一种用于物联网的使用SM2算法和自安全PUF的轻量级无证书身份认证协议
A Lightweight Certificateless Identity Authentication Protocol Using SM2 Algorithm and Self-Secured PUF for IoT.
摘要(中文译文)
物联网的快速普及使终端设备面临诸多严峻的安全挑战，尤其是缺乏稳健且高效的身份认证机制。传统的基于证书的方法会带来大量的管理开销和存储支出，而基于身份的密码体制则存在固有的密钥托管风险。为应对这些挑战，本文提出了一种基于PUF和SM2的无证书身份认证机制，该机制将SM2无证书公钥密码体制（中国国家密码标准）与物理不可克隆函数相结合。首先，所提方案利用PUF技术从物联网设备中提取唯一的硬件生成“指纹”，该指纹作为根密钥用于生成部分用户私钥。该方法实质上将终端身份与其物理硬件绑定，从而有效缓解针对节点的物理克隆攻击。此外，通过采用无证书公钥密码体制框架，完整的用户私钥由半可信密钥生成中心和终端设备共同生成。全面的安全性分析证明，所提方案在随机预言模型下是可证明安全的，能够抵御物理克隆、中间人攻击和重放攻击等多种常见攻击。性能评估证实，所实现的PUF+SM2无证书机制将用户公钥标识的大小显著缩减至64字节以内，相较于传统PKI/CA系统通常所需的1-2 KB证书具有显著优势，从而提升了存储和通信效率。
Abstract
The rapid proliferation of the Internet of Things (IoT) leaves terminal devices vulnerable to considerable security challenges, notably the absence of robust yet efficient identity authentication mechanisms. Traditional certificate-based approaches incur substantial management overhead and storage expenditure, whereas Identity-Based Cryptography poses inherent key escrow risks. To tackle these challenges, this paper proposes a PUF and SM2-based certificateless identity authentication mechanism that integrates SM2 Certificateless Public Key Cryptography (a Chinese national cryptographic standard) with Physical Unclonable Functions (PUFs). Initially, the proposed solution utilizes PUF technology to derive a unique hardware-generated "fingerprint" from an IoT device, which functions as a root key to generate a partial user private key. This approach essentially binds the terminal's identity to its physical hardware, thereby effectively mitigating physical cloning attacks against nodes. Moreover, through the adoption of a Certificateless Public Key Cryptography (CLPKC) framework, the complete user private key is jointly generated by a semi-trusted Key Generation Centre (KGC) and the terminal device itself. The comprehensive security analysis proves that the proposed scheme is provably secure under the random oracle model, capable of resisting various common attacks such as physical cloning, man-in-the-middle, and replay attacks. Performance evaluation confirms that the implemented PUF + SM2 certificateless mechanism significantly reduces the size of user public key identifiers to within 64 bytes, offering a substantial advantage over the 1-2 KB certificates typically required in conventional PKI/CA systems, thereby enhancing efficiency in storage and communication.
如何引用
AMA
Meili Zhang, Qianqian Zhao, Chao Li, Weidong Fang, Zhong Tong. A Lightweight Certificateless Identity Authentication Protocol Using SM2 Algorithm and Self-Secured PUF for IoT.. Sensors (Basel, Switzerland). 2026; doi:10.3390/s26092640.
APA
Meili Zhang, Qianqian Zhao, Chao Li, Weidong Fang, Zhong Tong (2026). A Lightweight Certificateless Identity Authentication Protocol Using SM2 Algorithm and Self-Secured PUF for IoT.. Sensors (Basel, Switzerland). https://doi.org/10.3390/s26092640
GB/T 7714
Meili Zhang, Qianqian Zhao, Chao Li, Weidong Fang, Zhong Tong. A Lightweight Certificateless Identity Authentication Protocol Using SM2 Algorithm and Self-Secured PUF for IoT.[J]. Sensors (Basel, Switzerland), 2026 doi:10.3390/s26092640.
在 PubMed增强版 阅读全文
翻译全文 · AI 文献问答 · PDF 原文下载 · 引用导出