Industrial Internet Identifier Resolution Security from the Perspective of Authentication

doi:10.3969/j.issn.1671-1122.2020.09.016

Abstract

Abstract:

Identifier resolution is an important network infrastructure of the Industrial Internet. As network security threats accelerate to spread to the industrial field, Industrial Internet identifier resolution has become a key target of network attacks. This paper is devoted to meet the security certification requirements of registration, access, data management, and resolution services of Industrial Internet identifier resolution. Firstly, it analyzes the security threats under typical scenarios of Industrial Internet identifier resolution applications from the perspective of authentication. Then it proposes a unified identity authorization and authentication management framework for Industrial Internet identifier resolution. The framework provides full-factor, full-process, and comprehensive security authentication capabilities. This paper provides a reference for further research on Industrial Internet identifier resolution security and strategy for defense.

Key words: Industrial Internet identifier resolution, Industrial Internet identifier resolution security, authentication

CLC Number:

TP309

YU Guo, WANG Chonghua, CHEN Xuehong, LI Jun. Industrial Internet Identifier Resolution Security from the Perspective of Authentication[J]. Netinfo Security, 2020, 20(9): 77-81.

Figures/Tables 2

References 7

[1]	LIAO Kai. Deepen the Integration of the Internet, Big Data, Artificial Intelligence and the Real Economy, and Enhance the Ability to Ensure Industrial Information Security[J]. Security & Informatization, 2018,18(12):4-6.
	廖凯. 深化互联网、大数据、人工智能与实体经济融合提升工业信息安全保障能力[J]. 网络安全和信息化, 2018,18(12):4-6.
[2]	WANG Chonghua, HE Xiaolong, CHEN Xuehong. Industrial Internet Identifier Resolution Security Capability Needs to be Improved Right Now[J]. China Information Security, 2019,19(6):53-55.
	王冲华, 何小龙, 陈雪鸿. 工业互联网标识解析安全保障能力亟需提高[J]. 中国信息安全, 2019,19(6):53-55.
[3]	MA Yuanyuan, LIU Zhoubin, WANG Zixiang. Research on Heterogeneous Terminal Security Access Technology in Edge Computing Scenario[J]. Computer Engineering and Applications, 2020,56(17):115-120.
	马媛媛, 刘周斌, 汪自翔. 边缘计算场景下的异构终端安全接入技术研究[J]. 计算机工程与应用, 2020,56(17):115-120.
[4]	MAO W B. Modern Cryptography: Theory and Practice[M]. WANG Jilin, WU Qianhong, Translate. Beijing: Publishing House of Electronics Industry, 2004.
	MAO W B. 现代密码学理论与实践[M]. 王继林, 伍前红,译.北京:电子工业出版社, 2004.
[5]	YANG Bin, CHEN Guoqing, SUN Yonghong. Research of a New Identity-based Authentication Model for Multi-domain[J]. Computer Security, 2010,10(8):15-18.
	杨斌, 陈国庆, 孙永红. 一种新的基于身份的多信任域认证模型研究[J]. 计算机安全, 2010,10(8):15-18.
[6]	ZHANG Meng, YIN Qiqi. Research Progress of Cryptography Algorithms Used in Identity Authentication Technology[J]. Cyberspace Security, 2018,9(6):56-58.
	张猛, 尹其其. 身份认证技术中应用的密码算法研究进展[J]. 网络空间安全, 2018,9(6):56-58.
[7]	CHENG Zhaohui. Certificateless Public Key Encryption Based on SM2[EB/OL]. http://kns.cnki.net/kcms/detail/10.1195.TN.20200904.1536.008.html, 2020-6-8.
	程朝辉. 基于SM2的无证书加密算法[EB/OL]. http://kns.cnki.net/kcms/detail/10.1195.TN.20200904.1536.008.html,2020-6-8.

[1]	WANG Li, LI Erxia, JI Yuchen, LI Xiaoyong. PUF-based Anti-physical Cloning RFID Security Authentication Protocol [J]. Netinfo Security, 2020, 20(8): 89-97.
[2]	ZHANG Xiao, LIU Jiqiang. Multi-factor Authentication Protocol Based on Hardware Fingerprint and Biometrics [J]. Netinfo Security, 2020, 20(8): 9-15.
[3]	LIU Xiaofen, CHEN Xiaofeng, LIAN Guiren, LIN Song. Authenticated Multiparty Quantum Secret Sharing Protocol with d-level Single Particle [J]. Netinfo Security, 2020, 20(3): 51-55.
[4]	HOU Lin, FENG Da, XUAN Pengkai, ZHOU Fucai. Outsourcing Database Join Query Verification Scheme Based on Authentication Tree [J]. Netinfo Security, 2020, 20(2): 91-97.
[5]	HU Die, MA Dongtang, GONG Ming, MA Zhao. A Physical Layer Security Authentication Method Based on PUF [J]. Netinfo Security, 2020, 20(1): 61-66.
[6]	Fuyou ZHANG, Qiongxiao WANG, Li SONG. Research on Unified Identity Authentication System Based on Biometrics [J]. Netinfo Security, 2019, 19(9): 86-90.
[7]	Baoyuan KANG, Mingming XIE, Lin SI. Research on a Biometrics-based Multi-cloud Server Authentication Scheme [J]. Netinfo Security, 2019, 19(6): 45-52.
[8]	Ruiying CHEN, Zemao CHEN, Hao WANG. Design and Optimization of Security Monitoring and Controlling Protocol in Industrial Control Systems [J]. Netinfo Security, 2019, 19(2): 60-69.
[9]	Yongshuang WEI, Jianhua CHEN, Yongmei WEI. Security Authentication Protocol for RFID/NFC Based on Elliptic Curve Cryptography [J]. Netinfo Security, 2019, 19(12): 64-71.
[10]	Shun ZHANG, Zhangkai CHEN, Fengyu LIANG, Runhua SHI. A Quantum Identity Authentication Based on Bell State [J]. Netinfo Security, 2019, 19(11): 43-48.
[11]	Min ZHANG, Chunxiang XU, Minying HUANG. Research on Multi-server Lightweight Multi-factor Authentication Protocol in Telemedicine Environment [J]. Netinfo Security, 2019, 19(10): 42-49.
[12]	Mengmeng YAO, Zhengchao ZHU, Mingda LIU. An Improved Formal Analysis Method Based on Authentication Tests [J]. Netinfo Security, 2019, 19(1): 27-33.
[13]	Wenjiang HAO, Fei SONG, Yueliang WAN. Research on Security Authentication Protocol for Wearable Police Devices [J]. Netinfo Security, 2018, 18(9): 25-29.
[14]	Qiongqiong DUAN, Dinghua XIANG, Hongzhou SHI. Design on the Blockchain-based Authentication for Smart Objects [J]. Netinfo Security, 2018, 18(9): 95-101.
[15]	Wei HU, Qiuhan WU, Shengli LIU, Wei FU. Design of Secure eID and Identity Authentication Agreement in Mobile Terminal Based on Guomi Algorithm and Blockchain [J]. Netinfo Security, 2018, 18(7): 7-9.