一种基于Chebyshev混沌映射和CRT的ZigBee网络匿名认证方案

doi:10.11959/j.issn.2096-3750.2023.00368

物联网学报 ›› 2023, Vol. 7 ›› Issue (4): 101-109.doi: 10.11959/j.issn.2096-3750.2023.00368

• 理论与技术 • 上一篇

一种基于Chebyshev混沌映射和CRT的ZigBee网络匿名认证方案

廖伟, 何乐生, 尹恒, 余圣涛, 权家锐

云南大学信息学院，云南昆明 650091

修回日期:2023-08-22 出版日期:2023-12-01 发布日期:2023-12-01
作者简介:廖伟（1999- ），男，云南大学信息学院硕士生，主要研究方向为物联网安全、嵌入式系统开发
何乐生（1977- ），男，博士，云南大学信息学院副教授，主要研究方向为嵌入式系统及物联网应用、微弱信号采集和处理及其在生物电信号和射电天文信号处理等方面的应用
尹恒（1999- ），男，云南大学信息学院硕士生，主要研究方向为嵌入式系统开发、物联网安全
余圣涛（1997- ），男，云南大学信息学院硕士生，主要研究方向为图像加密、物联网安全
权家锐（1999- ），男，云南大学信息学院硕士生，主要研究方向为多模态目标跟踪、神经网络
基金资助:
国家自然科学基金资助项目(U1631121)

A ZigBee network anonymous authentication scheme based on Chebyshev chaotic mapping and CRT

Wei LIAO, Lesheng HE, Heng YIN, Shengtao YU, Jiarui QUAN

College of Information, Yunnan University, Kunming 650091, China

Revised:2023-08-22 Online:2023-12-01 Published:2023-12-01
Supported by:
The National Natural Science Foundation of China(U1631121)

摘要/Abstract

摘要：

针对 ZigBee 网络信任中心不完全可靠、入网时缺乏身份认证等问题，提出了一种基于 Chebyshev 混沌映射和中国剩余定理（CRT, Chinese remainder theorem）的ZigBee网络匿名认证方案。该方案不仅能实现匿名身份的双向认证，还可以保障ZigBee网络结构动态变化时密钥分发的安全；其主要基于一个ZigBee与NB-IoT的无线异构网关，使服务器能够通过该网关对网络中的节点进行有效的管理。从安全性分析以及与其他相关文献对比结果可以看出，所提方案具有更高的安全性，还具有匿名性、不可链接性。此外，实验结果表明所提方案在计算开销上较其他方案有更大的优势。

关键词: ZigBee网络, Chebyshev混沌映射, 双向身份认证, 匿名性, 密钥分发

Abstract:

A ZigBee network anonymous authentication scheme based on Chebyshev chaotic mapping and Chinese remainder theorem (CRT) was proposed to solve the problems such as the incomplete reliability of ZigBee network trust center and the lack of identity authentication when accessing the network.The proposed scheme can not only realize two-way authentication of anonymous identity, but also ensure the security of key distribution when ZigBee network structure changes dynamically.It is mainly based on a ZigBee and NB-IoT wireless heterogeneous gateway, so that the server can effectively manage the nodes in the network through this gateway.From security analysis and comparison with other related literature, the proposed scheme has higher security, with anonymity and unlink ability.In addition, the results show that the proposed scheme has more advantages than other schemes on the computational overhead.

Key words: ZigBee network, Chebyshev chaotic mapping, two-way identity authentication, anonymity, key distribution

中图分类号:

TP309.1

廖伟, 何乐生, 尹恒, 余圣涛, 权家锐. 一种基于Chebyshev混沌映射和CRT的ZigBee网络匿名认证方案[J]. 物联网学报, 2023, 7(4): 101-109.

Wei LIAO, Lesheng HE, Heng YIN, Shengtao YU, Jiarui QUAN. A ZigBee network anonymous authentication scheme based on Chebyshev chaotic mapping and CRT[J]. Chinese Journal on Internet of Things, 2023, 7(4): 101-109.

图/表 10

图1

表1

符号定义"

符号	定义
${Nod}_{i, j}$	终端节点i, j
${ID}_{i, j} 、 {ID}_{c} 、 {PID}_{i, j} 、 {PID}_{c}$	终端节点i, j、信任中心IEEE地址以及假名
${Ts}_{i, j} 、 x$	假名有效期、切比雪夫随机种子ρ
$P 、 p_{i, j} 、 p_{c}$	大素数、终端节点以及信任中心的组密钥生成密钥
$r_{i, j} 、 r_{c} 、 {sk}_{TA}$	终端节点示i, j、信任中心、服务器私钥
${Pub}_{i} 、 {Pub}_{c} 、 {pk}_{TA}$	终端节点i、信任中心、服务器公钥
$h a s h (\cdot) 、 H (\cdot)$	防碰撞单向哈希函数
$e n c_{k} (\cdot) 、 d e c_{k} (\cdot)$	AES加/解密函数
\|\|	字符串连接符
$T (\cdot)$	切比雪夫混沌映射
GK	组密钥生成信息
${Pgk}_{i} 、 Rgk$	组密钥载体、组密钥
$List 、 t_{i, j} 、 t_{c} 、 t_{TA}$	哈希映射表、时间戳
symk	对称链接密钥

