Research On Lightweight Authentication Scheme Of IoT Entity Based On Ethereum

With the rapid development of the Internet of things,the number of intelligent devices increases dramatically.From smart locks to smart vehicles,from smart wearable devices to smart homes,the Internet of things involves all aspects of people's lives.People use these IoT devices to generate,process and exchange a large number of sensitive privacy information,which leads to serious network attacks.Therefore,it is very important to solve the problem of security and privacy in the Internet of things.The authentication scheme based on the resource constrained and large-scale IoT entity attracts great interest of researchers.However,most of the existing authentication schemes are based on the trusted third-party centralized architecture,which has some problems such as inflexibility,scalability and single sign on attack.In recent years,with the characteristics of decentralization,hard to tamper and multi-party consensus,blockchain technology has gradually become a research hotspot in the field of Internet of things authentication.Many architectures based on blockchain to achieve Internet of things security and trust management have been proposed.However,the authentication scheme of the Internet of things based on the blockchain not only brings improvement,but also makes it difficult to implement the pow mechanism of the blockchain with high resource demand.The complex authentication protocol process of the system architecture leads to the long consensus time and request response delay of the blockchain nodes,which is not conducive to the extensive application in the delay sensitive Internet environment.Aiming at the problem of lightweight and data transmission security of IoT entity authentication based on blockchain,this paper uses blockchain technology and chameleon hash function to design an IOT entity lightweight authentication scheme based on Ethereum,and gives the formal proof and modular implementation of protocol security.Specifically,this paper has done the following work:Firstly,based on the investigation and research of the authentication scheme of the Internet of things based on the blockchain,combined with the needs of the Internet of things environment for data privacy protection,read and study the scheme of IoT entity authentication at home and abroad.In order to realize the lightweight of IoT entity authentication,this paper proposes a hierarchical optimization system architecture of IoT entity based on blockchain,which is resource constrained and large-scale.Using chameleon hash function and verification transfer method,a lightweight authentication scheme is constructed,and real-time and non-repudiated access of IoT device is realized.Then we use Scyther tool and BAN-logic to analyze the security of the design scheme,and then compare the performance of the scheme with other similar schemes.The analysis results show that the proposed scheme can realize lightweight mutual authentication and negotiate session key between IoT entities on the basis of ensuring the entity information security.Secondly,applying the IoT entity authentication scheme,an IoT entity authentication service system based on Ethereum is designed.The system is mainly composed of three parts: local private chain LPC,public alliance chain composed of CN in each LPC and intelligent contract providing calling interface,which can realize device registration,efficient device authentication and secure data exchange.Through the description of system structure design,data table design and functional process design,the IoT entity authentication service system based on Ethereum is introduced.Thirdly,the design of IoT entity authentication service system based on Ethereum is modularized.Through the description of the development environment,the running environment and the pseudo code of the scheme,the modular implementation of the scheme is described in detail.After that,the main function test and performance test of the scheme are completed.The test results show that the authentication protocol designed in this paper can achieve lightweight authentication.