The invention discloses a lightweight dynamic
security authentication method and
system based on PUF (
Physical Unclonable Function), and the method comprises the steps: S1, a
server side collects to-be-registered information, generates a random challenge and auxiliary information, receives a response corresponding to the challenge generated by an IOT (
Internet of Things) device side through a PUF structure, and sends the response to the
server side; storing the pseudonym and the private key of the
registered user and the CRP pair of the
user equipment; s2, when the
server side receives the
authentication request, the
server side initializes the
authentication request, generates a challenge of the next round of
authentication by using the challenge of the current authentication in the initialization process, and sends the challenge of the next round of authentication to
the Internet of Things equipment side; the
server side verifies the identity of the device after receiving the data packet sent by
the Internet of Things device side; and S3, updating a next round of pseudonym at the
server side, generating a next round of challenge and CRP pair by the server side, and sending the challenge and CRP pair to
the Internet of Things equipment side. The method has the advantages of being simple in implementation method, small in resource overhead, high in flexibility, capable of dealing with various security threats and the like.