物联网环境下设备间密钥协商协议研究

Malicious attacks to Internet of Things (IoT) happen frequently. As the cornerstone of IoT security technology, key establishment has been widely studied. However, existing key establishment protocols cannot be directly implemented by the Device to Device (D2D) communication in IoT. Considering the scenarios (such as Intelligent Traffic System, Intelligent Agriculture System and Smart Homes) and the characteristics of the D2D communication, this project investigates the following issues: 1. We design new cross-layer key establishment protocols for D2D communication by taking advantage of the characteristics of each layer; 2. We propose smart key establishment protocols for D2D communication using the characteristics of heterogeneous IoT; 3. Motivated by the observations that the device identification technique might be used to identify the source of devices, we present an improved lightweight key establishment protocol for energy-constraint devices using the characteristics of anonymous channel. The outcomes of this project will improve the security of D2D communications in IoT.

物联网安全事故频频发生，安全保护面临严峻挑战。密钥协商是保障物联网设备通信安全的基础组件，但现有的密钥协商协议与物联网中的设备到设备(Device to Device, D2D)通信不能较好匹配。针对物联网设备的特点及智能交通系统、智能农业系统、智能家居等具体的物联网应用场景，本项目拟对以下问题进行研究：1.针对各层的特点及D2D的具体应用场景，设计适用于D2D的新型跨层密钥协商协议；2.利用物联网的异构特性及D2D的特点，设计适用于D2D的智能密钥协商协议；3.研究设备识别技术对基于匿名信道特点设计的密钥协商协议的安全威胁，设计安全的轻量级D2D密钥协商协议以满足能量受限设备的安全需求。项目将提出一系列适用于物联网D2D通信的密钥协商协议，为物联网的进一步发展提供有力的安全支撑。

物联网安全事故频频发生，其安全问题引起高度关注。研究发现，现有的密钥协商协议无法满足物联网中设备到设备的安全需求。项目结合基于衰落信道的物理层安全机制与基于密码学的传统密钥协商机制，设计了新型跨层密钥协商协议。针对物联网设备具有感知周围环境的能力，设计了智能的密钥协商协议。此外，为了满足资源受限设备的安全需求，利用梅克尔困难问题等设计了轻量级的密钥协商协议。项目执行过程中，从理论研究、算法研究到设备实现，取得了一些研究成果，对物联网的安全应用提供了理论和技术支撑。