【摘要】：物聯(lián)網(wǎng)應(yīng)用大多都涉及用戶的隱私數(shù)據(jù)傳輸,所以保護(hù)物聯(lián)網(wǎng)應(yīng)用安全成為物聯(lián)網(wǎng)發(fā)展中的首要問題。而且目前的許多物聯(lián)網(wǎng)應(yīng)用是處于移動(dòng)環(huán)境中的,傳統(tǒng)的借助安全網(wǎng)關(guān)保證數(shù)據(jù)傳輸安全性的方法就不太適用,所以文章以物聯(lián)網(wǎng)端到端安全為切入點(diǎn),研究輕量化端到端安全機(jī)制。文章首先基于現(xiàn)存的物聯(lián)網(wǎng)標(biāo)準(zhǔn)協(xié)議和DTLS(Datagram Transport Layer Security)安全協(xié)議提出了物聯(lián)網(wǎng)環(huán)境下的端到端安全機(jī)制。該安全機(jī)制可以實(shí)現(xiàn)數(shù)據(jù)傳輸?shù)臋C(jī)密性、完整性和可靠性保護(hù),也可以在客戶端和服務(wù)器之間進(jìn)行雙向認(rèn)證。文章在傳感節(jié)點(diǎn)平臺(tái)上實(shí)現(xiàn)該安全機(jī)制,并進(jìn)行了驗(yàn)證,結(jié)果表明基于DTLS的端到端安全機(jī)制確實(shí)具有低開銷和高互操作性。針對(duì)物聯(lián)網(wǎng)中的傳感節(jié)點(diǎn)一般均為資源限制型、部署較龐大的DTLS安全協(xié)議略顯低效的問題,文章在比較了現(xiàn)有的幾種壓縮方法后,選用了6LoWPAN報(bào)頭壓縮法對(duì)DTLS的報(bào)頭和握手消息進(jìn)行壓縮,并給出了在資源受限型節(jié)點(diǎn)上實(shí)現(xiàn)輕量化DTLS的方法。文章最后在傳感節(jié)點(diǎn)平臺(tái)上實(shí)現(xiàn)輕量化的端到端安全機(jī)制,并進(jìn)行驗(yàn)證。結(jié)果表明輕量化的安全機(jī)制可以有效縮小數(shù)據(jù)包長(zhǎng)度,內(nèi)存占用和能源消耗等均大幅減少,可以適應(yīng)傳感節(jié)點(diǎn)資源限制的特點(diǎn)。
[Abstract]:The Internet of things applications mostly involve the user's privacy data transmission, so protecting the security of Internet of things application becomes the most important problem in the development of the Internet of things. And many of the Internet of things applications are in the mobile environment, the traditional way to ensure the security of data transmission by means of security gateway is not very suitable, so this paper takes the end-to-end security of the Internet of things as the breakthrough point. The end-to-end security mechanism of lightweight is studied. Based on the existing standard protocol of Internet of things and DTLS (Datagram Transport Layer Security) security protocol, the end-to-end security mechanism in the Internet of things environment is proposed in this paper. The security mechanism can protect the confidentiality, integrity and reliability of data transmission, and can be authenticated between client and server. The security mechanism is implemented on the sensor node platform and verified. The results show that the end-to-end security mechanism based on DTLS does have low overhead and high interoperability. In order to solve the problem that sensor nodes in the Internet of things are generally resource-constrained and slightly inefficient in deploying large DTLS security protocols, this paper compares several existing compression methods. The 6LoWPAN header compression method is used to compress the header and handshake message of DTLS, and the method of implementing lightweight DTLS on resource-constrained nodes is given. Finally, the light end-to-end security mechanism is implemented on the sensor node platform and verified. The results show that the lightweight security mechanism can effectively reduce the packet length, memory consumption and energy consumption, and can adapt to the characteristics of sensor node resource constraints.
【學(xué)位授予單位】：南京郵電大學(xué)
【學(xué)位級(jí)別】：碩士
【學(xué)位授予年份】：2017
【分類號(hào)】：TN929.5;TP391.44

【參考文獻(xiàn)】

相關(guān)期刊論文 前3條

1 趙敏;江凌云;李占軍;;基于DTLS的物聯(lián)網(wǎng)端到端安全機(jī)制研究[J];南京郵電大學(xué)學(xué)報(bào)(自然科學(xué)版);2016年05期

2 任偉;;物聯(lián)網(wǎng)安全架構(gòu)與技術(shù)路線研究[J];信息網(wǎng)絡(luò)安全;2012年05期

3 詹靜;張煥國(guó);;可信平臺(tái)模塊自動(dòng)化測(cè)試研究[J];計(jì)算機(jī)研究與發(fā)展;2009年11期

相關(guān)博士學(xué)位論文 前1條

1 張俊松;物聯(lián)網(wǎng)環(huán)境下的安全與隱私保護(hù)關(guān)鍵問題研究[D];北京郵電大學(xué);2014年

，

本文編號(hào)：2426201