WO2023115667A1 - Authentication and key negotiation method, gateway, sensor and electronic equipment - Google Patents

Abstract

The present application relates to an authentication and key negotiation method for a wireless sensor network. The method comprises: the user equipment verifies the identity of a user on the basis of the identity information input by a user by means of a smart card, and sends login information to a gateway; the gateway verifies the identity of the user, generates access request information for a target sensor based on a first preset parameter of the gateway, and updates the first preset parameter of the gateway; the target sensor verifies the access request information, after verification is passed successfully, the target sensor updates the preset parameters of the sensor, generates a session key, and sends request approval information to the gateway; the gateway calculates a session key and verifies the request approval information, the gateway generates access validation information and updates a second preset parameter of the gateway; the user equipment calculates a session key and verifies the access validation information, and updates a preset parameter of the smart card; the user equipment and the sensor carry out secure communication utilizing the session key. The method allows for anonymity, untraceability and confidentiality of communication among the nodes.

Description

Authentication and key agreement method, gateway, sensor and electronic device technical field

The application belongs to the technical field of wireless communication, and in particular relates to an authentication and key agreement method.

Background technique

Wireless Sensor Networks (WSNs) is one of the core technologies of the Internet of Things (IoT), which consists of heterogeneous sensors widely distributed in space and is mainly used to monitor physical or environmental variables. The wireless sensor network is mainly composed of three participants: sensor node (Sensor Node, SN), gateway node (Gateway Node, GWN) and user (User). Normally, SN collects different types of information and communicates with GWN; users can access real-time data of SN through GWN, and decide whether to take measures according to the application requirements in specific environments. Since the data collected by sensors is transmitted through wireless public channels, it is easy to be intercepted or even tampered by attackers, so the security issue of WSNs is very important.

In the existing WSN security authentication protocol, only the privacy protection of legal user identity and location information is considered. However, as another important component in WSN - the type of information that sensor nodes are responsible for collecting is closely related to its type, and each sensor node is only responsible for collecting information within a specific range. Therefore, it is usually necessary to configure the target area reasonably according to the sensor node's function and acquisition range. In this case, the attacker may analyze the sensitive information of the target user through the identity information of the sensor node, and analyze the target range of the information collected by the user through the location information of the sensor node, resulting in the leakage of important data.

Contents of the invention

(1) Technical problems to be solved

In view of the above-mentioned shortcomings and deficiencies of the prior art, the present application provides an authentication and key agreement method, a gateway, a sensor, and electronics and equipment.

(2) Technical solutions

In order to achieve the above object, the application adopts the following technical solutions:

In a first aspect, an embodiment of the present application provides an authentication and key agreement method for a wireless sensor network, where the wireless sensor network includes a sensor, a gateway, a smart card, and a user equipment, and the method includes:

S10. The user equipment verifies the user identity through the smart card according to the identity information input by the user, and sends login information to the gateway after the authentication is passed, and the login information includes a pseudo-random user identity;

S20. The gateway verifies the identity of the user according to the login information, and after passing the verification, generates the access request information of the target sensor based on the first preset parameters of the gateway, and updates the first preset parameters of the gateway; Preset parameters include pseudo-random sensor identity and shared key between sensor nodes and gateway nodes;

S30, the target sensor verifies the access request information, updates the sensor preset parameters after the verification is passed, generates a session key, and sends it to the gateway based on the session key and the updated sensor preset parameters Request information, the sensor preset parameters include pseudo-random sensor identity, shared key between sensor nodes and gateway nodes;

S40. The gateway calculates the session key and verifies the request passing information, and generates access confirmation information based on the second preset parameter of the gateway after the verification is passed, and updates the second preset parameter of the gateway, and the gateway The second preset parameter includes a pseudo-random user identity, a shared key between the user and the gateway node;

S50. The user equipment calculates the session key and verifies the access confirmation information, and updates the preset parameters of the smart card after the verification is passed, and the preset parameters of the smart card include pseudo-random user identity, shared between the user and the gateway node key;

S60. The user equipment and the sensor perform secure communication by using the session key.

Optionally, the access request information also includes the number of updates of the first preset parameter of the gateway, then:

After the verification in S30 is passed, it also includes: updating the shared key between the sensor node and the gateway node in the sensor preset parameter according to the update times of the first preset parameter of the gateway;

The sensor preset parameter further includes a sensor serial number, and the gateway first preset parameter further includes a sensor serial number at the gateway node side.

Optionally, the access confirmation information includes the number of updates of the second preset parameter of the gateway, then:

After the verification in S50 is passed, it also includes: updating the shared key between the user and the gateway node in the smart card preset parameters according to the update times of the second preset parameters of the gateway;

The smart card preset parameters also include a user serial number, and the gateway second preset parameters also include a user ID and a user serial number at the gateway node side.

Optionally, the S20 includes:

S201. The gateway receives the login information, and detects the time validity of the login information according to the timestamp in the login information;

S202. If the detection passes, extract the user identity and the shared key between the user and the gateway node from the second preset parameter of the gateway according to the pseudo-random user identity;

S203. The gateway calculates an actual authentication value based on the user identity, the shared key between the user and the gateway node, and the login information, and verifies the validity of the user identity;

S204. If the verification is passed, calculate the sensor ID and search whether the sensor ID exists in the first preset parameter of the gateway;

S205. If it exists, based on the second key parameter information and the second authentication value generated by the hash function based on the second random number, the second random number is generated by the gateway;

S206. The gateway updates the pseudo-random user identity, the user serial number on the gateway node side, and the shared key between the user and the gateway node,

S207. The gateway sends the updated user serial number on the gateway node side, the time stamp, the second key parameter information, and the second authentication value to the target sensor as access request information.