表1

图2

图3

图4

表2

表3

图5

表4

表5

参考文献 30

[1]	ZigBee Alliance. ZigBee security specification overview[EB]. 2010.
[2]	GUPTA A , KASBEKAR G S . Secure,anonymity-preserving and lightweight mutual authentication and key agreement protocol for home automation IoT networks[C]// Proceedings of 2022 14th International Conference on Communication Systems ＆ Networks (COMSNETS). Piscataway:IEEE Press, 2022: 375-383.
[3]	HOCEINI O , AFIFI H , AOUDJIT R . Authentication based elliptic curves digital signature for ZigBee networks[C]// International Conference on Mobile,Secure,and Programmable Networking. Cham:Springer, 2017: 63-73.
[4]	XIONG J , YU B . A novel secure communication scheme for ZigBee mesh network based on physical unclonable function[C]// Proceedings of 2021 IEEE 6th International Conference on Computer and Communication Systems (ICCCS). Piscataway:IEEE Press, 2021: 783-789.
[5]	CHUNG H L H . Chaos based RFID authentication protocol[D]. Canada:University of Ottawa, 2013.
[6]	LI X , WU F , KHAN M K ,et al. A secure chaotic map-based remote authentication scheme for telecare medicine information systems[J]. Future Generation Computer Systems, 2018(84): 149-159.
[7]	杨吉云, 姚锐冬, 周洁 ,等. 基于切比雪夫混沌映射的车联网高效认证方案[J]. 计算机工程, 2021,47(10): 34-42,51.
	YANG J Y , YAO R D , ZHOU J ,et al. Efficient authentication scheme based on Chebyshev chaotic map for VANET[J]. Computer Engineering, 2021,47(10): 34-42,51.
[8]	YANG J Y , DENG J M , XIANG T ,et al. A Chebyshev polynomial-based conditional privacy-preserving authentication and group-key agreement scheme for VANET[J]. Nonlinear Dynamics, 2021,106(3): 2655-2666.
[9]	蒋东华, 朱礼亚, 沈子懿 ,等. 结合二维压缩感知和混沌映射的双图像视觉安全加密算法[J]. 西安交通大学学报, 2022,56(2): 139-148.
	JIANG D H , ZHU L Y , SHEN Z Y ,et al. A double image visual security encryption algorithm combining 2D compressive sensing and chaotic mapping[J]. Journal of Xi’an Jiaotong University, 2022,56(2): 139-148.
[10]	郭琰, 石飞, 汪烈军 ,等. WSNs中一种基于Chebyshev混沌映射的认证密钥协商协议[J]. 中国科技论文, 2017,12(8): 900-904.
	GUO Y , SHI F , WANG L J ,et al. An authentication key agreement protocol based on Chebyshev chaotic map in WSNs[J]. China Sciencepaper, 2017,12(8): 900-904.
[11]	ABDELFATAH R I , ABDAL-GHAFOUR N M , NASR M E . Secure VANET authentication protocol (SVAP) using Chebyshev chaotic maps for emergency conditions[J]. IEEE Access, 2021(10): 1096-1115.
[12]	LI C T , WU T Y , CHEN C M . A provably secure group key agreement scheme with privacy preservation for online social networks using extended chaotic maps[J]. IEEE Access, 2018(6): 66742-66753.
[13]	ZHANG L . Cryptanalysis of the public key encryption based on multiple chaotic systems[J]. Chaos,Solitons ＆ Fractals, 2008,37(3): 669-674.
[14]	VAN WAART O , THIJSSEN J . Traditional cryptography[EB]. 2015.
[15]	ZHU H F . Using chaotic maps to construct anonymous multi-receiver scheme based on BAN logic[EB]. 2016.
[16]	SUN Y , ZHU H F , FENG X S . A novel and concise multi-receiver protocol based on chaotic maps with privacy protection[J]. International Journal of Network Security, 2017(19): 371-382.
[17]	ZHU H F , ZHANG Y . An efficient chaotic maps-based deniable authentication group key agreement protocol[J]. Wireless Personal Communications, 2017,96(1): 217-229.
[18]	ZHENG X L , HUANG C T , MATTHEWS M . Chinese remainder theorem based group key management[C]// Proceedings of the 45th annual southeast regional conference. New York:ACM Press, 2007: 266-271.
[19]	常相茂, 占俊, 王志伟 . 低开销的 NB-IoT 节点群组身份安全认证协议[J]. 通信学报, 2021,42(12): 152-162.
	CHANG X M , ZHAN J , WANG Z W . Low-cost group-based identity security authentication protocol for NB-IoT nodes[J]. Journal on Communications, 2021,42(12): 152-162.
[20]	DHARMINDER D , GUPTA P . Security analysis and application of Chebyshev chaotic map in the authentication protocols[J]. International Journal of Computers and Applications, 2019: 1-9.
[21]	DHARMINDER D , KUNDU N , MISHRA D . Construction of a chaotic map-based authentication protocol for TMIS[J]. Journal of Medical Systems, 2021,45(8): 1-10.
[22]	DHARMINDER D , KUMAR U , GUPTA P . A construction of a conformal Chebyshev chaotic map based authentication protocol for healthcare telemedicine services[J]. Complex ＆ Intelligent Systems, 2021,7(5): 2531-2542.
[23]	ZHANG L P , ZHU Y , REN W ,et al. An energy-efficient authentication scheme based on Chebyshev chaotic map for smart grid environments[J]. IEEE Internet of Things Journal, 2021,8(23): 17120-17130.
[24]	ZHOU J , OU Y H . Key tree and Chinese remainder theorem based group key distribution scheme[C]// International Conference on Algorithms and Architectures for Parallel Processing. Berlin,Heidelberg:Springer, 2009: 254-265.
[25]	VIJAYAKUMAR P , BOSE S D , KANNAN A . Chinese remainder theorem based centralised group key management for secure multicast communication[J]. IET Information Security, 2014,8(3): 179-187.
[26]	NEUMAN B C , TS'O T . Kerberos:an authentication service for computer networks[J]. IEEE Communications Magazine, 1994,32(9): 33-38.
[27]	曹阳 . 基于扩展混沌映射的动态身份认证密钥协商协议[J]. 成都理工大学学报(自然科学版), 2021,48(4): 505-512.
	CAO Y . Dynamic identity authentication key agreement protocol based on extended chaos mapping[J]. Journal of Chengdu University of Technology (Science ＆ Technology Edition), 2021,48(4): 505-512.
[28]	张昱, 孙光民, 翟鹏 ,等. 一种基于切比雪夫混沌映射的可证明安全的溯源认证协议[J]. 信息网络安全, 2022(12): 25-33.
	ZHANG Y , SUN G M , ZHAI P ,et al. A provably secure traceability authentication protocol based on Chebyshev chaotic map[J]. Netinfo Security, 2022(12): 25-33.
[29]	HOLDEN A V . Chaos[M]. Course Book. Princeton,NJ: Princeton University Press, 2014.
[30]	王振宇, 郭阳, 李少青 ,等. 面向轻量级物联网设备的高效匿名身份认证协议设计[J]. 通信学报, 2022,43(7): 49-61.
	WANG Z Y , GUO Y , LI S Q ,et al. Design of efficient anonymous identity authentication protocol for lightweight IoT devices[J]. Journal on Communications, 2022,43(7): 49-61.

