| In the age of development of Internet technology with high-speed,all kinds of smart devices bring great changes to modern human life.The use of smart locks is also increasingly widespread from doors to shared bikes.Smart locks have broad application prospects and commercial value.This thesis mainly studies the architecture of smart lock security and its own characteristics,and analyzes the security threats faced by smart locks combining the application scenarios.In view of the security issues such as identity authentication and key distribution caused by the interaction between different identities of smart lock users,the authentication method and key distribution protocol for smart locks are proposed.The performance and security analysis of the authentication method and the distribution protocol are respectively carried out,and the results show that the two can meet the security requirements of the smart lock in different scenarios.The details are described as follows:(1)Aiming to identity authentication problem in smart locks,this thesis presents a certificateless identity authentication scheme.The use of the certificateless cryptosystem can effectively solve the issues of key escrow and certificate management.Compared to the identity authentication system using Public Key Infrastructure(PKI),our scheme does not need to verify the legitimacy of certificates,and reduces the overhead of storage and maintenance the certificate.In this scheme,there will be no key escrow problem that cannot be avoided in the identity-based cryptosystem.In order to improve the computational efficiency,bilinear pairing computation should be avoided during the signing and verification phase.Our certificateless authentication scheme is based on the discrete logarithm problem over a finite field,and is more applicable to smart locks,which have limited computing power.(2)Aiming to the problem of key allocation of smart locks,this thesis presents a key distribution protocol based on elliptic curve.The smart lock are applied in short-term rental apartments and hotels,where users are often divided into different levels and different levels of users have different permissions.We combine hierarchical ideas with cryptographic techniques and use cryptographic techniques to implement access control for different user identities.The smart lock users have a clear hierarchy of permissions and the system will distribute key permissions corresponding to their level.The proposed solution effectively solves the dynamic management of keys,such as adding or deleting users,changing user passwords,and changing user level relationships,etc. |