CN114866248A - A distributed and trusted identity authentication method and system in edge computing environment - Google Patents

Abstract

The invention discloses a distributed credible identity authentication method and a distributed credible identity authentication system in an edge computing environment, which are characterized in that system parameters of a terminal device to be authenticated and an edge server are initialized, a chameleon hash function is constructed by adopting the initialized parameters, KGC is utilized to generate a key and trapdoor public key information for the terminal device and the edge server, then information elements needing to be authenticated of the terminal device and the edge server are registered on a block chain, the terminal device to be authenticated and the edge server are authenticated by accessing the information elements used for authentication in the block chain, and the identity authentication and session key calculation are completed; the terminal equipment authenticates with the edge server according to the application, acquires necessary information elements through the access block chain to construct authentication information and a session key, and completes authentication and calculation of the session key; the distributed trusted data authentication method can be used in the edge computing environment, realizes distributed trusted data authentication, and reduces authentication overhead.

Description

A distributed and trusted identity authentication method and system in edge computing environment

technical field

The invention belongs to the field of identity authentication, and in particular relates to a distributed and trusted identity authentication method and system in an edge computing environment.

Background technique

With the rapid development of the Internet of Things and 5G technology, the sharp increase in the number of terminal devices and the large-scale use of lightweight devices, the traditional cloud computing platform has been unable to meet the needs of real-time and high response, and the edge computing environment provides solutions. However, the edge computing environment is complex and diverse, especially in many data communication authentication processes, the traditional PKI digital certificate authentication method has been unable to meet the requirements of lightweight and distributed, the identity authentication in the edge computing environment Computing services to people's lives create certain obstacles.

SUMMARY OF THE INVENTION

The purpose of the present invention is to provide a distributed and trusted identity authentication method and system in an edge computing environment to overcome the deficiencies of the prior art.

A distributed and trusted identity authentication method in an edge computing environment, comprising the following steps:

S1, initialize the system parameters of the terminal device to be authenticated and the edge server, and use the initialized parameters to construct a chameleon hash function;

S2, use KGC to generate the key and trapdoor public key information for the terminal device and the edge server, and then register the information elements that the terminal device and the edge server need to authenticate to the blockchain;

S3, authenticate the terminal device and the edge server to be authenticated by accessing the information elements used for authentication in the blockchain to complete the identity authentication and the calculation of the session key.

Further, the key generation server is used to generate the elliptic curve E, the order of which is q, the generator is P, the cyclic addition group G, and the large integer group of order r

中随机产生一个随机数SK_kgc作为私钥，计算PK_kgc＝SK_kgc·P,构成自己的公私钥信息(PK_kgc,SK_kgc)，其中

Using KGC from the large integer group

Randomly generate a random number SK _kgc as the _{private key in the}

Further, the chameleon hash function is used to perform anonymous processing for each authentication of the terminal device, and the same hash value is constructed based on the time of each authentication request.

Further, the chameleon hash function is constructed using the discrete logarithm problem.

Further, the terminal device EU hashes the unique identification ID _u to P _id =H ₁ (ID _u ), generates a pseudo identification P _id , and sends the pseudo identification P _id to the KGC through a secure channel;

作为临时私钥，并计算R_i＝r_i·P得到临时公钥R_i，通过计算SK_u＝r_i+SK_kgc·P_id作为设备的私钥，通过计算PK_u＝SK_u·P，得到终设备的公钥PK_u，生成终端设备的公私钥信息；After the KGC receives the key request information P _id of the terminal device, it generates a random number

As a temporary private key, and calculate R _i =r _i ·P to obtain a temporary public key R _i , by calculating SK _u =r _i +SK _kgc ·P _id as the private key of the device, by calculating PK _u =SK _u ·P, Obtain the public key PK _u of the terminal device, and generate the public and private key information of the terminal device;

After the terminal device receives the information, it verifies the timestamp and trapdoor public key information.

作为终端设备的陷门公钥，并产生当前的时间戳T_kgc。Further, KGC generates a random number g ∈ G ₁ as the generated public key of the chameleon hash function, by calculating

As the trapdoor public key of the terminal device, and generate the current timestamp T _kgc .