Optionally, S30 includes:

S301. The target sensor receives the access request information, detects the time validity of the access request information according to the time stamp in the access request information, and detects the access request information according to the user serial number on the gateway node side synchronicity;

S302. If the detection is passed, update the shared key between the sensor node and the gateway node according to the user serial number on the gateway node side;

S303. Calculate an actual authentication value based on the updated shared key between the sensor node and the gateway node, and verify the validity of the gateway;

S304. If the verification is passed, the target sensor updates the pseudo-random sensor identity, the serial number on the sensor side, and the shared key between the sensor node and the gateway node;

S305. Generate third key parameter information and a third authentication value through the hash function based on a third random number, where the third random number is generated by the target sensor;

S305. The target sensor sends the third key parameter information, the third authentication value, and a time stamp to the gateway as request passing information.

Optionally, the smart card preset parameters also include user registration verification value, user-side serial number initial value, hash function, user identity information value, and user biological public parameters, and the preset parameters are generated when the user performs identity registration of.

Optionally, the S10 includes:

S101. The user equipment acquires identity information input by the user, and calculates a verification value according to smart card preset parameters and the identity information;

S102. Verify the identity information by comparing the verification value with the user registration verification value;

S103. When the verification is passed, for the target sensor, based on the first key parameter information and the first authentication value generated by the hash function based on the first random number, the first random number is generated by the smart card;

S104. The user equipment sends the pseudo-random user identity, the time stamp, the first key parameter information, and the first authentication value to the gateway as login information.

In a second aspect, the embodiment of the present application provides a sensor, including:

A first verification module, configured to verify the access request information;

The parameter update module is used to update the sensor preset parameters after the verification is passed, and the sensor preset parameters include pseudo-random sensor identification, shared keys between sensor nodes and gateway nodes;

A key generation module, configured to generate a session key, and send request passing information to the gateway based on the session key and the updated sensor preset parameters;

A first communication module, configured to use the session key to perform secure communication with the user equipment.

In a third aspect, the embodiment of the present application provides a gateway, including:

The access request information generation module is used to verify the identity of the user according to the login information. After the verification is passed, the access request information of the target sensor is generated based on the first preset parameters of the gateway, and the first preset parameters of the gateway are updated; the first preset parameters of the gateway are updated; A preset parameter includes a pseudo-random sensor identity and a shared key between the sensor node and the gateway node;

The access confirmation information generation module is used to calculate the session key and verify the request passing information. After the verification is passed, the access confirmation information is generated based on the second preset parameter of the gateway, and the second preset parameter of the gateway is updated. The second preset parameters of the gateway include a pseudo-random user identity and a shared key between the user and the gateway node.

In a fourth aspect, the embodiment of the present application provides an electronic device, including:

The login information generating module is used to verify the identity of the user through the smart card according to the identity information input by the user, and sends the login information to the gateway after the verification is passed, and the login information includes a pseudo-random user identity;

The verification module is used to calculate the session key and verify the access confirmation information. After the verification is passed, the smart card preset parameters are updated, and the smart card preset parameters include a pseudo-random user identity, a shared key between the user and the gateway node;

The second communication module is configured to use the session key to perform secure communication with the target sensor.

(3) Beneficial effects

The beneficial effects of the present application are: the present application proposes a wireless sensor network authentication and key agreement method, device, and readable storage medium, wherein the method includes: the user equipment verifies the user identity through a smart card according to the identity information input by the user, Send login information to the gateway; the gateway verifies the user's identity, generates the access request information of the target sensor based on the first preset parameters of the gateway, and updates the first preset parameters of the gateway; the target sensor verifies the access request information, and after the verification passes, the The sensor preset parameters are updated, a session key is generated, and the request pass information is sent to the gateway; the gateway calculates the session key and verifies the request pass information, generates access confirmation information and updates the second gateway preset parameter; the user device calculates the session The key is used to verify the access confirmation information and update the preset parameters of the smart card; the user equipment and the sensor use the session key for secure communication. Through the wireless sensor network authentication and key agreement method of the present application, the anonymity, non-traceability and confidentiality of communication of sensor nodes are realized, and the security of user data is guaranteed.

Description of drawings

The application is described with the aid of the following figures:

FIG. 1 is a schematic flow diagram of an authentication and key agreement method for a wireless sensor network in an embodiment of the present application;

Fig. 2 is the data flow diagram of user registration process in another embodiment of the present application;

FIG. 3 is a data flow diagram of a sensor registration process in another embodiment of the present application;

FIG. 4 is a data flow diagram of a wireless sensor network authentication and key agreement process in another embodiment of the present application;

FIG. 5 is a data flow diagram of a password and biometric key update process in another embodiment of the present application;

FIG. 6 is a schematic structural diagram of the sensor in Embodiment 3 of the present application;

FIG. 7 is a schematic diagram of a gateway structure in Embodiment 4 of the present application;

FIG. 8 is a schematic structural diagram of an electronic device in Embodiment 5 of the present application.

