobile edge server verifies the equation yP = R + h1(ID, R)P pub Is it true? If true, store it safely<x,y> As its own long-term private key; wherein, ID is the pseudonymous PID of the terminal device or the RID of the mobile edge server.

[0015] Furthermore, the terminal device generates a temporary public key and signs the temporary public key using system parameters, its own long-term private key and identity, and sends the temporary public key to the mobile edge server, specifically including:

[0016] Terminal Equipment i Randomly select integers As a temporary private key, and calculate the temporary public key Then calculate the intermediate parameter k i,1 and k i,2 : in, Indicates terminal equipment ED i T i is a timestamp string, state2 is a message identification string corresponding to the group communication message, Indicates terminal equipment ED i The long-term public key; then calculate the intermediate parameters Finally generate the signature The signature and signature related information form a request message Sent to the mobile edge server MEC j ;in, Indicates terminal equipment ED i The long-term private key of Represents Mobile Edge Server MEC j The long-term public key.

[0017] Furthermore, the mobile edge server authenticates the collected request message of the terminal device, specifically including:

[0018] Mobile Edge Server MEC j Collect the request messages received from n terminal devices within the time interval δ and calculate To complete the identity authentication of the terminal device; and Represents the mobile edge server MEC j The temporary public key and long-term private key, For terminal equipment ED i The long-term public key, T j1 For timestamp strings, P and P pub These are system parameters.

[0019] Furthermore, the selecting of a temporary key and using the temporary key, system parameters and its own long-term private key to sign the identity of the terminal device and send it to the cloud server specifically includes:

[0020] Mobile Edge Server MEC j choose As a temporary private key, and calculate the temporary public key Then calculate the intermediate parameter k j,1 and k j,2 : Among them, T j1 is a timestamp string; then calculate the intermediate parameters Indicates the terminal device MEC j The long-term private key of Send to the cloud server.

[0021] 7. According to the method for group device identity authentication and key agreement in a mobile edge computing environment based on distributed learning in claim 1, it is characterized in that the cloud server returns the encrypted group identity to the mobile edge server after successfully verifying the signature, specifically comprising:

[0022] After receiving the signature, the cloud server verifies the signature. If the verification passes, a group identity is generated for the group. <GID j ,VT j >; Among them, GID j is the identification string, VT j is a timestamp string, and uses the session key between the mobile edge server and the cloud server to identify the group <GID j,VT j > After encryption, it is sent to the mobile edge server MEC j .

[0023] Further, after the mobile edge server decrypts and obtains the group identity, it calculates the group session key and sends it to the terminal device to complete the response, which specifically includes:

[0024] Mobile Edge Server MEC j After receiving the message from the cloud server, the session key between the mobile edge server and the cloud server is used to decrypt the message to obtain the group identity. <GID j ,VT j >; Calculate the intermediate parameter k first e,1 and k e,2 : Among them, T j2 is a timestamp string; then calculate the intermediate parameters Then calculate the group session key And generate the signature C of the group session key according to the following process j :

[0025] The signature and signature related information form the response information Sent to terminal device ED i Completed response; PGID j and η are both intermediate parameters, P is a system parameter, Indicates the identity of the mobile edge server.

[0026] Further, the terminal device generates a group session key after receiving a response message from the mobile edge server, and completes key confirmation, which specifically includes:

[0027] Terminal Equipment i After receiving the response message from the mobile edge server, calculate Then generate the group session key And verify the equation Is it true? If so, store the group session key gsk securely. i , and start communication within the group.

[0028] On the other hand, the present invention provides a group device identity authentication and key agreement system in a mobile edge computing environment based on distributed learning, including: a trusted center, a terminal device, a mobile edge server and a cloud server;

[0029] The trusted center is used to generate and publish system parameters during the initialization phase; during the registration phase, it is used for terminal devices and mobile edge servers to complete registration at the trusted center using system parameters to obtain their respective long-term private keys and identities during the communication process;

[0030] The terminal device, during the authentication and key negotiation phase, is used to select a temporary public key and use the system parameters, its own long-term private key and identity to sign the temporary public key and generate a request message to send to the mobile edge server to complete its own authentication; and is used to generate a group session key after receiving a response message from the mobile edge server to complete key confirmation;

[0031] The mobile edge server, in the authentication and key negotiation phase, is used to authenticate the request message of the collected terminal device and, after the authentication is passed, select a temporary key and use the temporary key, system parameters and its own long-term private key to sign the identity of the terminal device and send it to the cloud server to apply for the group identity from the cloud server; and after decrypting the group identity, calculate the group session key and send it to the terminal device to complete the response;

[0032] The cloud server, in the authentication and key agreement phase, is used to return the encrypted group identity to the mobile edge server after verifying the signature successfully.