Further, first verify whether the received time stamp and the current time stamp T _u -T _kgc are within the set time range, and if not within the set range, refuse to accept the response information.

Further, the edge server ES hashes the unique identification ID _s and sends it to the KGC through a secure channel;

通过计算SK_s＝x_i+SK_kgc·P_ids得到边缘服务器的私钥，计算PK_s＝SK_s·P得到公钥，并产生当前的时间戳T_kgc，并将信息<SK_s,PK_s,T_kgc>发送给边缘服务器；After KGC receives the request, it generates a random value

The private key of the edge server is obtained by calculating SK _s = _xi +SK _kgc ·P _ids , the public key is obtained by calculating PK _s =SK _s ·P, and the current timestamp T _kgc is generated, and the information <SK _s ,PK _s ,T _kgc >send to edge server;

After receiving the response information, the edge server firstly judges whether the difference between the current timestamp T _es and the received timestamp T _kgc is within the valid range, and if it is not within the valid range, it refuses to accept the response; if it is within the valid range, it accepts the response.

得到终端设备的变色龙哈希函数值，调用智能合约查询该值是否存在，并得到对应的伪身份标识P_id，通过计算PK_u′＝PIDI-(P₁·P_id)得到U的公钥信息。Further, the terminal device requests access to the edge server, obtains the public key information PK _s of the ES by calling the smart contract, and obtains the public key information from the blockchain; ES calculates

Obtain the chameleon hash function value of the terminal device, call the smart contract to check whether the value exists, and obtain the corresponding pseudo-identity identifier P _id , and obtain the public key information of U by calculating PK _u ′=PIDI-(P ₁ ·P _id ) .

A distributed and trusted identity authentication system in an edge computing environment, including a terminal device, an edge server, a key generation server, and a blockchain:

The key generation server is used to generate keys and trapdoor public key information for terminal devices and edge servers;

Terminal devices and edge servers register information elements that require authentication on the blockchain;

When authentication is required, initialize the system parameters of the terminal device and the edge server, and use the initialized parameters to construct the chameleon hash function. The terminal device and the edge server authenticate by accessing the information elements used for authentication in the blockchain to complete the identity. Authentication and calculation of session keys.

Compared with the prior art, the present invention has the following beneficial technical effects:

The invention is a distributed and credible identity authentication method in an edge computing environment. The system parameters of the terminal device to be authenticated and the edge server are initialized, and the initialized parameters are used to construct a chameleon hash function, and KGC is used for the terminal device and the edge server. The edge server generates the key and trapdoor public key information, and then registers the information elements that the terminal device and the edge server need to authenticate to the blockchain, and the terminal device and the edge server to be authenticated access the blockchain for authentication. The information elements are authenticated to complete the identity authentication and the calculation of the session key; the terminal device authenticates with the edge server according to the application, and obtains the necessary information elements by accessing the blockchain to construct the authentication information and session key, and complete the authentication and session encryption. The calculation of the key; the invention can be used in the edge computing environment to realize distributed trusted data authentication and reduce the authentication overhead.

Further, the chameleon hash function performs anonymous processing for each authentication of the terminal device. Without changing the public and private key information and other key information, the same hash value is constructed based on the time of each authentication request, avoiding the need to send data to the blockchain. registered multiple times;

Further, the chameleon hash function is constructed using discrete logarithm problem to ensure the security and effectiveness of device anonymity.

Further, the present invention adopts the block chain to not easily save the information of the device in plain text, only saves the shared authentication data part, and reduces the dependence on the trusted third party.

Description of drawings

FIG. 1 is a structural diagram of identity authentication in an embodiment of the present invention.

Detailed ways

In order to make those skilled in the art better understand the solutions of the present invention, the technical solutions in the embodiments of the present invention will be clearly and completely described below with reference to the accompanying drawings in the embodiments of the present invention. Obviously, the described embodiments are only Embodiments are part of the present invention, but not all embodiments. Based on the embodiments of the present invention, all other embodiments obtained by persons of ordinary skill in the art without creative efforts shall fall within the protection scope of the present invention.

