Hash-Based Secure Simple Pairing for Preventing Man-in-the-Middle Attacks in Mobile Cloud Computing

doi:10.3969/j.issn.0372-2112.2016.08.005

您当前的位置：

首页 >

文章列表页 >

Hash-Based Secure Simple Pairing for Preventing Man-in-the-Middle Attacks in Mobile Cloud Computing

更新时间：2025-07-08

- Hash-Based Secure Simple Pairing for Preventing Man-in-the-Middle Attacks in Mobile Cloud Computing
- Acta Electronica Sinica Vol. 44, Issue 8, Pages: 1806-1813(2016)
- 作者机构：
  
  1. 信息安全国家重点实验室,北京,100093
  2. 中国科学院信息工程研究所,北京,100093
  3. 中国科学院大学,北京,100049
  4. 国家能源局安全司,北京,100824
  5. 华北电力大学电气与电子工程学院,北京,102206
  6. 山东省电力公司调度控制中心自动化处,山东,济南,250000
  7. 信息安全国家重点实验室,北京,100093
  8. 中国科学院信息工程研究所,北京,100093
  9. 中国科学院大学,北京,100049
  10. 国家能源局安全司,北京,100824
  11. 华北电力大学电气与电子工程学院,北京,102206
  12. 山东省电力公司调度控制中心自动化处,山东,济南,250000
- 作者简介：
- 基金信息：
  
  Subject of Pilot Project of Chinese Academy of Sciences (No.XDA06010701);State Key Laboratory of Information Security Research Instruments and Equipment Project (No.Y4D0031302)
- DOI：10.3969/j.issn.0372-2112.2016.08.005
  CLC： TP309.1
- Published Online：25 August 2016，
  
  Published：2016
- 稿件说明：
移动端阅览
Hash-Based Secure Simple Pairing for Preventing Man-in-the-Middle Attacks in Mobile Cloud Computing[J]. Acta Electronica Sinica, 2016, 44(8): 1806-1813.
DOI：

Hash-Based Secure Simple Pairing for Preventing Man-in-the-Middle Attacks in Mobile Cloud Computing[J]. Acta Electronica Sinica, 2016, 44(8): 1806-1813. DOI： 10.3969/j.issn.0372-2112.2016.08.005.

摘要

低功率蓝牙（BLE）专为资源受限的设备设计，但现有的研究已经指出其安全简单配对方案（SSP）存在中间人攻击（MITM）漏洞.文章指出造成MITM漏洞的根本原因是：配对信息被篡改以及JW模式自身的漏洞.为此文章中提出了两个适用于移动云计算（MCC）中BLE设备的SSP改进方案，所提出的方案基于哈希函数并利用MCC技术提高SSP的安全性.方案1适用于支持PE或者OOB模式的BLE设备，其利用哈希函数确保配对信息的真实性、可靠性.方案2通过哈希序列来解决仅支持JW模式的BLE设备的MITM攻击漏洞.文章分别从安全角度和性能角度对所提出的方案进行分析，以表明方案在不同级别敌手的攻击下可以提供MITM攻击防护能力.

Abstract

Bluetooth low energy (BLE) is designed for the devices with computational and power limitations.But it has been confirmed that Secure Simple Pairing (SSP) is vulnerable to the MITM attack.We identify the root causes of the problem:the pairing messages being tampered

and the vulnerability of the JW model.In this paper

we propose two hash-based SSP schemes for the devices in Mobile Cloud Computing (MCC).The proposed schemes enhance the SSP security with the help of MCC.Scheme I is applied into the devices which support the PE or OOB model.It uses the hash function to ensure the authenticity and integrity of the pairing messages.Scheme Ⅱ is suitable for the devices which only support the JW model.It improves the security of the JW model through using the hash array.At the end of this paper

we examine the performance for the proposed schemes

and perform the security analysis to show that they can provide the MITM protection against the adversaries with different levels of power.

关键词

Keywords

references

Views

655

下载量

CSCD

Alert me when the article has been cited

提交

Tools

Publicity Resources

No data

Related Author

No data

Related Institution

No data

⁰