Detailed ways

In order to better explain the present invention and facilitate understanding, the present invention will be described in detail below through specific embodiments in conjunction with the accompanying drawings. It should be understood that the specific embodiments described below are only used to explain related inventions, rather than to limit the invention. In addition, it should be noted that, in the case of no conflict, the embodiments in the present application and the features in the embodiments can be combined with each other; for the convenience of description, only the parts related to the invention are shown in the drawings.

Embodiment one

The authentication and key negotiation method for a wireless sensor network in this embodiment is applied to a wireless sensor network. The wireless sensor network includes a sensor, a gateway, a smart card, and a user device. Wherein, the user logs in and accesses the target sensor through the user device and the smart card, and the user device can Terminal devices such as mobile phones, tablets, and computers are not limited here; there can be one or more sensors and gateways, and each sensor is connected to the gateway through a wireless network. The sensor is used to collect data and send the collected data to the gateway. The gateway processes the data and sends the processed data results to the user device; the user needs to register with the gateway before logging in, and then perform security authentication and key negotiation through the gateway and the sensor.

Fig. 1 is a schematic flow diagram of a method for authentication and key agreement of a wireless sensor network in an embodiment of the present application. As shown in Fig. 1, this embodiment includes:

S10. The user device verifies the user identity through the smart card according to the identity information input by the user, and sends login information to the gateway after the verification is passed, and the login information includes a pseudo-random user identity;

S20. The gateway verifies the identity of the user according to the login information, and after passing the verification, generates the access request information of the target sensor based on the first preset parameters of the gateway, and updates the first preset parameters of the gateway; the first preset parameters of the gateway include pseudo-random sensor identities Identification and shared keys between sensor nodes and gateway nodes;

S30, the target sensor verifies the access request information, updates the sensor preset parameters after the verification is passed, generates a session key, and sends request passing information to the gateway based on the session key and the updated sensor preset parameters, and the sensor preset parameters Including pseudo-random sensor identity, shared key between sensor nodes and gateway nodes;

S40. The gateway calculates the session key and verifies the request passing information. After the verification is passed, the access confirmation information is generated based on the second preset parameter of the gateway, and the second preset parameter of the gateway is updated. The second preset parameter of the gateway includes a pseudo-random User identity, shared key between user and gateway node;

S50. The user equipment calculates the session key and verifies the access confirmation information. After the verification is passed, the smart card preset parameters are updated. The smart card preset parameters include a pseudo-random user identity, a shared key between the user and the gateway node;

S60. The user equipment and the sensor perform secure communication using the session key.

The authentication and key agreement method of the wireless sensor network in this embodiment adopts the dynamic pseudo-random identity identification technology to realize the privacy protection of the user and the sensor node, that is, the pseudo-random user identification and the pseudo-random sensor identification are used to realize the sensor node The anonymity of the sensor node is achieved by updating the pseudo-random user ID and the pseudo-random sensor ID after each successful authentication negotiation, and the untraceability of the sensor node is realized, and the confidentiality of communication is realized by updating the preset parameters of the current device, ensuring user data security.

In order to better understand the present invention, each step in this embodiment is described below.

S10. The user equipment authenticates the user identity through the smart card according to the identity information input by the user, and sends login information to the gateway after the authentication is passed, where the login information includes a pseudo-random user identity identifier.

In this embodiment, the user's identity information may include, but not limited to, an identity mark, an identity password, and a user's biometric feature. The smart card can be a separate memory card, or a storage space specified in the user terminal, which is not limited here. The preset parameters stored in the smart card are the parameters written into the smart card by the client and the gateway during the identity registration process of the user.

In this embodiment, the smart card preset parameters also include user registration verification value, user-side serial number initial value, hash function, user identity information value, and user biological public parameters. The preset parameters are generated when the user performs identity registration.

The user terminal can obtain the identity information input by the user, read the stored preset parameters from the smart card, and calculate the verification value according to the preset parameters and identity information stored in the smart card. The verification value is used to verify the identity information entered by the user.

Specifically, in this embodiment, S10 includes:

S101. The user equipment acquires identity information input by the user, and calculates a verification value according to smart card preset parameters and the identity information;

S102. Verify the identity information by comparing the verification value with the user registration verification value;

S103. When the verification is passed, for the target sensor, based on the first key parameter information and the first authentication value generated by the hash function based on the first random number, the first random number is generated by the smart card;

S104. The user equipment sends the pseudo-random user identity, the time stamp, the first key parameter information, and the first authentication value to the gateway as login information.

In this embodiment, a one-way hash function may be used as a parameter update method.

When each participant succeeds in each authentication negotiation, the shared key between the user and the gateway node, and the shared key between the sensor node and the gateway node will be updated through a one-way hash function. Therefore, the attacker cannot obtain the previous shared key between the user and the gateway node, the shared key between the sensor node and the gateway node from this shared key, so as to realize the forward communication between the user, the gateway node and the sensor node. Security ensures the confidentiality of communication.

In this embodiment, the access request information also includes the update times of the first preset parameter of the gateway, then:

After the verification in S30 is passed, it also includes: updating the shared key between the sensor node and the gateway node in the sensor preset parameter according to the update times of the first preset parameter of the gateway;

The sensor preset parameter also includes the sensor serial number, and the gateway first preset parameter also includes the sensor serial number at the gateway node side.

