中圖分類號： TP309
文獻標識碼： A
DOI： 10.19358/j.issn.2096-5133.2020.11.004
引用格式： 郭仲勇，劉揚，張宏元，等. 基于零信任架構(gòu)的IoT設備身份認證機制研究[J].信息技術(shù)與網(wǎng)絡安全，2020，39(11)：23-30.

Research on identity authentication mechanism of IoT devices based on zero trust architecture

Abstract： With the development of the Internet of Things technology and the Internet economy, network security threats and risks under the new technology situation continue to emerge and spread. New application scenarios have caused the blurring of network security boundaries and increased new exposure. Security risks cannot be ignored. Based on zero trust technology, it uses blockchain, device fingerprints, PKI/DPKI, artificial intelligence, lightweight security protocols and algorithms as the identity security infrastructure. The focus is on the design and optimization of identity security infrastructure,IoT gateways,perception gateway node equipment and other identity authentication schemes. Finally, through experiments and analysis, the actual effect of the program is verified.

Key words : zero trust；identity authentication；device fingerprint；blockchain；edge computing