| The Internet of Things(Io T)is the information carrier of the Internet and traditional telecommunications networks,which allows all common objects that can perform independent functions to be interconnected.After 20 years of development,the Internet of Things has almost penetrated into all aspects of our daily life,such as smart home,smart medical treatment,smart wear,and smart transportation.The development of the Internet of Things has provided great convenience to people’s lives,but at the same time,various challenges have also followed.Since the communication among Io T devices carries the sensitive data which closely associates with the people’s private lives,it becomes a prominent target for the malicious attackers.Therefore,information security of the Internet of Things is one of the major challenges facing this field.Moreover,Io T devices are often restricted by the form factor and the power supply,the Internet security solutions are not entirely suitable for the Io T environment.Therefore,new security solutions that are suitable for the Internet of Things environment must be designed.Because of the vast number of devices and the dynamic topology of the Io T networks,it is often impractical to provision and preset keys in the Io T devices to satisfy the requirements of establishing pairwise secure communications for arbitrary Io T device node pairs.To address these issues,this paper proposes the self-secure communication scheme that allows Io T devices to autonomously establish and update keys,without the need of pre-shared key materials or public key certificates.Moreover,the self-secure communication is resistant to the key theft attacks.The attacker may obtain the key and compromise the communication security for a short period of time.The communication security could automatically recover as the communication goes on.All these security features are based on the inevitable,random packet losses in the wireless communications among Io T devices.This paper first introduces the specific technical principles of the point-to-point design of the Internet of Things self-secure communication protocol.This scheme builds an initial key by exchanging some random messages between the two parties of communication,which can resist key theft attacks and does not rely on the public key system or pre-shared secret Key,so it is friendly to Io T nodes with limited resources.At the same time,the communication key will be updated at the end of each session as the communication process progresses,and it will automatically recover security after the key is stolen,realizing forward and backward confidentiality.Then the point-topoint design is extended to point-to-multipoint application scenarios,including no relay nodes and needed relay nodes.And the key nested encryption scheme in the relay transmission scenario is designed to make the protocol closer to the real application scenario.Finally,the system prototype of the protocol was implemented.On this basis,feasibility,safety and stability experiments were carried out,and designed different failure conditions to test the suitability of the system. |