The access confirmation information also includes the update times of the second preset parameter of the gateway, then:

After the verification in S50 is passed, it also includes: updating the shared key between the user and the gateway node in the smart card preset parameters according to the update times of the gateway second preset parameters;

The smart card preset parameter also includes the user serial number, and the gateway second preset parameter also includes the user identity mark and the user serial number at the gateway node side.

This embodiment adopts the serial number method to realize the anti-desynchronization attack of the protocol, that is, use the user serial number and user serial number on the gateway node side, the sensor serial number and the sensor serial number on the gateway node side to realize the sensor node and the gateway node. Synchronization between users and gateway nodes.

In this embodiment, S20 includes:

S201. The gateway receives the login information, and detects the time validity of the login information according to the time stamp in the login information;

S202. If the detection passes, extract the user identity and the shared key between the user and the gateway node from the second preset parameter of the gateway according to the pseudo-random user identity;

S203. The gateway calculates an actual authentication value based on the user identity, the shared key between the user and the gateway node, and the login information, and verifies the validity of the user identity;

S204. If the verification is passed, calculate the sensor ID and search whether the sensor ID exists in the first preset parameter of the gateway;

S205. If it exists, based on the second key parameter information and the second authentication value generated by the hash function based on the second random number, the second random number is generated by the gateway;

S206. The gateway updates the pseudo-random user identity, the user serial number on the gateway node side, and the shared key between the user and the gateway node,

S207. The gateway sends the updated user serial number on the gateway node side, the time stamp, the second key parameter information, and the second authentication value to the target sensor as access request information.

In this embodiment, S30 includes:

S301. The target sensor receives the access request information, detects the time validity of the access request information according to the time stamp in the access request information, and detects the access request information according to the user serial number on the gateway node side synchronicity;

S302. If the detection passes, update the shared key between the sensor node and the gateway node according to the user serial number on the gateway node side;

S303. Calculate an actual authentication value based on the updated shared key between the sensor node and the gateway node, and verify the validity of the gateway;

S304. If the verification is passed, the target sensor updates the pseudo-random sensor identity, the serial number on the sensor side, and the shared key between the sensor node and the gateway node;

S305. Generate third key parameter information and a third authentication value through the hash function based on a third random number, where the third random number is generated by the target sensor;

S305. The target sensor sends the third key parameter information, the third authentication value, and a time stamp to the gateway as request passing information.

The method in this embodiment is an AKA protocol suitable for WSNs environment, which can effectively prevent unauthorized access and ensure the availability and security of WSNs communication.

Embodiment two

On the basis of the first embodiment, this embodiment describes in detail the specific implementation process of the method proposed in the application. The method includes four execution subjects: user, smart card, sensor node and gateway node. The user here refers to the device used on the user side. The steps of the method include:

S1. Device initialization, including:

Step a1, the gateway node selects two random integers as the gateway node identity ID _G and the gateway node master key K, and stores them in the gateway node's memory;

Step a2, the gateway node selects the sensor node identity ID _S for the sensor node, and stores it in the memory of the sensor node;

Step a3, the gateway node pre-initializes all smart cards, selects a smart card ID _SC for each smart card and stores it in the smart card.

S2. User registration and sensor node registration.

When a new user wants to access the data collected by sensor nodes in WSNs, he must complete legal registration to the gateway node. Fig. 3 is a data flow diagram of the user registration process in another embodiment of the application. Please refer to Fig. 3, and the user registration steps include :

Step b1, the new user inserts the smart card pre-assigned to him/her into the system card reader, reads its ID _SC and sends it to the gateway node through a secure channel;

Step b2. After receiving the ID _SC , the gateway node first checks whether it exists in the smart card database. If it exists, the gateway node returns the confirmation value Conf to the user. Otherwise, deny the registration request;

Step b3, the user sets the user identity ID _U and the user password PW _U , and enters the user biometric BIO _U through the biometric information collection device. Afterwards, the client generates a random number a _i and calculates and generates the user biometric key BK _i , the user biometric public parameter P _i , and the pseudo-random user password MPW _U :

Gen(BIO _U )＝(BK _i ,P _i )

MPW _U ＝h(ID _U ||PW _U ||BK _i ||a _i )

Among them, h( ) represents a one-way hash function, and x||y represents a join operation on x and y.

Send the registration information {ID _U , MPW _U } to the gateway node through a secure channel;

Step b4. After the gateway node receives the registration information, it first checks whether the user identity ID _U exists in the user database. If present, the gateway node rejects the registration request and requires the user to enter a new ID _U . Otherwise, the gateway node calculates the shared key K _GU and the pseudo-random user identity ID _U between the user and the gateway node:

K _GU ＝h(ID _U ||ID _G ||MPW _U ||K)

MID _U ＝h(ID _U ||ID _G ||K _GU )

Among them, K represents the master key of the gateway node.

Set the serial number initial value NU _i =NU _i0 =0, where NU _i0 represents the serial number of the user side, NU _i represents the user serial number of the gateway node side, and calculates the user registration verification value D _i :

D _i ＝h(ID _U ||K _GU ||MPW _U ) mod n ₀

Wherein, n ₀ is an integer between ²⁴ and ²⁸ .