[0033] Beneficial effects of the present invention:

[0034] In a mobile edge computing environment based on distributed learning, the certificateless group device authentication and key negotiation protocol for a mobile edge computing environment based on distributed learning of the present invention can resist man-in-the-middle attacks, spoofing attacks, session key leakage attacks, long-term private key leakage attacks, temporary key leakage attacks, etc., effectively improving the security of data interaction in a mobile edge computing environment based on distributed learning, and has good application prospects. BRIEF DESCRIPTION OF THE DRAWINGS

[0035] Figure 1 A flow chart of a method for group device identity authentication and key negotiation in a mobile edge computing environment based on distributed learning provided by an embodiment of the present invention;

[0036] Figure 2 A schematic diagram of the process flow of the terminal device registration phase provided by an embodiment of the present invention;

[0037] Figure 3 A schematic diagram of the process of authentication and key negotiation between a terminal device, a mobile edge server and a cloud server provided in an embodiment of the present invention. DETAILED DESCRIPTION

[0038] In order to make the purpose, technical solution and advantages of the present invention clearer, the technical solution in the embodiment of the present invention will be clearly described below in conjunction with the drawings in the embodiment of the present invention. Obviously, the described embodiment is a part of the embodiment of the present invention, not all the embodiments. Based on the embodiments of the present invention, all other embodiments obtained by ordinary technicians in this field without creative work are within the scope of protection of the present invention.

[0039] like Figure 1 As shown, an embodiment of the present invention provides a method for group device identity authentication and key negotiation in a mobile edge computing environment based on distributed learning, which includes three stages: protocol initialization, protocol participant registration, and authentication and key negotiation.

[0040] In the initialization phase, the trusted center TA generates and publishes system parameters; system parameters mainly include the system master key and secure hash function;

[0041] In the registration phase, the terminal device and the mobile edge server complete the registration at the trusted center using the system parameters to obtain their respective long-term private keys and identities during the communication process;

[0042] Specifically, during the registration phase, the terminal device generates its own user-part long-term private key and sends it together with the real identity to the trusted center through a secure channel; after receiving the registration application, the trusted center generates a pseudonym and another part of the long-term private key for the terminal device; finally, the terminal device securely stores the two long-term private keys after completing the verification.

[0043] The registration process of the mobile edge server is slightly different from that of the terminal device. Considering that in the MEC environment, the mobile edge server, as part of the service provider, does not need to hide its own identity, the TA directly uses the real identity of the mobile edge server during the registration process instead of generating a corresponding pseudonym for it. After completing the registration, the mobile edge server also has its own long-term private key.

[0044] During the authentication and key negotiation stage, the terminal device selects a temporary public key and signs the temporary public key using system parameters, its own long-term private key and identity, generates a request message and sends it to the mobile edge server to complete its own authentication; the mobile edge server authenticates the request message collected from the terminal device and after the authentication is passed, selects a temporary key and signs the identity of the terminal device using the temporary key, system parameters and its own long-term private key and sends it to the cloud server to apply for a group identity from the cloud server; after the cloud server successfully verifies the signature, it returns the encrypted group identity to the mobile edge server; after the mobile edge server decrypts the group identity, it calculates the group session key and sends it to the terminal device to complete the response; after receiving the response message from the mobile edge server, the terminal device generates a group session key and completes the key confirmation.

[0045] The identity authentication and key negotiation method provided in the embodiment of the present invention realizes session key negotiation of group terminal devices, can resist man-in-the-middle attacks, spoofing attacks, session key leakage attacks, long-term private key leakage attacks, temporary key leakage attacks, etc., and effectively improves the security and reliability of group communications in a mobile edge computing environment based on distributed learning, and has good application prospects.

[0046] In one embodiment, the initialization phase of the trusted center TA is as follows:

[0047] First, TA selects a suitable cyclic point group G on the elliptic curve, assuming that the group generator is P (an element in group G), the order is q (a large prime number), and the security parameter is λ; then TA selects five secure one-way hash functions h1, h2, h3, h4, and h5, where each hash function is defined as h1: h2: h3: h4:G→{0,1} * 、h5:{0,1} * ×G→{0,1} * ; Then TA randomly selects the system master private key s (group ), and calculate the corresponding system master public key P pub =sP(element in group G); finally TA announces the system parameters {P,q,h1,h2,h3,h4,h5,P pub}.

