通过统一增强的FAST-SM9和动态重新认证,为物联网提供轻量级的零信任认证架构
Zhanfei Ma1,2, Hui Wei2,3, Jing Jiang2
1School of Information Science and Technology, Baotou Teachers' College, Baotou, Inner Mongolia, China.
PloS one
|October 27, 2025
概括
本研究介绍了一种用于物联网 (IoT) 安全的轻量级认证框架,它结合了FAST-SM9和零信任动态重新认证. 拟议的系统提高了云端端环境中的安全性和效率.
科学领域:
- 计算机科学 计算机科学
- 网络安全 网络安全
- 网络安全 网络安全
背景情况:
- 物联网 (IoT) 环境面临着严重的认证挑战,因为它们的分布性和资源限制性.
- 现有的身份验证方法往往缺乏效率,适应性和对复杂的安全威胁的强有力的防御.
- 对于物联网的广泛采用,安全和轻量级身份验证的需求至关重要.
研究的目的:
- 为物联网中的云端端系统提出一种新的轻量级认证框架.
- 提高安全性,效率和适应能力,以应对复杂的网络威胁.
- 为分布式物联网生态系统中安全身份认证提供可扩展和实用的解决方案.
主要方法:
- 集成SM9 (FAST-SM9) 算法增强的快速身份验证和签名信任,以减少协议开销.
- 实施零信任动态重新认证 (零信任DRA) 机制,使用上下文意识,时间窗口技术.
- 开发使用多因素属性的动态身份代币生成机制 (DITGM),以提高安全性和灵活性.
主要成果:
- FAST-SM9减少了40%的沟通轮次,并简化了信任谈判.
- 零信任DRA机制有效地防止会话劫持和凭证泄露.
- 与传统的PKI方法相比,拟议的框架显示,延迟时间减少了56.6%,能源消耗减少了63%.
- 使用AVISPA的正式验证证实了安全性,并且可扩展性测试验证了其在物联网中的适用性.
结论:
- 拟议的云端端认证框架为物联网提供了安全性和效率的显著改善.
- 整合FAST-SM9和零信任DRA提供了对各种网络威胁的强有力的防御.
- 这项研究为分布式物联网环境开发安全和高效的零信任安全系统提供了可行的途径.
相关概念视频
Role-Based Identity
173
Role-based identities are central to understanding how individuals navigate social environments by adopting distinct self-conceptions aligned with various societal roles. These identities are not fixed traits but are constructed through personal actions and the social feedback individuals receive in context-specific interactions. Each social role, such as student, teacher, or friend, carries a set of expectations and norms that influence how people think, feel, and behave within that...
173
Zero-Force Member
2.2K
A truss is a framework that comprises slender members connected at their ends by joints. Trusses are widely used in engineering and architecture to stabilize and strengthen structures like bridges, roofs, and towers. Truss members are designed to carry loads through tension and compression, enabling the truss to withstand external forces.
One critical concept in truss design is the idea of zero-force members. It refers to a truss member that experiences no stress under loading conditions.
One critical concept in truss design is the idea of zero-force members. It refers to a truss member that experiences no stress under loading conditions.
2.2K
Fast Decoupled and DC Powerflow
724
The fast decoupled power flow method addresses contingencies in power system operations, such as generator outages or transmission line failures. This method provides quick power flow solutions, essential for real-time system adjustments. Fast decoupled power flow algorithms simplify the Jacobian matrix by neglecting certain elements, leading to two sets of decoupled equations:
724
Social Proof
31.5K
Social proof is a form of persuasion based on comparison and conformity. People compare their behavior and actions to what others are doing and will change to conform to do what their peers do.
31.5K
Strategies of Self-Presentation I: Strategic Self-Presentation
189
Strategic self-presentation refers to individuals' intentional efforts to influence how others perceive them. This process is employed in various social and professional settings, such as job interviews, dating, politics, and legal contexts, where individuals seek to shape impressions to gain social or material advantages. While people generally present themselves in ways that align with their authentic characteristics, external factors, such as cognitive load, can hinder their ability to...
189
The Z-Scheme of Electron Transport in Photosynthesis
13.1K
The light reactions of photosynthesis assume a linear flow of electrons from water to NADP+. During this process, light energy drives the splitting of water molecules to produce oxygen. However, oxidation of water molecules is a thermodynamically unfavorable reaction and requires a strong oxidizing agent. This is accomplished by the first product of light reactions: oxidized P680 (or P680+), the most powerful oxidizing agent known in biology. The oxidized P680 that acquires an electron from the...
13.1K