Then store the information <ID _U , MID _U , K _GU , NU _i > in the user database. At the same time, the gateway node initializes the value FAIL for recording the number of user login failures to NULL. Finally, the gateway node writes the information <MID _U , D _i , K _GU , NU _i0 , FAIL, h( )> into the smart card and sends it to the user through a secure channel;

Step b5. After the user receives the information from the gateway node, calculate the user identity information value A _i , and write the information _{<A i , P i >} into the smart card,

in,

Indicates an XOR operation.

Finally, the smart card contains the information <MID _U ,A _i ,D _i ,P _i ,K _GU ,NU _i0 ,FAIL,h(·)>.

When sensor nodes need to join WSNs and perform data collection work, they must complete legal registration with gateway nodes. Fig. 4 is a data flow diagram of the sensor registration process in another embodiment of the present application, referring to Fig. 4, the sensor registration steps include:

Step c1, the new sensor node sends the sensor node identity ID _S to the gateway node through a secure channel;

Step c2. After the gateway node receives the identity ID _S , it first checks whether it exists in the sensor node database. If not present, the gateway node rejects the registration request. Otherwise, the gateway node generates a random number m _j and calculates the shared key K _GS and the pseudo-random sensor ID MID _S between the sensor node and the gateway node:

K _GS ＝h(ID _S ||ID _G ||K||m _j )

MID _S ＝h(ID _S ||ID _G ||K _GS )

The gateway node sets the initial value of the serial number NS _k = NS _k0 = 0, where NS _k is the serial number of the sensor on the gateway node side, NS _k0 is the serial number on the sensor node side, and stores information <ID _S , MID _S , K _GS , NS _k > to sensor data sheet. Finally, send information { _MIDS , K _GS , NS _k0 } to the sensor nodes through a secure channel;

Step c3. After receiving the information from the gateway node, the sensor node stores the information { _MIDS , K _GS , NS _k0 } into memory and deletes the identity ID _S .

S3. User login and authentication negotiation.

It should be noted that, in the following embodiments, the parameters marked with * are parameters input or generated during the user login and authentication negotiation process, or the same parameters stored in different devices, and the parameter meanings are the same as those in S1 and S2 The same, and will not be described one by one below.

When a user needs to obtain data collected by a sensor node, he/she needs to log in to the gateway node first. FIG. 5 is a data flow diagram of the wireless sensor network authentication and key negotiation process in another embodiment of the present application. Please refer to FIG. 5. The user login and authentication negotiation process includes:

Step d1, the user inserts the smart card into the card reader, enters the user identity ID _U and the user password PW _U and enters

Afterwards the smart card calculates:

Will

Compare with the D _i stored in it. If the two are not equal, reject the login request and increment the value of FAIL by 1. When the value of FAIL exceeds the preset threshold, it is considered that the smart card is not safe, and it will be suspended until the user re-registers. Otherwise, the smart card completes the authentication of the user's validity and executes subsequent procedures.

The smart card generates a random number R _i and obtains the current time stamp T ₁ . After that, the user selects the sensor node that he wants to visit, and calculates the temporary sensor ID TID _s :

V ₁ ＝h(ID _U ||R ₁ ||K _GU ||T ₁ )

Finally, the user sends the login information Msg1:{MID _U ,M ₁ ,V ₁ ,T ₁ } to the gateway node through the public channel;

Step d2. When the gateway node receives the login information Msg1 from the user, it first checks the validity of the time stamp. The gateway node gets the current time

And compare it with the received time _T1 . if

If the value exceeds the preset threshold - the maximum transmission delay time ΔT, the session is terminated. Otherwise, the gateway node extracts the corresponding ID _U and K _GU from the user database through the pseudo-random user ID MID _U. Afterwards, the gateway node computes:

Will

Compare with received _V1 . If the two are not equal, terminate the session. Otherwise, the gateway node confirms the legitimacy of the user, calculates the ID _S of the sensor node through the following formula and searches whether the ID _S exists in the sensor database.

If present, the gateway node extracts the corresponding MID _S and K _GS . Afterwards, the gateway node generates a random number R _j , obtains the current timestamp T ₂ , and calculates:

V ₂ =h(ID _U ||R _i ||R _j ||K _GS ||NS _k ||T ₂ ).

Finally, the gateway node updates K _GS , _MIDS and NS _k through the following formulas, and sends information Msg2: {M ₂ , V ₂ , NS _k , T ₂ } to the sensor nodes through the public channel.

K _GS ＝h(K _GS )

MID _S ＝h(ID _S ||ID _G ||K _GS )

NS _k =NS _k +1

Step d3, when the sensor node receives the information Msg2 from the gateway node, first detect

and whether NS _k -NS _k0 ≥ 1 holds true. If not, terminate the session. Otherwise, the sensor node orders:

N=NS _k -NS _k0

and calculate N–1 times

Afterwards, the sensor nodes compute:

and will

Compare with received _V2 . If both are equal, the sensor node passes

K _GS ＝h(K _GS ^* ||ID _S ||ID _G )

MID _S ＝h(ID _S ||ID _G ||K _GS )

NS _k0 = NS _k

Update K _GS , MID _S and NS _k0 respectively. Next, the sensor node generates a random number R _k , obtains the current timestamp T ₃ and calculates:

SK＝h(ID _U ||ID _G ||ID _S ||R _i ||R _j ||R _k )

V ₃ ＝h(MID _S ||ID _U ||SK||R _k ||NS _k0 ||T ₃ )

Among them, SK is a session key.

