IBEXSec：一种面向工业互联网终端的通用安全服务框架

doi:10.11959/j.issn.1000-0801.2020069

Abstract

Abstract:

s:With the development and application of the industrial internet platform,the security risks of massive heterogeneous terminals need to be solved urgently.Aiming at the current industrial internet terminal access and data transmission security problems,a universal terminal security service framework called IBEXSec based on the identity public key cryptographic service (IBE-XKMS) was proposed to support security functions such as secure access,authentication agents,cross-domain communications and privacy protection of heterogeneous terminal devices on the industrial internet.

Key words: industrial internet, terminal device, security authentication, IBE, key management

CLC Number:

TP309

Yuan CHEN,Tieming CHEN,Qijie SONG,Dongjie MA. IBEXSec:a universal security framework for industrial internet terminal access[J]. Telecommunications Science, 2020, 36(3): 19-26.

Figures/Tables 7

References 11

[1]	陈铁明, 李伟, 蔡家楣 ,等. IBE-XKMS:一个基于 XML 的IBE密钥管理服务体系[J]. 电信科学, 2010,26(7): 22-31.
	CHEN T M , LI W , CAI J M ,et al. IBE-XKMS:XML-based IBE key management service infrastructure[J]. Telecommunications Science, 2010,26(7): 22-31.
[2]	SATHYADEVAN S , ACHUTHAN K , DOSS R ,et al. Protean authentication scheme–a time-bound dynamic KeyGen authentication technique for IoT edge nodes in outdoor deployments[J]. IEEE Access, 2019: 92419-92435.
[3]	杨力, 马建峰, 朱建明 . 可信的匿名无线认证协议[J]. 通信学报, 2009,30(9): 29-35.
	YANG L , MA J F , ZHU J M . Trusted and anonymous authentication scheme for wireless networks[J]. Journal on Communications, 2009,30(9): 29-35.
[4]	谌双双, 陈泽茂, 王浩 . 基于 PKI 的通用无线认证协议研究[J]. 计算机科学, 2012,39(7): 74-77.
	CHEN S S , CHEN Z M , WANG H . Research on general wireless authentication protocol based on PKI[J]. Computer Science, 2012,39(7): 74-77.
[5]	周彦伟, 杨波, 夏喆 ,等. 抵抗泄露攻击的可撤销 IBE 机制[J]. 计算机学报, 2020: 1-28.
	ZHOU Y W , YANG B , XIA Z ,et al. Revocable identity-based encryption scheme with leakage-resilience[J]. Chinese Journal of Computers, 2020: 1-28.
[6]	鲁阳 . 物联网终端可信认证与自动接入技术研究与实现[D]. 南京:南京邮电大学, 2019.
	LU Y . Research and implementation of terminal authentication and automatic access technology in IoT[D]. Nanjing:Nanjing University of Posts and Telecommunications, 2019.
[7]	张鑫, 杨晓元, 朱率率 ,等. 物联网环境下移动节点可信接入认证协议[J]. 计算机应用, 2016,36(11): 3108-3112.
	ZHANG X , YANG X Y , ZHU S S ,et al. Trusted access authentication protocol for mobile nodes in internet of things[J]. Journal of Computer Applications, 2016,36(11): 3108-3112.
[8]	SHAMIR A , . Identity-based cryptosystems and signature schemes[C]// Proceedings of Annual International Cryptology CRYOTO 1984:Conference Advances in Cryptology. Berlin:Springer, 1984: 47-53.
[9]	TANAKA H , . A realization scheme for the identity-based cryptosystem[C]// Proceedings of Conference on the Theory and Applications of Cryptographic Techniques,Advances in Cryptology-CRYPTO 1987. Berlin:Springer, 1987: 340-349.
[10]	BONEH D , FRANKLIN M . Identity-based encryption from the weil pairing[C]// Proceedings of Annual International Cryptology Conference,Advances in Cryptology—CRYPTO 2001. Berlin:Springer, 2001: 213-229.
[11]	COCKS C , . An identity based encryption scheme based on quadratic residues[C]// Proceedings of IMA International Conference on Cryptography and Coding,Cryptography and Coding 2001. Berlin:Springer, 2001: 360-363.

Metrics

Recommended 0

No Suggested Reading articles found!