A distributed and trusted identity authentication method in an edge computing environment, comprising the following steps:

Step 1), initialize the system parameters of the terminal device to be authenticated and the edge server, and use the initialized parameters to construct the chameleon hash function simultaneously;

Specifically, the key generation server (KGC) is used to generate the elliptic curve E, the order of which is q, the generator is P, the cyclic addition group G, and the large integer group of order r

中随机产生一个随机数SK_kgc作为私钥，计算PK_kgc＝SK_kgc·P,构成自己的公私钥信息(PK_kgc,SK_kgc)，其中

Using KGC from the large integer group

Randomly generate a random number SK _kgc as the _{private key in the}

H₃:G×{0,1}^*×G×0,1*→Zq*，H4:0,1*×G→Zq*，一个变色龙哈希函数H2:CHg,h,r,t。Choose two secure one-way hash functions

H ₃ : G×{0,1} ^* ×G×0,1*→Zq*, H4:0,1*×G→Zq*, a chameleon hash function H2:CHg,h,r,t.

Public parameters <E, G, P, q, H ₁ , H ₂ , H ₃ , H ₄ , PK _kgc >, SK _{kgc is} kept secret and will not be disclosed.

Build the chameleon hash function using the elliptic curve discrete logarithm puzzle:

作为陷门私钥，加法群G₁产生生成公钥g，陷门公钥通过计算

Specifically, according to the definition of the chameleon hash function, the integer group is randomly generated

As the trapdoor private key, the additive group G ₁ generates the public key g, and the trapdoor public key is calculated by calculating

The chameleon hash function value CH(value) is calculated by the formula:

改变value的值为value′，为使变色哈希函数值不发生变化，伪造随机值r₂，r₂计算公式为：

Change the value of value to value'. In order to keep the value of the color-changing hash function unchanged, the random value r ₂ is forged. The calculation formula of r ₂ is:

r ₂ =(value-value')/SK _u +r ₁ .

Step 2), use KGC to generate key and trapdoor public key information for the terminal device and the edge server, and then register the information elements that the terminal device and the edge server need to authenticate on the blockchain;

Specifically include the following steps:

Registration of terminal equipment:

a. The terminal device EU hashes the unique identification ID _u P _id =H ₁ (ID _u ), generates a pseudo identification P _id , and sends the pseudo identification P _id to the KGC through a secure channel;

作为临时私钥，并计算R_i＝r_i·P得到临时公钥R_i，通过计算SK_u＝r_i+SK_kgc·P_id作为设备的私钥，通过计算PK_u＝SK_u·P，得到终端设备的公钥PK_u，生成了设备的公私钥信息。b. After the KGC receives the key request information P _id of the terminal device, it generates a random number

As a temporary private key, and calculate R _i =r _i ·P to obtain a temporary public key R _i , by calculating SK _u =r _i +SK _kgc ·P _id as the private key of the device, by calculating PK _u =SK _u ·P, The public key PK _u of the terminal device is obtained, and the public and private key information of the device is generated.

作为终端设备的陷门公钥，并产生当前的时间戳T_kgc。KGC generates a random number g from G ₁ as the generated public key of the chameleon hash function, by calculating

As the trapdoor public key of the terminal device, and generate the current timestamp T _kgc .

The KGC sends the information <SK _u , PK _u , h, T _kgc , R _i > to the terminal device.

c. After receiving the information, the terminal device verifies the timestamp and trapdoor public key information.

First, verify whether the received timestamp and the current timestamp T _u -T _kgc are within the set time range, and if not within the set range, refuse to accept the response information;

By calculating R _i +PK _kgc ·P _id and comparing with PK _u , if they are not equal, reject the response message.

通过CH(g,h,r,t)生成变色龙哈希值，根据生成的变色龙哈希值调用智能合约

将

信息注册到区块链中。The terminal device generates random numbers

Generate the chameleon hash value through CH(g,h,r,t), and call the smart contract according to the generated chameleon hash value

Will

Information is registered in the blockchain.

