数联网环境下基于秘密共享的移动数据终端切换认证方案OA
Handover authentication scheme for mobile data terminal based on secret sharing in the data Internet
针对数联网环境中移动数据终端带来的认证时延与安全性问题,提出一种基于秘密共享的切换认证方案.引入互通域概念,结合马尔可夫过程预测节点信任状态,信任相近的节点动态聚合为可共享认证信息的逻辑子域,将全局认证简化为子域内的局部协作.针对高信任互通域,利用二元对称多项式的秘密共享特性,预先在子域内分发认证凭证,终端仅凭秘密份额即可实现切换认证,将传统的中心化认证转变为域内节点间的边缘认证,实现认证重心的下沉.通过Tamarin形式化验证方案安全性、评估计算与通信开销,结果表明,所提方案适用于数联网的高动态访问环境.
To address authentication delays and security issues caused by mobile data terminals in the data internet environ-ment,a handover authentication scheme based on secret sharing was proposed.The concept of interoperability domains was introduced,and a Markov process was employed to predict node trust states.Nodes with similar trust levels were dy-namically aggregated into logical subdomains sharing authentication information,reducing global authentication to local cooperation within subdomains.For high-trust interoperability domains,the secret-sharing property of bivariate symmetric polynomials was exploited to pre-distribute authentication credentials within each subdomain,enabling terminals to com-plete handover authentication using only their secret shares.Centralized authentication was thereby transformed into edge authentication among intra-domain nodes,pushing the authentication center down to the edge.The security of the scheme was formally verified using the Tamarin tool,and its computational and communication overheads were evaluated.Results show that the proposed scheme is suitable for highly dynamic access environments in the data Internet.
郭超;于梦格;张玲翠;翟佳乐;邓溶
北京电子科技学院电子与通信工程系,北京 100070||中国科学院信息工程研究所,北京 100085北京电子科技学院网络空间安全系,北京 100070中国科学院信息工程研究所,北京 100085||网络空间安全防御全国重点实验室,北京 100085||中国科学院大学网络空间安全学院,北京 100049中国科学院信息工程研究所,北京 100085||网络空间安全防御全国重点实验室,北京 100085||中国科学院大学网络空间安全学院,北京 100049北京电子科技学院网络空间安全系,北京 100070
信息技术与安全科学
数联网信任预测秘密共享切换认证
data Internetconfidence predictionsecret sharinghandover authentication
《通信学报》 2026 (5)
223-241,19
国家重点研发计划基金资助项目(No.2023YFB3106505)国家自然科学基金资助项目(No.U24A20240,No.62441226,No.62476013)中央高校基本科研业务费专项资金资助项目(No.3282024052)北京电子科技学院一流学科建设项目(No.20250001Z0411) The National Key Research and Development Program of China(No.2023YFB3106505),The National Natural Science Foundation of China(No.U24A20240,No.62441226,No.62476013),The Fundamental Research Funds for the Central Universi-ties(No.3282024052),Beijing Electronic Science and Technology Institute First-class Discipline Construction Project(No.20250001Z0411)
评论