Finally, the sensor node sends information Msg3: {M ₃ , V ₃ , T ₃ } to the gateway node through the public channel;

Step d4, when the gateway node receives the message Msg3 from the sensor node, it first detects the freshness of _T3 , and calculates:

Afterwards, the gateway node will

Compare with received _V3 . If the two are not equal, terminate the session. Otherwise, the gateway node gets the current timestamp T ₄ and calculates:

V ₄ ＝h(ID _U ||MID _U ||SK||R _j ||NU _i ||T ₄ )

Then pass:

K _GU ＝h(K _GU ||ID _U )

MID _U ＝h(MID _U ||ID _G ||K _GU )

NU _i = NU _i +1

Update K _GU , MID _U and NU _i respectively. Finally, the gateway node sends information Msg4:{M ₄ ,V ₄ ,NU _i ,T ₄ } to the user through the public channel;

Step d5, when the user receives the information Msg4 from the gateway node, first detect

and whether NU _i -NU _i0 ≥ 1 holds true. If not, terminate the session. Otherwise, the user lets M = NU _i - NU _i0 and

and compute M–1 times

Afterwards, the user computes:

SK＝h(ID _U ||ID _G ||ID _S ||R _i ||R _j ||R _k )

Next, the user will

Compare with received V ₄ . If equal, the user passes

K _GU ＝h(K _GU ^* ||ID _U )

MID _U ＝h(MID _U ||ID _G ||K _GU )

NU _i0 = NU _i

Update K _GU , MID _U and NU _i0 respectively. Finally, the user completes the authentication and negotiation process.

In this embodiment, the serial number method is used to realize the anti-desynchronization attack of authentication and negotiation, that is, use NU _i and NU _i0 , NS _k and NS _k0 to realize the synchronization between the user and the gateway node, the sensor node and the gateway node respectively It maintains the consistency between users, gateway nodes and sensor nodes, thereby avoiding the interruption of the synchronization process between the participants caused by the attacker's blocking attack on the authentication negotiation process.

In this embodiment, it may also include

S4. The user updates the password or biometric information.

FIG. 6 is a data flow diagram of a password and biometric key update process in another embodiment of the present application. Please refer to FIG. 6. When a user needs to update a password or biometric information, he/she needs to perform the following process.

Step e1, the user inserts the smart card into the card reader, enters ID _U and PW _U and enters

Smart card calculations:

Afterwards, the smart card will

Compare with the D _i stored in it. If the two are not equal, the smart card rejects the password/biometric information update request. Otherwise, the smart card confirms the user's validity and allows the user to enter a new user password

or new user biometrics

At the same time, the smart card generates a random number _bi and obtains the current timestamp T _c1 , and then calculates:

Finally, send the request information {MPW _U ,M _c1 ,V _c1 ,T _c1 } to the gateway node;

Step e2, after the gateway node receives the request information from the user, it first checks the freshness of T _c1 . If the conditions are met, the gateway node searches the user database for the corresponding ID _U , K _GU and MPW _U through MID _U , and calculates:

Afterwards, the gateway node detects whether V _c1 ^* =V _c1 is established, and if it is established, the gateway node generates a random number n _j and obtains the current time stamp T _c2 . Then calculate:

Finally, the gateway node sends the reply information {M _c2 , V _c2 , T _c2 } to the user and updates the corresponding data;

Step e3, after the smart card receives the reply message from the gateway node, it first checks the freshness of _Tc2 . If the conditions are met, the smart card calculates:

Afterwards, the smart card detects

Are they equal, and if so, the smart card calculates:

Replace D _i , A _i , P _i , MID _U and K _GU in memory with

Otherwise, the UE immediately terminates this phase and retries the password/biometric information update process.

It should be noted that, in this embodiment, the key parameter information M ₁ , M ₂ , M ₃ , M ₄ , Mc ₁ , and Mc ₂ can also be transmitted using a symmetric encryption algorithm between the user, the gateway node and the sensor node; Information V ₁ , V ₂ , V ₃ , V ₄ , Vc ₁ , and Vc ₂ mutually authenticated by users, gateway nodes, and sensor nodes can also use message authentication codes based on hash functions.

The invention proposes a safe lightweight identity authentication method, which is based on the combination of hash function and XOR operation, adopts the three-factor authentication method combining user password, user biometric feature and smart card, and reduces the impact of identity authentication protocol on sensors. The energy consumption overhead caused by the network improves the efficiency of the sensor network.

Embodiment Three

The second aspect of the present application provides a sensor through the third embodiment. FIG. 6 is a schematic structural diagram of the sensor in the third embodiment of the present application. As shown in FIG. 6, the sensor includes:

The first verification module 11 is configured to verify the access request information;

The parameter update module 12 is used to update the sensor preset parameters after the verification is passed, and the sensor preset parameters include a pseudo-random sensor identification, a shared key between sensor nodes and gateway nodes;

The key generation module 13 is used to generate a session key, and sends request passing information to the gateway based on the session key and the updated sensor preset parameters;

The first communication module 14 is configured to use the session key to perform secure communication with the user equipment.

