数字家庭设备综合认证方法研究

发布时间：2018-12-13 17:40

【摘要】：实现不同通信制式的家庭设备安全互联及其保证设备的真实性和合法性是构建数字家庭网络的基本要求。缺乏有效的异构设备接入认证和完整性验证方法是影响数字家庭设备安全和数据安全的主要因素。传统的用户身份认证方法因无法保证设备在接入和通信过程中的可信性导致家庭设备非法接入、用户隐私泄露等安全问题。针对数字家庭缺乏有效的异构设备综合接入认证方法的问题,基于可信计算的思想,本文提出了一种基于TPM的数字家庭设备可信接入认证机制,将设备接入分为注册、接入和更新三个阶段。设备注册中联合设备生产厂商完成对设备真实性和合法性的验证,设备接入时通过比较设备完整性度量值实现对设备的完整性验证。设备更新时即时更新设备完整度量值信息以保证设备的持续接入。在此基础上设计了相关的设备可信接入协议,详细描述了接入认证过程。针对数字家庭中缺乏有效的设备认证问题,提出了基于PKI的设备认证方法并设计了相关认证协议。利用在设备注册阶段签发的设备证书来保证设备的唯一性和真实性验证,并且该协议采用了基于ECDH的密钥协商机制。ECDH高强度、短密钥、计算快的优点降低了对设备性能要求,使得该方法普适性增强,提高了认证过程的安全性,同时设备证书的签名对消息发送者身份的验证,解决了ECDH密钥交换协议易受中间人攻击的问题。基于以上研究,本文设计了数字家庭设备综合认证平台,对数字家庭设备可信接入认证协议和设备认证协议进行了详细的描述。
[Abstract]:It is the basic requirement to construct the digital home network to realize the secure interconnection of different communication systems and to guarantee the authenticity and legitimacy of the devices. The lack of effective authentication and integrity verification methods for heterogeneous devices is the main factor affecting the security of digital home devices and data security. The traditional user identity authentication method can not guarantee the credibility of the equipment in the process of access and communication, which leads to the illegal access of family equipment, user privacy disclosure and other security problems. In order to solve the problem of the lack of effective integrated access authentication method for heterogeneous devices in digital home, based on the idea of trusted computing, a trusted access authentication mechanism for digital home devices based on TPM is proposed in this paper, which divides device access into registration. Access and update three stages. In the process of equipment registration, the joint equipment manufacturer completes the verification of the authenticity and legitimacy of the equipment. When the equipment is connected, the integrity of the equipment is verified by comparing the equipment integrity measures. Update the complete measurement information of the equipment immediately when the equipment is updated to ensure the continuous access of the device. On the basis of this, we design the relevant equipment trusted access protocol, and describe the process of access authentication in detail. Aiming at the lack of effective device authentication in digital home, a device authentication method based on PKI is proposed and the related authentication protocol is designed. The device certificate issued in the phase of device registration is used to ensure the uniqueness and authenticity of the device, and the protocol adopts the key agreement mechanism based on ECDH. The advantages of ECDH high strength, short key and fast calculation reduce the requirement of device performance. This method enhances the universality of the method and improves the security of the authentication process. At the same time the signature of the device certificate verifies the identity of the message sender and solves the problem that ECDH key exchange protocol is vulnerable to attack by the middleman. Based on the above research, this paper designs a digital home equipment integrated authentication platform, describes the digital home equipment trusted access authentication protocol and device authentication protocol in detail.
【学位授予单位】：西安电子科技大学
【学位级别】：硕士
【学位授予年份】：2014
【分类号】：TP393.08

【相似文献】