The Research And Implementation Of Secure Communication Protocol Of Internet Of Things Based On Mutual Authentication

With the rise of concepts such as smart home and smart life,more and more smart devices have become daily necessities.The involvement of smart phones and mobile Internet has facilitated the remote monitoring and control of smart devices,enabling the smart device management more convenient and quick.The smart home management showing a trend of palm,and communication between smartphone and smart device is becoming more and more frequent.As a result,the importance of communication security between smart phone and smart device is increasingly prominent.When a smart phone remotely manages a smart device of the Internet of Things through the complex Internet,the communication must be encryptd and the mutual authentication between them is required.There is need for authentication and encryption scheme which is suitable for smartphone and resource-constrained smart device to accomplish mutual authentication and data encryption through the complex Internet environment,but SSL/TLS protocol is complicated and heavy for smart device.This paper proposes a Lightweight And Secure Authentication Protocol(LSAP)based on mutual authentication,which is used to ensure mutual identity authentication and data encryption between smart devices and smartphones.We introduced Authentication Center to this protocol which reduce the computational burden of smart device,and help mutual identity authentication and session key negotiation between smart device and smartphone.LSAP protocol is consist of LSAP handshake protocol and LSAP authentication protocol,the main work of this paper are as follows:(1)Designing the role of Authentication Center as the authentication platform between smart devices and smartphones,alleviating the cost of smart devices during authentication and key agreement.(2)Lightweight LSAP handshake protocol is designed for authentication and key negotiation between the Authentication Center and smart device,and establishing an encrypted connection.Besides,the paper designed a simple certificate structure for smart device.(3)Using Java as the development environment,the LSAP protocol model building and code implementation are completed.Developed an Android program to simulate the smart device of Internet of Things,and an Authentication Center Server that supports high concurrency.We also specially designed Certificate Distribution Server to generate certificate for smart device.The LSAP protocol proposed in this paper provides a new solution to identity authentication and encrypted communication between smartphone and smart device under the Internet of Things environment,ensures mutual identity authentication between smart device and smart phone,and reduces the computational burden for smart device in the key agreement process,which provides a new communication mode for the smart home industry.