The sensor provided in this embodiment can be used to execute the steps in the above method embodiments where the sensor is the main execution body, and its implementation principle and technical effect are similar, so this embodiment will not repeat them here.

Embodiment Four

The third aspect of the present application provides a gateway through the fourth embodiment. FIG. 7 is a schematic structural diagram of the gateway in the fourth embodiment of the present application. As shown in FIG. 7, the gateway includes:

The access request information generation module 21 is used to verify the user identity according to the login information, and after the verification is passed, the access request information of the target sensor is generated based on the first preset parameters of the gateway, and the first preset parameters of the gateway are updated; Parameters include pseudo-random sensor identity and shared key between sensor nodes and gateway nodes;

The access confirmation information generation module 22 is used to calculate the session key and verify the request passing information. After the verification is passed, the access confirmation information is generated based on the second preset parameters of the gateway, and the second preset parameters of the gateway are updated. The preset parameters include a pseudo-random user identity, a shared key between the user and the gateway node.

The gateway provided in this embodiment can be used to execute the steps in the above method embodiments where the gateway is the execution subject, and its implementation principle and technical effect are similar, so this embodiment will not repeat them here.

Embodiment five

The fourth aspect of the present application provides an electronic device through Embodiment 5. FIG. 8 is a schematic structural diagram of the electronic device in Embodiment 5 of the present application. As shown in FIG. 8 , the electronic device includes:

Login information generating module 31, used for verifying user identity by smart card according to the identity information input by the user, and sending login information to gateway after verification, and login information includes pseudo-random user identification;

The verification module 32 is used to calculate the session key and verify the access confirmation information. After the verification is passed, the smart card preset parameters are updated, and the smart card preset parameters include a pseudo-random user identity, a shared key between the user and the gateway node;

The second communication module 33 is configured to use the session key to perform secure communication with the target sensor.

The electronic device provided in this embodiment can be used to execute the steps in the above method embodiments where the user equipment is the execution subject. The implementation principles and technical effects are similar, and details will not be repeated here in this embodiment.

Practicality

Since the authentication and key agreement method of the wireless sensor network in the present invention realizes the anonymity, non-traceability and confidentiality of communication of the sensor nodes, and guarantees the security of user data, thus, the authentication of the wireless sensor network of the present invention Has utility with the key agreement method.

It should be noted that, in the claims, any reference signs placed between parentheses shall not be construed as limiting the claim. The word "comprising" does not exclude the presence of elements or steps not listed in a claim. The word "a" or "an" preceding an element does not exclude the presence of a plurality of such elements. The invention can be implemented by means of hardware comprising several distinct elements, and by means of a suitably programmed computer. The use of the words first, second, third, etc. is for convenience of presentation only and does not indicate any order. These words are to be understood as part of the name of the part.

In addition, it should be noted that, in the description of this specification, descriptions of terms such as "one embodiment", "some embodiments", "embodiment", "example", "specific example" or "some examples" are It means that a specific feature, structure, material or characteristic described in connection with the embodiment or example is included in at least one embodiment or example of the present invention. In this specification, the schematic representations of the above terms are not necessarily directed to the same embodiment or example. Furthermore, the described specific features, structures, materials or characteristics may be combined in any suitable manner in any one or more embodiments or examples. In addition, those skilled in the art can combine and combine different embodiments or examples and features of different embodiments or examples described in this specification without conflicting with each other.

While preferred embodiments of the invention have been described, additional changes and modifications to these embodiments can be made by those skilled in the art once the basic inventive concept is understood. Therefore, the claims should be construed to include the preferred embodiments and all changes and modifications that fall within the scope of the present invention.

Obviously, those skilled in the art can make various modifications and variations to the present invention without departing from the spirit and scope of the present invention. Thus, if these modifications and variations of the present invention fall within the scope of the claims of the present invention and equivalent technologies, the present invention should also include these modifications and variations.

Claims (10)

1. An authentication and key agreement method for a wireless sensor network, characterized in that the wireless sensor network includes a sensor, a gateway, a smart card, and a user equipment, and the method includes:

   S10. The user equipment verifies the user identity through the smart card according to the identity information input by the user, and sends login information to the gateway after the authentication is passed, and the login information includes a pseudo-random user identity;

   S20. The gateway verifies the identity of the user according to the login information, and after passing the verification, generates the access request information of the target sensor based on the first preset parameters of the gateway, and updates the first preset parameters of the gateway; Preset parameters include pseudo-random sensor identity and shared key between sensor nodes and gateway nodes;

   S30, the target sensor verifies the access request information, updates the sensor preset parameters after the verification is passed, generates a session key, and sends it to the gateway based on the session key and the updated sensor preset parameters Request information, the sensor preset parameters include pseudo-random sensor identity, shared key between sensor nodes and gateway nodes;

   S40. The gateway calculates the session key and verifies the request passing information, and generates access confirmation information based on the second preset parameter of the gateway after the verification is passed, and updates the second preset parameter of the gateway, and the gateway The second preset parameter includes a pseudo-random user identity, a shared key between the user and the gateway node;

   S50. The user equipment calculates the session key and verifies the access confirmation information, and updates the preset parameters of the smart card after the verification is passed, and the preset parameters of the smart card include pseudo-random user identity, shared between the user and the gateway node key;

