论文标题
Lakee：轻巧验证的电源约束设备的密钥交换协议
LAKEE: A Lightweight Authenticated Key Exchange Protocol for Power Constrained Devices
论文作者
论文摘要
物联网网络的快速发展导致了为其设计有效安全功能的研究趋势。由于IoT设备的功率受限性质，安全功能应保持尽可能轻巧。当前，大多数IOT网络流量都没有加密。智能设备未加密的数据的泄漏可能会带来隐私漏洞的重大成本。要拥有一个具有加密流量的安全通道，网络中的两个端点必须相互验证并计算短期密钥。然后，他们可以通过经过身份验证且安全的渠道进行通信。此过程称为身份验证的密钥交换（AKE）。尽管Datagram传输层安全性（DTLS）为IoT网络提供了AKE协议，但研究提出了更有效和特定案例的替代方案。本文介绍了Lakee，这是一种简单明了，轻巧的物联网网络协议。我们的协议采用椭圆曲线密码学来生成短期会话密钥。它减少了替代方案的沟通和计算开销，同时保持或提高其安全强度。协议的简单性和低开销使其适合一个受约束设备网络。
The rapid development of IoT networks has led to a research trend in designing effective security features for them. Due to the power-constrained nature of IoT devices, the security features should remain as lightweight as possible. Currently, most of the IoT network traffic is unencrypted. The leakage of smart devices' unencrypted data can come with the significant cost of a privacy breach. To have a secure channel with encrypted traffic, two endpoints in a network have to authenticate each other and calculate a short-term key. They can then communicate through an authenticated and secure channel. This process is referred to as authenticated key exchange (AKE). Although Datagram Transport Layer Security (DTLS) offers an AKE protocol for IoT networks, research has proposed more efficient and case-specific alternatives. This paper presents LAKEE, a straightforward, lightweight AKE protocol for IoT networks. Our protocol employs elliptic curve cryptography for generating a short-term session key. It reduces the communication and computational overhead of its alternatives while maintaining or improving their security strength. The simplicity and low overhead of our protocol make it a fit for a network of constrained devices.
