| With the rapid development of mobile communication technology,mobile devices are increasing on a large scale,so users’ requirements for data rate and quality of service are also increasing exponentially.Traditional mobile cloud computing is far away from users in network topology.When performing user authentication,it requires frequent data exchange between terminal and remote cloud,which will cause high delay,so it is difficult to meet the existing user anthentication requirements.In order to ensure that massive mobile devices can quickly execute the authentication process,reduce the authentication delay and communication overhead,it is essential to rely on mobile edge computing(MEC).MEC sinks the core network element function and deploys lightweight edge nodes close to users,which can provide efficient and low latency user authentication services.However,there are also some challenges of edge user authentication in MEC scenario,as follows.1.MEC scenario is oriented to heterogeneous terminals with different security authentication mechanisms,but the computing power of lightweight MEC nodes is limited,so the traditional unified access authentication mechanism will increase the edge computing load and cause large overhead and delay.2.A large number of users’ movements in the MEC scenario will cause handoff authentication,but the handoff authentication mechanism in existing standards needs to go through the core network elements.So the large overhead and the high delay will affect the service experience of edge users.Aiming at the above problems,this paper focuses on the identity authentication issues of edge users when accessing the network in 5G MEC scenario.The specific content can be divided into the following two parts:1.In view of massive heterogeneous users access authentication in MEC,a unified authentication mechanism for heterogeneous networks based on blockchain and zero knowledge proof is proposed.Schnorr zero knowledge protocol is introduced for group authentication of large-scale edge users.At the same time,decentralized distributed authentication is realized through blockchain.Heterogeneous nodes supporting different authentication mechanisms can directly read the identity information through the blockchain without secondary authentication or introducing a new unified authentication method.This can realize the interconnection of multiple trust domains.Based on this research,this paper builds a Consortium Blockchain and deploys multiple nodes based on Hyperledger fabric 0.6 network to test system performance.The simulation results show that this scheme can reduce the privacy exposure by naerly 60%by regularly updating user anonymous code.Group authentication can reduce the system computing overhead by 37%.And it also reduces the system consensus delay.It is very suitable for the computing power requirements of MEC scenarios.2.Aiming at the handoff authentication problem in MEC scenario,a preauthentication mechanism of edge handoff based on trajectory prediction is proposed.Pure Pursuit-A low complexity algorithm is introduced to predict the trajectory of users with different moving speeds and target access node.Based on the parameters issued by the core network element during the first authentication,the user and the target MEC node perform edge simplified pre-authentication.The simulation results show that the prediction accuracy of the scheme can reach more than 85%.The pre-authentication protocol realizes anonymity and mutual authentication.It can resist multiple attacks,and the transmission data length and communication overhead are less than EAP-AKA protocol.This edge preauthentication scheme provides a good network experience environment for users. |