Registration of Edge Servers

a. The edge server ES hashes the unique identity ID _s and sends it to the KGC through a secure channel;

通过计算SK_s＝x_i+SK_kgc·P_ids得到边缘服务器的私钥，计算PK_s＝SK_s·P得到公钥。并产生当前的时间戳T_kgc，并将信息<SK_s,PK_s,T_kgc>发送给边缘服务器；b. After KGC receives the request, it generates a random value

The private key of the edge server is obtained by calculating SK _s = _xi +SK _kgc ·P _ids , and the public key is obtained by calculating PK _s =SK _s ·P. And generate the current timestamp T _kgc , and send the information <SK _s , PK _s , T _kgc > to the edge server;

c. After the edge server receives the response information, it first determines whether the difference between the current timestamp T _es and the received timestamp T _kgc is within the valid range, and if it is not within the valid range, rejects the response; if it is within the valid range, accepts response;

Call the smart contract registerS(P _ids ,PK _s ,) to register the public key information of the edge server into the blockchain.

Step 3), authenticate the terminal device and the edge server to be authenticated by accessing the information elements used for authentication in the blockchain to complete the identity authentication and the calculation of the session key.

计算P₁＝N₁·P得到临时公钥，通过PK_u+(P₁·P_id)得到PIDI，将<h′,P₁,PIDI,T_n>通过公共信道发送给边缘服务器ES。a. The terminal device requests access to the edge server, obtains the public key information PK' _s of the ES by calling the smart contract, and obtains the public key information from the blockchain to avoid public key replacement. The terminal device passes the trapdoor private key SK _u and the previous The random number r, the time stamp _Tu and the current time stamp T _n generate a random number r' that constitutes the same hash value, and h'=(h') ^r' is calculated. Generate temporary private key

Calculate P ₁ =N ₁ ·P to obtain a temporary public key, obtain PIDI through PK _u +(P ₁ ·P _id ), and send <h′, P ₁ , PIDI, T _n > to the edge server ES through a public channel.

得到终端设备的变色龙哈希函数值，调用智能合约查询该值是否存在，并得到对应的伪身份标识P_id，通过计算PK_u′＝PIDI-(P₁·P_id)得到U的公钥信息。ES产生随机数

作为临时私钥，计算得临时公钥P₂＝N₂·P，计算M＝N₂·P₁，K＝H₄(M‖PK_s)，SessionKey_{s_u}＝H₃(PK_s‖M‖PK_u′‖T_n)，将<P₂,K>发送给U。b. ES is calculated by

Obtain the chameleon hash function value of the terminal device, call the smart contract to check whether the value exists, and obtain the corresponding pseudo-identity identifier P _id , and obtain the public key information of U by calculating PK _u ′=PIDI-(P ₁ ·P _id ) . ES generates random numbers

As the temporary private key, calculate the temporary public key P ₂ =N ₂ ·P, calculate M=N ₂ ·P ₁ , K=H ₄ (M‖PK _s ), SessionKey _{s_u} =H ₃ (PK _s ‖M‖PK _u ′‖T _n ), send <P ₂ ,K> to U.

c. After U receives the information from ES, it calculates M'=P ₂ ·N ₁ , generates K'=H ₄ (M'‖PK _s ), and judges whether K and K' are equal, if not, then Terminate certification. After the authentication is successful, the session key SessionKey _{u_s} = H ₃ (PK _s '‖M'‖ PK _u ‖T _n ) between the terminal device and the edge server is calculated.

Example

Figure 1 shows the architecture diagram of identity authentication, including terminal device U (User), key generation server KGC (KeyGeneration Center) and edge server ES (Edge Server);

Among them, KGC is deployed in the cloud service. The cloud is relatively safe and credible compared to the edge, and because of the huge number of devices, the use of a safe and reliable KGC key generation server can generate a large amount of random and secure key information. , responsible for the distribution of key information for terminal devices and edge servers, and KGC does not save the registration information of terminal devices and edge servers, avoiding the risk of device information leakage due to insecure centralized storage.

