| The Internet of Things(IoT)refers to the process of connecting daily physical objects(switches and sensors)to the Internet for the purpose of information sharing.With the gradual improvement of infrastructure such as 5G and the development of artificial intelligence technology,advanced manufacturing companies are taking advantage of the convenience brought by the Internet of Things to transform to the Industrial Internet of Things(IIoT).Users(data consumers or production monitors)in the IIoT system can obtain real-time data collected by sensors deployed in various complex production environments,remotely analyze the production status of equipment,and send control instructions to achieve efficient production.In the past decade,the number of IIoT devices has increased dramatically,and many data security and user privacy issues have also surfaced.For example,the information transmitted through public channels is intercepted and tampered by attackers;the data collected by sensor devices is illegally accessed by people outside the system;the real identity information of users is leaked when requesting services,etc.Therefore,researchers have solved security problems in IIoT systems by designing various authentication and key agreement(AKA)schemes.However,most of these solutions do not provide sufficient and effective security,for example,cannot ensure the anonymity of user identity;cannot resist impersonation,device capture and other attacks.At the same time,due to the limited equipment resources in the IIoT system,many existing solutions cannot meet the application requirements in terms of computing costs and communication costs.It can be seen that the AKA scheme in the IIoT environment needs to be further optimized in terms of both security and efficiency.In view of the above problems,this paper designs a new three-factor anonymous identity authentication and key agreement scheme for the IIoT system.The specific work is as follows:(1)The article designs a new IIoT three-factor anonymous authentication and key agreement scheme based on elliptic curve encryption algorithm,Hash function,and biometric fuzzy extraction technology.This scheme uses the private key of the trusted center and the real identity of the user to generate an authentication pseudonym,which provides the security feature of user anonymity,and stores the pseudonym in the database of the control node,which realizes the user registration and cancellation functions by lightweight methods.At the same time,the scheme uses biometric fuzzy extraction technology to complete the authentication and login process,effectively resisting password guessing and mobile device capture attacks.(2)Combining the design goal and security model of the authentication scheme,the article proves the security characteristics of the scheme through informal security analysis.At the same time,based on three formal security verification tools(BAN logic,random oracle model,AVISPA),the effectiveness and security of the scheme are further proved.Among them,the BAN logic model is used to prove the correctness of the authentication process and the generated session key,and the random oracle model(ROR)and the AVISPA security testing tool are used to simulate the opponent’s attack process,which proves that the scheme can effectively resist various attacks such as tampering and entity impersonation form.(3)This paper comprehensively analyzes the performance of the designed scheme from three aspects: functional characteristics,computing cost,and communication cost.At the same time,compared with the latest IIoT certification scheme of the same type,this scheme has obvious advantages in the functional characteristics provided,computing cost,and communication cost.In summary,the scheme designed in this paper can effectively solve various security problems faced by IIoT systems and meet the needs of practical applications.It is a very attractive identity authentication and key agreement scheme. |