   S60. The user equipment and the sensor perform secure communication by using the session key.
2. The authentication and key agreement method for a wireless sensor network according to claim 1, wherein the access request information also includes the number of updates of the first preset parameter of the gateway, then:

   After the verification in S30 is passed, it also includes: updating the shared key between the sensor node and the gateway node in the sensor preset parameter according to the update times of the first preset parameter of the gateway;

   The sensor preset parameter also includes a sensor serial number, and the first gateway preset parameter also includes a sensor serial number on the gateway node side.
3. The authentication and key agreement method for a wireless sensor network according to claim 2, wherein the access confirmation information also includes the number of updates of the second preset parameter of the gateway, then:

   After the verification in S50 is passed, it also includes: updating the shared key between the user and the gateway node in the smart card preset parameters according to the update times of the second preset parameters of the gateway;

   The smart card preset parameters also include a user serial number, and the gateway second preset parameters also include a user ID and a user serial number at the gateway node side.
4. The authentication and key agreement method for a wireless sensor network according to claim 3, wherein S20 includes:

   S201. The gateway receives the login information, and detects the time validity of the login information according to the timestamp in the login information;

   S202. If the detection passes, extract the user identity and the shared key between the user and the gateway node from the second preset parameter of the gateway according to the pseudo-random user identity;

   S203. The gateway calculates an actual authentication value based on the user identity, the shared key between the user and the gateway node, and the login information, and verifies the validity of the user identity;

   S204. If the verification is passed, calculate the sensor ID and search whether the sensor ID exists in the first preset parameter of the gateway;

   S205. If it exists, based on the second key parameter information and the second authentication value generated by the hash function based on the second random number, the second random number is generated by the gateway;

   S206. The gateway updates the pseudo-random user identity, the user serial number on the gateway node side, and the shared key between the user and the gateway node,

   S207. The gateway sends the updated user serial number on the gateway node side, the time stamp, the second key parameter information, and the second authentication value to the target sensor as access request information.
5. The authentication and key agreement method for a wireless sensor network according to claim 3, wherein S30 includes:

   S301. The target sensor receives the access request information, detects the time validity of the access request information according to the time stamp in the access request information, and detects the access request information according to the user serial number on the gateway node side synchronicity;

   S302. If the detection passes, update the shared key between the sensor node and the gateway node according to the user serial number on the gateway node side;

   S303. Calculate an actual authentication value based on the updated shared key between the sensor node and the gateway node, and verify the validity of the gateway;

   S304. If the verification is passed, the target sensor updates the pseudo-random sensor identity, the serial number on the sensor side, and the shared key between the sensor node and the gateway node;

   S305. Generate third key parameter information and a third authentication value through the hash function based on a third random number, where the third random number is generated by the target sensor;

   S305. The target sensor sends the third key parameter information, the third authentication value, and a time stamp to the gateway as request passing information.
6. The authentication and key agreement method for a wireless sensor network according to claim 1, wherein the smart card preset parameters also include a user registration verification value, an initial value of a user-side serial number, a hash function, and a user identity information value . The public biometric parameters of the user, the preset parameters are generated when the user performs identity registration.
7. The authentication and key agreement method for a wireless sensor network according to claim 6, wherein S10 includes:

   S101. The user equipment acquires identity information input by the user, and calculates a verification value according to smart card preset parameters and the identity information;

   S102. Verify the identity information by comparing the verification value with the user registration verification value;

   S103. When the verification is passed, for the target sensor, based on the first key parameter information and the first authentication value generated by the hash function based on the first random number, the first random number is generated by the smart card;

   S104. The user equipment sends the pseudo-random user identity, time stamp, the first key parameter information and the first authentication value to the gateway as login information.
8. A sensor, characterized in that it comprises:

   A first verification module, configured to verify the access request information;

   The parameter update module is used to update the sensor preset parameters after the verification is passed, and the sensor preset parameters include pseudo-random sensor identification, shared keys between sensor nodes and gateway nodes;

   A key generation module, configured to generate a session key, and send request passing information to the gateway based on the session key and the updated sensor preset parameters;

   A first communication module, configured to use the session key to perform secure communication with the user equipment.
9. A gateway, characterized in that it comprises:

   The access request information generation module is used to verify the identity of the user according to the login information. After the verification is passed, the access request information of the target sensor is generated based on the first preset parameters of the gateway, and the first preset parameters of the gateway are updated; the first preset parameters of the gateway are updated; A preset parameter includes a pseudo-random sensor identity and a shared key between the sensor node and the gateway node;

   The access confirmation information generation module is used to calculate the session key and verify the request passing information. After the verification is passed, the access confirmation information is generated based on the second preset parameter of the gateway, and the second preset parameter of the gateway is updated. The second preset parameters of the gateway include a pseudo-random user identity and a shared key between the user and the gateway node.
10. An electronic device, characterized in that it comprises:

    The login information generating module is used to verify the identity of the user through the smart card according to the identity information input by the user, and sends the login information to the gateway after the verification is passed, and the login information includes a pseudo-random user identity;

    The verification module is used to calculate the session key and verify the access confirmation information. After the verification is passed, the smart card preset parameters are updated, and the smart card preset parameters include a pseudo-random user identity, a shared key between the user and the gateway node;

    The second communication module is configured to use the session key to perform secure communication with the target sensor.

Images