SecT: A Lightweight Secure Thing-Centered IoT Communication System
SecT: A Lightweight Secure Thing-Centered IoT Communication System
复制标题
DOI：
10.1109/mass.2018.00018
复制
发表时间：
2018-10
期刊：
影响因子：
--
通讯作者：
Chao Gao;Zhen Ling;Biao Chen;Xinwen Fu;Wei Zhao
中科院分区：
文献类型：
--
作者：
Chao Gao;Zhen Ling;Biao Chen;Xinwen Fu;Wei Zhao
在本文中，我们提出了一种基于MQTT， SecT的安全轻量级物联网通信系统，其中设备/物对用户进行身份验证。与以服务器为中心的物联网系统（由云服务器对用户进行认证）相比，以物为中心的系统可以保护用户隐私，因为云服务器主要是物与用户之间的中继，不会以明文形式存储或查看用户数据。这项工作的贡献有三方面。首先，我们明确地确定了引导事物的关键功能，并设计了安全的配对和绑定策略。其次，为了保护用户的隐私，我们设计了用户与物之间的端到端加密通信策略，即使是服务器也无法看到明文的通信内容。第三，我们设计了一个强大的认证系统，可以击败已知的针对物联网的设备扫描攻击、暴力破解攻击和设备欺骗攻击。我们在10美元的树莓派Zero W上实现了一个SecT的原型，并进行了大量的实验来验证其性能。实验结果表明，该算法具有较高的性价比和实用性。虽然我们为智能家居应用设计了SecT，但它可以轻松扩展到其他物联网应用领域。
In this paper, we propose a secure lightweight and thing-centered IoT communication system based on MQTT, SecT, in which a device/thing authenticates users. Compared with a server-centered IoT system in which a cloud server authenticates users, a thing-centered system preserves user privacy since the cloud server is primarily a relay between things and users and does not store or see user data in plaintext. The contributions of this work are three-fold. First, we explicitly identify critical functionalities in bootstrapping a thing and design secure pairing and binding strategies. Second, we design a strategy of end-to-end encrypted communication between users and things for the sake of user privacy and even the server cannot see the communication content in plaintext. Third, we design a strong authentication system that can defeat known device scanning attack, brute force attack and device spoofing attack against IoT. We implemented a prototype of SecT on a $10 Raspberry Pi Zero W and performed extensive experiments to validate its performance. The experiment results show that SecT is both cost-effective and practical. Although we design SecT for the smart home application, it can be easily extended to other IoT application domains.