| With the continuous development of Internet of Things technology and application,broadcast communication,as a common message transmission technology,plays a crucial role in smart city paradigm such as smart transportation,medical supervision,emergency broadcasting and so on.As an indispensable link in broadcast communication,the broadcast authentication mechanism ensures the safe transmission of messages from authorized devices.However,most iot devices are resource-constrained and distributed in untrusted environments,and broadcast authentication mechanisms based on non-volatile Memory(NVM)are vulnerable to physical attacks.Moreover,with the geometric growth of the number of devices in the Internet of Things,the centralized broadcast authentication architecture is faced with the double problems of excessive system load and single point of failure,which greatly limits the application potential of message broadcast.Although the emergence of distributed architecture alleviates the pressure of centralized broadcast authentication architecture to some extent,the problems of data synchronization and disaster recovery still need to be solved.Physical Unclonable Functions(PUFs)and block chain technology are combined in this project to carry out the research on a broadcast authentication system,which followed the core of establishing session key,recovering group key and identity authentication in broadcast authentication.A group message broadcast system in multi-server environment is designed and implemented,and the feasibility of the proposed group broadcast authentication scheme based on block chain and PUFs is verified based on the system model.A group broadcast authentication scheme based on block chain and PUFs is proposed in this paper.Based on PUFs,lightweight key negotiation and device authentication functions are implemented,which reduces the computational overhead of cryptography operation and can effectively resist physical attacks.Based on block chain,the system data synchronization and disaster recovery problems can be solved,and the single point of failure can be effectively resisted,and the tamper-proof and liability traceability of broadcast data can be realized.In addition,the scheme ensures the anonymity of the device and the security of the PUFs response storage through the secret mapping provided by the Chinese remainder theorem.Aiming at the broadcast authentication system,the system model of the proposed broadcast authentication scheme is implemented in this paper.In this paper,the blockchain platform of the system is built based on Hyperledger Fabric.The authentication device of Raspberry PI 3B+ simulation system is selected at the device end,and the authentication and key negotiation of the device are realized by XOR-APUFS.Through the function test,verify the feasibility of the system to deal with the request of device registration,query,update,cancellation and other abnormal request processing ability.Through Caliper,the system performance test platform was built to evaluate the time consumption of each part of the authentication scheme and the performance parameters such as latency and throughput of the system blockchain platform,which proved the high efficiency of the scheme and the scalability of the system.Finally,based on Automated Validation of Internet Security Protocols and Applications(AVISPA)and non-formal Security analysis,it is proved that the scheme can guarantee anonymity and single point failure resistance.It can resist physical attacks,replay attacks,man-in-the-middle attacks and other common attacks.To sum up,the project has made an effective attempt in the field of broadcast authentication,which has engineering application value. |