[0048] Based on the above embodiments, the terminal device ED i and Mobile Edge Computing Server MEC jAll need to register with the trusted center TA to obtain a long-term public key / private key. In addition, since the data uploaded by the terminal device to the server may contain some private information, in addition to the long-term public key / private key, a pseudonym will be assigned to the terminal device. It is assumed that the TA is completely reliable and the entire registration phase is completed in a secure channel. In one embodiment, Figure 2 As shown, taking the terminal device as an example, for the identity identifier RID EDi ED i For example, it will obtain a long-term private key and pseudonym during the registration phase. The specific registration process is as follows: i First, complete the selection of the user's partial private key locally, and randomly select And calculate Once the selection is complete it will Sent to TA. TA first checks Whether it is in the user list and within the registration validity period. If it is not in the list or the registration information has expired, it is ED i Random Selection And complete the operation: TA Response Give to ED i ED i After receiving the response from the secure channel, verify the equation Is it true? If the verification is completed, it is stored securely. And open terminal equipment ED i The long-term public key

[0049] For the identity Mobile Edge Server MEC j For example, it will obtain a long-term private key during the registration phase. The specific registration process is as follows: MEC j First, complete the selection of the user's partial private key locally, and randomly select And calculate Once the selection is complete it will Sent to TA. TA first checks Whether it is in the user list and within the registration validity period. If it is not in the list or the registration information has expired, it is MEC j Random Selection And complete the operation: TA response Give to MEC j .MEC j After receiving the response from the secure channel, verify the equation Is it true? If the verification is completed, it is stored securely. And open mobile edge server MEC j The long-term public key

[0050] In one embodiment, Figure 3 As shown, during the authentication and key negotiation phase, the terminal device, mobile edge server, and cloud server implement the following computational steps:

[0051] ED i Random Selection As a temporary private key and sign: After completing the calculation, ED i The request message Send to MEC j ; where k i,1 , k i,2 and i All groups The elements in T i is a timestamp string, and state2 is a message identification string, indicating that the message is a group communication message.

[0052] MEC j Collect the request messages received from n terminal devices within the time interval δ and calculate (in, is an element in group G, s i ′ is a group ), in For terminal equipment ED i to complete the identity authentication of the requesting terminal device.

[0053] Next, MEC j choose And sign the pseudonym for the terminal device application: k j,1 , k j,2 and j All groups The elements in T j1 is a timestamp string; and sends To the cloud server.

[0054] After receiving the signature, the cloud server verifies the signature and generates a group ID for the group if the verification passes. <GID j ,VT j >(where GID j is the identification string, VT j is a timestamp string), and the session key SK between the mobile edge computing server and the cloud server j,cloud Encrypted and sent to MEC j .

[0055] MEC j After receiving the message, use the session key to decrypt and obtain <GID j ,VT j >And operation: Among them, T j2 is a timestamp string; calculate the group session key:

[0056] Last sent Give to ED i Complete response; k e,1 , k e,2 、s e and All groups The elements of PGID j and η are both intermediate parameters;

[0057] ED i After receiving the request response message, perform the following operations: in, is an element in group G, For the group Elements in (group ), and verify the equation Is it true? If so, store the group session key gsk securely. i , and start communication within the group.

[0058] In a mobile edge computing environment based on distributed learning, the certificateless group device authentication and key negotiation protocol for a mobile edge computing environment based on distributed learning in the embodiments of the present invention can resist man-in-the-middle attacks, spoofing attacks, session key leakage attacks, long-term private key leakage attacks, temporary key leakage attacks, etc., effectively improving the security of data interaction in a mobile edge computing environment based on distributed learning, and has good application prospects.

[0059] The embodiment of the present invention also provides a group device identity authentication and key negotiation system in a mobile edge computing environment based on distributed learning, including a trusted center, a terminal device, a mobile edge server and a cloud server;

[0060] Among them, the trusted center is used to generate and publish system parameters in the initialization phase; in the registration phase, it is used for the terminal device and the mobile edge server to complete the registration at the trusted center using the system parameters to obtain their respective long-term private keys and identities in the communication process. The terminal device is used to select a temporary public key in the authentication and key negotiation phase, and use the system parameters, its own long-term private key and identity to sign the temporary public key and generate a request message to send to the mobile edge server to complete its own authentication; and is used to generate a group session key after receiving a response message from the mobile edge server to complete key confirmation. In the authentication and key negotiation phase, the mobile edge server is used to authenticate the request message collected by the terminal device, and after the authentication is passed, select a temporary key and use the temporary key, system parameters and its own long-term private key to sign the identity of the terminal device and send it to the cloud server to apply for a group identity from the cloud server; and after decrypting the group identity, calculate the group session key and send it to the terminal device to complete the response. In the authentication and key negotiation phase, the cloud server is used to return the encrypted group identity to the mobile edge server after verifying the signature successfully.