The terminal device adopts any device that needs to request edge services, such as smart cameras, smart meters and other terminal devices. The user sends registration and authentication request information to the blockchain network, and sends data to the blockchain network through the calling interface. The execution engine calls the smart contract function, and the blockchain network agrees on the generated registration and other transaction data, and saves it in the blockchain. Each terminal device and edge server needs to be registered on the blockchain before they can enjoy or Provide services.

ES is responsible for providing efficient data processing and analysis for U and serving the use of U. Each ES added to the blockchain network can not only ensure the normal operation of the blockchain distributed ledger, but also communicate with the cloud. Rich computing, storage and other resources ensure high efficiency and low cost of application services.

The invention adopts the blockchain as a distributed, credible and shared ledger, which can securely store the authentication information elements in a distributed and credible manner, realize the distributed and credible sharing of authentication data, and provide trust assistance for identity authentication. ES and U complete the registration on the blockchain by calling the smart contract, and query the authentication information elements of the device by calling the smart contract. The information of U is not stored in the blockchain in the form of plaintext, but only the relevant information elements are stored to avoid the leakage of the identity information of the terminal equipment. In order to better utilize the advantages of being close to the data source, ES provides faster and more convenient services. There is no need to provide ES with identity anonymity, and information is stored in clear text.

During the entire registration and authentication process, the device requests to obtain key information through the secure channel, the terminal device and the edge server complete the mutual authentication process through the public channel, and calculate the secure session key, which realizes the transmission of data to the application service to a certain extent. to protect. Identity Authentication Architecture

Example:

Alibaba cloud server is used to simulate as edge server, configuration: Intel(R) Xeon(R) CPU E5-26300@2.30GHz, 1GB memory and Ubuntu 14.04, on the other hand, Google Nexus One smartphone is used as terminal device, configured with 2GHz ARM CPU armeabi-v7a, 300MiB RAM and android 4.4.

The computational overhead required for different encryption operations under the two devices is obtained by repeating the calculation several times. The statistical data are shown in Table 1.

Table 1 Time consumption (ms) required for different encryption operations

The computational overhead and communication overhead of the statistical authentication scheme are shown in Table 2 and Table 3, respectively.

Table 2 Overhead calculation

By calculating and comparing the overheads of several schemes, the overall overhead of the authentication scheme of the present invention is the minimum of 75.966ms, and the calculation overhead of the terminal is also the minimum of 66.827ms.

Table 3 Calculation of communication cost

标识ID、哈希值H、时间戳T和循环加法群G，在所提出的认证方案中，这些长度的设定如下：

|T|＝32b、|G|＝1024b、|ID|＝256b。根据这些值，计算并总结了协议的通讯成本，本发明的认证方案的通讯开销为4288bits，低于基于身份的匿名认证方案，表3列出了本申请的方案和对比方案的通讯字段。The number of messages transmitted between parties is considered as a measure, and these transmitted messages are represented by different symbols, which represent different sizes, such as groups of large integers

Identity ID, hash value H, timestamp T and cyclic addition group G, in the proposed authentication scheme, these lengths are set as follows:

|T|=32b, |G|=1024b, |ID|=256b. According to these values, the communication cost of the protocol is calculated and summarized. The communication overhead of the authentication scheme of the present invention is 4288 bits, which is lower than that of the anonymous authentication scheme based on identity. Table 3 lists the communication fields of the scheme of the present application and the comparison scheme.

The invention constructs the chameleon hash function through discrete logarithms to ensure the anonymity and security of the authentication, uses the block chain to save the information elements of the authentication data, and realizes the distributed data reliability. By comparing the other three systems based on elliptic encryption curve This proves that the use of the chameleon hash function to anonymize the device identity and the use of blockchain to achieve distributed identity authentication can effectively reduce the authentication calculation overhead and compensate for the cost of lightweight devices. The resources are limited, and it can make up for the single point of failure caused by centralized identity authentication and the complex certificate management caused by the PKI digital certificate authentication method due to the large number of devices. This identity authentication method is more suitable for identity authentication in edge computing environments.

