一种雾计算辅助的工业物联网四方高效认证协议OA

To address the threats of eavesdropping,tampering,capture attacks,and sensitive data leakage faced by sensor de-vices in the evolving cloud-fog-end collaborative architecture of IIoT,this paper proposed a fog-assisted four-party segmented authentication and key agreement protocol.Based on the heterogeneous computational and storage capabilities of the cloud ser-ver,fog node,user terminal,and sensor device,the protocol adopted differentiated cryptographic primitives in a segmented de-sign:it used elliptic curve cryptography(ECC)between the cloud and fog layers,while applied lightweight operations between the fog and sensor,and between the user and cloud.In addition,the protocol employed physically unclonable function(PUF)to generate unique and unforgeable hardware fingerprints for sensor devices,and integrated fuzzy extractors to resist capture and impersonation attacks.Compared with several existing authentication and key agreement schemes,the proposed protocol reduces total computational cost by 93.28％,93.56％,88.44％,and 86.70％,and lowers communication overhead by 11.30％,16.02％,and 19.08％in certain comparisons.Security analysis confirms that the protocol satisfies multiple security properties and demonstrates superior overall performance.In summary,the proposed scheme achieves strong security while significantly reducing computational and communication overhead,meeting the practical requirements of low latency and high efficiency in IIoT environments.