[0061] It should be noted that the system provided in the embodiment of the present invention is for implementing the above method, and its specific functions can be referred to the above method embodiments, which will not be described again here.

[0062] Finally, it should be noted that the above embodiments are only used to illustrate the technical solutions of the present invention, rather than to limit it. Although the present invention has been described in detail with reference to the aforementioned embodiments, those skilled in the art should understand that they can still modify the technical solutions described in the aforementioned embodiments, or make equivalent replacements for some of the technical features therein. However, these modifications or replacements do not deviate the essence of the corresponding technical solutions from the spirit and scope of the technical solutions of the embodiments of the present invention.

Claims

1. A method for group device identity authentication and key negotiation in a mobile edge computing environment based on distributed learning, characterized in that: include: Initialization phase, registration phase, authentication and key negotiation phase; In the initialization phase, the trusted center generates and publishes system parameters; In the registration phase, the terminal device and the mobile edge server complete the registration at the trusted center using the system parameters to obtain their respective long-term private keys and identities during the communication process; In the authentication and key negotiation phase, the terminal device generates a temporary public key and signs the temporary public key using system parameters, its own long-term private key and identity, and generates a request message to send to the mobile edge server to complete its own authentication; The mobile edge server authenticates the collected request messages of the terminal devices and after the authentication is passed, selects a temporary key and signs the identity of the terminal device using the temporary key, system parameters and its own long-term private key and sends it to the cloud server to apply for a group identity from the cloud server; After the cloud server successfully verifies the signature, it returns the encrypted group identity to the mobile edge server; After the mobile edge server decrypts and obtains the group identity, it calculates the group session key and sends it to the terminal device to complete the response; After receiving the response message from the mobile edge server, the terminal device generates a group session key and completes the key confirmation.

2. The method for group device identity authentication and key negotiation in a mobile edge computing environment based on distributed learning according to claim 1, characterized in that: The trusted center generates and publishes system parameters, including: The trusted center selects the cyclic point group G on the elliptic curve, sets the group generator P∈G, the order to q, and the security parameter to λ; selects the one-way hash function h1,h2,h3,h4,h5; randomly selects the system master private key And calculate the corresponding public key P pub =sP; publish system parameters {P,q,h1,h2,h3,h4,h5,P pub }.

3. The method for group device identity authentication and key negotiation in a mobile edge computing environment based on distributed learning according to claim 2, characterized in that: The terminal device and the mobile edge server complete registration at the trusted center using system parameters to obtain their respective long-term private keys and identities during communication, specifically including: The terminal device or mobile edge server randomly selects an integer locally And calculate the intermediate parameter X = xP, and send {RID, X} to the trusted center; where RID is the real identity of the terminal device or mobile edge server; The trusted center verifies whether the RID is in the user list and within the registration validity period. If it is not in the user list or the registration information has expired, it randomly selects an integer for the terminal device or mobile edge server. And perform the following operations on the terminal device or mobile edge server: if it is a terminal device, encrypt the RID of the terminal device with the system master private key to generate the pseudonym PID of the terminal device, and calculate the intermediate parameters R=rP and y=r+sh1(PID,R), and reply {PID,R,y} to the terminal device through a secure channel; if it is a mobile edge server, directly calculate the intermediate parameter R=rP, and directly use the RID of the mobile edge server to calculate y=r+sh1(RID,R), and reply {RID,R,y} to the mobile edge server through a secure channel; After receiving the response from the secure channel, the terminal device or mobile edge server verifies the equation yP = R + h1(ID, R)P pub Is it true? If true, store it safely<x,y> As its own long-term private key; wherein, ID is the pseudonymous PID of the terminal device or the RID of the mobile edge server.

