基于puf和ipi的可穿戴设备双因子认证协议two-factor-大数据.pdfVIP

第 38 卷第 6 期 通 信 学 报 Vol.38 No.6 2017 年 6 月 Journal on Communications June 2017 doi:10.11959/j.issn.1000-436x.2017125 基于 PUF 和 IPI 的可穿戴设备双因子认证协议 王俊 1,2 ，刘树波 1,2 ，梁才 1,2 ，李永凯 1,2 （1. 武汉大学空天信息安全与可信计算教育部重点实验室，湖 武汉 430072 ；2. 武汉大学计算机学院，湖 武汉 430072 ） 摘 要：可穿戴设备正推进着移动医疗的快速发展，但无线体域网的开放式结构也给用户数据安全带来了更多威 胁。为了数据安全，基于物理不可克隆函数和脉搏间隔，提出一种设备节点和数据中心之间的双因子认证协议。 此协议利用设备物理特征和用户生物特征双重唯一性，有效地阻止了妥协和假冒等攻击，且适用于体域网环境下 资源受限的医疗设备。与现有方案相比，增强了认证协议安全性。FPGA 平台上实验证明了所提协议的实用性和 有效性。 关键词：认证协议；双因子；物理不可克隆函数；脉搏间隔 中图分类号：TP309.2 文献标识码：A Two-factor wearable device authentication protocol based on PUF and IPI WANG Jun1,2, LIU Shu-bo1,2, LIANG Cai1,2, LI Yong-kai1,2 (1. Key Laboratory of Aerospace Information Security and Trusted Computing Ministry of Education, Wuhan University, Wuhan 430072, China 2. School of Computer, Wuhan University, Wuhan 430072, China) Abstract: Wearable device is pushing the rapid development of mobile health, however, the open architecture of wireless body area network has brought challenges for the security of user data. In order to protect the security of user data, a two-factor authentication protocol between device note and data hub was proposed based on physically unclonable func- tion and interpulse interval. Using dual uniqueness of device physical characteristic and user biometric trait, the protocol can resist compromise and impersonation attacks and was specially suitable for resource constrained wearable devices under body area network. Compared with the existing authentication schemes, the security of the proposed protocol was