对比项	Hoceini^[3]方案	Xiong^[4]方案	Cao^[27]方案	Zhang^[28]方案	所提方案
双向认证	√	√	√	√	√
匿名性	×	×	×	√	√
已知密钥安全性	×	√	√	√	√
前向安全性	√	√	√	√	√
后向安全性	×	√	×	×	√
抵抗重放攻击	×	√	√	√	√
抵抗模拟攻击	√	√	√	√	√
不可链接性	×	×	×	×	√

方案	T_h/ms	T_c/ms	T_eca/ms	T_ecm/ms	T_sym/ms	T_asy/ms	T_F/ms
Hoceini^[3]方案	2	0	2	7	0	0	0
Xiong^[4]方案	8	0	6	10	0	0	0
Cao^[27]方案	18	8	0	0	0	0	0
Zhang^[28]方案	17	10	0	0	4	4	3
所提方案	5	9	0	0	1	1	0

类型	标准容量/KB	实际占有/KB	占比
FLASH	512	145.56	25.43%
RAM	32	16.01	50.05%

类型	标准容量/KB	实际占有/KB	占比
FLASH	512	122.54	23.93%
RAM	32	13.01	40.68%

一种基于Chebyshev混沌映射和CRT的ZigBee网络匿名认证方案

A ZigBee network anonymous authentication scheme based on Chebyshev chaotic mapping and CRT

在线阅读

PDF下载

可视化

摘要/Abstract

引用本文

使用本文

图/表 10

参考文献 30

相关文章 0

Metrics

推荐阅读 0