4. The method for group device identity authentication and key negotiation in a mobile edge computing environment based on distributed learning according to claim 1, characterized in that: The terminal device generates a temporary public key and signs the temporary public key using system parameters, its own long-term private key and identity, and sends the temporary public key to the mobile edge server, specifically including: Terminal Equipment i Randomly select integers As a temporary private key, and calculate the temporary public key Then calculate the intermediate parameter k i,1 and k i,2 : in, Indicates terminal equipment ED i T i is a timestamp string, state2 is a message identification string corresponding to the group communication message, Indicates terminal equipment ED i The long-term public key; then calculate the intermediate parameters Finally generate the signature The signature and signature related information form a request message Sent to the mobile edge server MEC j ;in, Indicates terminal equipment ED i The long-term private key of Represents Mobile Edge Server MEC j The long-term public key.

5. The method for group device identity authentication and key negotiation in a mobile edge computing environment based on distributed learning according to claim 4, characterized in that: The mobile edge server authenticates the collected request message of the terminal device, specifically including: Mobile Edge Server MEC j Collect the request messages received from n terminal devices within the time interval δ and calculate To complete the identity authentication of the terminal device; and Represents the mobile edge server MEC j The temporary public key and long-term private key, For terminal equipment ED i The long-term public key, T j1 For timestamp strings, P and P pub These are system parameters.

6. The method for group device identity authentication and key negotiation in a mobile edge computing environment based on distributed learning according to claim 4, characterized in that: The selecting of a temporary key and using the temporary key, system parameters and its own long-term private key to sign the identity of the terminal device and send it to the cloud server specifically includes: Mobile Edge Server MEC j choose As a temporary private key, and calculate the temporary public key Then calculate the intermediate parameter k j,1 and k j,2 : Among them, T j1 is a timestamp string; then calculate the intermediate parameters Indicates the terminal device MEC j The long-term private key of Send to the cloud server.

7. The method for group device identity authentication and key negotiation in a mobile edge computing environment based on distributed learning according to claim 1, characterized in that: After the cloud server successfully verifies the signature, it returns the encrypted group identity to the mobile edge server, specifically including: After receiving the signature, the cloud server verifies the signature. If the verification passes, a group identity is generated for the group. <GID j ,VT j >; Among them, GID j is the identification string, VT j is a timestamp string, and uses the session key between the mobile edge server and the cloud server to identify the group <GID j ,VT j > After encryption, it is sent to the mobile edge server MEC j .

8. The method for group device identity authentication and key negotiation in a mobile edge computing environment based on distributed learning according to claim 6, characterized in that: After the mobile edge server decrypts and obtains the group identity, it calculates the group session key and sends it to the terminal device to complete the response, which specifically includes: Mobile Edge Server MEC j After receiving the message from the cloud server, the session key between the mobile edge server and the cloud server is used to decrypt the message to obtain the group identity. <GID j ,VT j >; Calculate the intermediate parameter k first e,1 and k e,2 : Among them, T j2 is a timestamp string; then calculate the intermediate parameters Then calculate the group session key And generate the signature C of the group session key according to the following process j : The signature and signature related information form the response information Sent to terminal device ED i Completed response; PGID j and η are both intermediate parameters, P is a system parameter, Indicates the identity of the mobile edge server.

9. The method for group device identity authentication and key negotiation in a mobile edge computing environment based on distributed learning according to claim 8, characterized in that: The terminal device generates a group session key after receiving a response message from the mobile edge server and completes key confirmation, which specifically includes: Terminal Equipment i After receiving the response message from the mobile edge server, calculate Then generate the group session key And verify the equation Is it true? If so, store the group session key gsk securely. i , and start communication within the group.

10. A group device identity authentication and key agreement system in a mobile edge computing environment based on distributed learning, characterized in that: include: Trusted center, terminal devices, mobile edge servers and cloud servers; The trusted center is used to generate and publish system parameters during the initialization phase; In the registration phase, it is used for the terminal device and the mobile edge server to complete the registration at the trusted center using the system parameters to obtain their respective long-term private keys and identities during the communication process; The terminal device, during the authentication and key negotiation phase, is used to select a temporary public key and use system parameters, its own long-term private key and identity to sign the temporary public key and generate a request message to send to the mobile edge server to complete its own authentication; and for generating a group session key after receiving a response message from the mobile edge server to complete key confirmation; The mobile edge server, in the authentication and key negotiation phase, is used to authenticate the request message of the collected terminal device and, after the authentication is passed, select a temporary key and use the temporary key, system parameters and its own long-term private key to sign the identity of the terminal device and send it to the cloud server to apply for a group identity from the cloud server; and after decrypting to obtain the group identity, calculate the group session key and send it to the terminal device to complete the response; The cloud server, in the authentication and key agreement phase, is used to return the encrypted group identity to the mobile edge server after verifying the signature successfully.

Images