符号	描述
ID_Device	设备身份信息
SK_G	网关私钥
PK_G	网关公钥
SK_D	设备私钥
Exp	密钥有效期
T	时间戳
PP	PKG公开参数
DN_ID	ID所在域的域名
Sign (M)	表示对消息哈希H(M)的XML数字签名
Enc_K(M)	表示用密钥K对消息M加密
Register	身份注册服务，获取私钥
Locate	查询ID所在域的公开参数
Envelope	生成数字信封服务
Unenvelope	解封数字信封服务
Verify	验证签名服务

[1]	Shiying ZHENG, Yuan LI, Bohan YANG, Shuai MA, Shanpeng XIAO. Technology evolution and industry development of 5G + industrial proximity network [J]. Telecommunications Science, 2022, 38(Z1): 17-27.
[2]	Yaoqi LIU, Hongguang LI, Yiqing ZHOU, Jinglin SHI, Yingjiao MA, Manli QIAN. Industrial 5G based digital twin control platform for flexible intelligent manufacturing [J]. Telecommunications Science, 2022, 38(Z1): 174-183.
[3]	Wenzhe WANG, Gang AN, Jian WU, Wendong ZHAO, Yangang WANG, Yunfeng ZHAO, Zixiang DI, Zhaojie GU, Guixiang ZOU. An industrial internet business management platform that supports the cloud-native [J]. Telecommunications Science, 2022, 38(Z1): 203-213.
[4]	Yuyang GAO, Juhao LI, Yongqi HE, Zhangyuan CHEN. Weakly-coupled real-time SDM technology for short-reach optical transmission [J]. Telecommunications Science, 2022, 38(7): 31-36.
[5]	Feng WANG, Qingmin YU, Ying HUANG, Shihui Duan. Research on key technology and development of industrial Internet network [J]. Telecommunications Science, 2022, 38(7): 106-113.
[6]	Ming CHENG, Zhe DU, Dezhi ZHANG. A novel CWDM bearer scheme for 5G fronthaul network [J]. Telecommunications Science, 2021, 37(9): 139-146.
[7]	Zhiyong MA. Discussion on technical solutions to fibre-optic home networking [J]. Telecommunications Science, 2021, 37(5): 170-176.
[8]	Chengyu ZHANG, Hongwu LI, Yang QU, Jinwu WEI. 5G edge computing development and application for industrial internet [J]. Telecommunications Science, 2021, 37(1): 129-136.
[9]	Xiaojun SHEN,Yanan GE,Zhihao SHEN,Yangdan NI,Mingqi LV,Zhengqiu WENG. An LSTM auto-encoder based anomaly detection for industrial system [J]. Telecommunications Science, 2020, 36(7): 136-145.
[10]	Ye OUYANG,Aidong YANG,Fanyu MENG. A game theory-assisted machine learning methodology for subscriber churn behaviors detection [J]. Telecommunications Science, 2020, 36(6): 79-89.
[11]	Jinyu ZHU,Shihui DUAN,Hengsheng ZHANG,Xuetao YU. Analysis on the application necessity of time-sensitive network technology in the field of industrial interconnection [J]. Telecommunications Science, 2020, 36(5): 115-124.
[12]	Rongrong JIANG,Zhengqiu WENG,Tieming CHEN. Development of industrial internet platform and its security challenges [J]. Telecommunications Science, 2020, 36(3): 6-10.
[13]	Yufei CUI,Yunyong ZHANG,Di ZHANG,Xiaoxia WANG,Siyu PAN,Kun LI. Analysis and development suggestions of operators in the field of industrial internet identification analysis system [J]. Telecommunications Science, 2020, 36(2): 109-116.
[14]	Xiaolian CHEN,Yi QIN,Jie ZHANG,Yajie LI,Haokun SONG,Huibin ZHANG. Optical fiber eavesdropping detection method based on machine learning [J]. Telecommunications Science, 2020, 36(11): 61-67.
[15]	Xiaoxia WANG,Hui ZHAO,Yufei CUI,Kun LI,Xiao WANG. Research on B2B business model of operators in 5G era [J]. Telecommunications Science, 2020, 36(11): 149-155.

IBEXSec:a universal security framework for industrial internet terminal access

RichHTML

PDF下载

Knowledge

Abstract

Cite this article

share this article

Figures/Tables 7

References 11

Related Articles 15

Metrics

Recommended 0