Claims (10)

1. a distributed and credible identity authentication method in an edge computing environment, is characterized in that, comprises the following steps: S1, initialize the system parameters of the terminal device to be authenticated and the edge server, and use the initialized parameters to construct a chameleon hash function; S2, use KGC to generate the key and trapdoor public key information for the terminal device and the edge server, and then register the information elements that the terminal device and the edge server need to authenticate to the blockchain; S3, authenticate the terminal device and the edge server to be authenticated by accessing the information elements used for authentication in the blockchain to complete the identity authentication and the calculation of the session key. 2. a distributed and credible identity authentication method in a kind of edge computing environment according to claim 1, is characterized in that, adopts key generation server to generate elliptic curve E, its order is q, and generator is P, loop The additive group G, the group of large integers of order r

Using KGC from the large integer group

Randomly generate a random number SK _kgc as the _{private key in the}

3. The distributed and credible identity authentication method in a kind of edge computing environment according to claim 1, is characterized in that, adopts chameleon hash function to carry out anonymous processing for each authentication of terminal equipment, based on each authentication request. time to build the same hash. 4 . The distributed and credible identity authentication method in an edge computing environment according to claim 3 , wherein the chameleon hash function is constructed using discrete logarithm problems. 5 . 5. The distributed and credible identity authentication method in a kind of edge computing environment according to claim 1, is characterized in that, terminal equipment EU carries out hash P _id =H ₁ (ID _u ) with unique identity ID _u , generate a pseudo-identity identifier P _id , and send the pseudo-identity identifier P _id to the KGC through a secure channel; After the KGC receives the key request information P _id of the terminal device, it generates a random number

As the temporary private key, and calculate Ri = ri ·P to obtain the temporary public key Ri, by calculating SK _u = _ri +SK _kgc ·P _id as the private _key of the device, by calculating PK _u =SK _{u ·} P, get The public key PK _u of the terminal device is used to generate the public and private key information of the terminal device; After the terminal device receives the information, it verifies the timestamp and trapdoor public key information. 6. A distributed and credible identity authentication method in an edge computing environment according to claim 5, wherein the random number g ∈ G ₁ generated by KGC is used as the generated public key of the chameleon hash function, and is calculated by calculating

As the trapdoor public key of the terminal device, and generate the current timestamp T _kgc . 7. the distributed and credible identity authentication method in a kind of edge computing environment according to claim 5, is characterized in that, at first verify whether the time stamp received and current time stamp T _u -T _kgc are set in Within the time range, if it is not within the set range, it will refuse to accept the response information. 8. The distributed and credible identity authentication method in a kind of edge computing environment according to claim 1, is characterized in that, the edge server ES sends the unique identity ID _s to KGC through a secure channel after hashing; After KGC receives the request, it generates a random value

The private key of the edge server is obtained by calculating SK _s = _xi +SK _kgc ·P _ids , the public key is obtained by calculating PK _s =SK _s ·P, and the current timestamp T _kgc is generated, and the information <SK _s , PK _s , T _kgc > send to edge server; After receiving the response information, the edge server firstly judges whether the difference between the current timestamp T _es and the received timestamp T _kgc is within the valid range, and if it is not within the valid range, it refuses to accept the response; if it is within the valid range, it accepts the response. 9. The distributed and trusted identity authentication method in an edge computing environment according to claim 1, wherein the terminal device requests access to the edge server, obtains the public key information PK s of the ES by calling a smart contract, and obtains the public key information PK _s of the ES from the district Obtain public key information in the blockchain; ES calculates

Obtain the chameleon hash function value of the terminal device, call the smart contract to check whether the value exists, and obtain the corresponding pseudo-identity identifier P _id , and obtain the public key information of U by calculating PK _u ′=PIDI-(P ₁ ·P _id ) . 10. A distributed and trusted identity authentication system in an edge computing environment, characterized in that it comprises a terminal device, an edge server, a key generation server and a blockchain: The key generation server is used to generate keys and trapdoor public key information for terminal devices and edge servers; Terminal devices and edge servers register information elements that require authentication on the blockchain; When authentication is required, initialize the system parameters of the terminal device and the edge server, and use the initialized parameters to construct the chameleon hash function. The terminal device and the edge server authenticate by accessing the information elements used for authentication in the blockchain to complete the identity. Authentication and calculation of session keys.

Images