A Hierarchical Lightweight Authentication Scheme Based on Merkle Tree and Hash Chain
Distributed systems such as cloud computing and the Internet of Things are widely used in various critical application domains,and their security issues are receiving increasing attention.Due to the complex deployment environment,the characteristics such as decentralization,heterogeneity,and dynamics,the security guarantee of distributed systems faces severe challenges.Traditional authentication schemes usually have the limitations of high computational cost,complex certificate management,and untimely member dynamic updates,which cannot meet the requirements of large-scale distributed systems.In this paper,aiming at the typical application scenarios where a large number of clients interact with application servers,a hierarchical lightweight authentication scheme based on Merkle tree and hash chain was proposed.In this scheme,there were several neighborhoods in the system,each client belongs to a neighborhood,and an authentication proxy node was set in each neighborhood to manage the clients in the neighborhood and report authentication information to the application server.The scheme adopted both Merkle tree and hash chain to realize identity authentication for the client,one-time pad encryption,and message authentication,and used efficient operations of hash and XOR to achieve lower computational costs.Security analysis and performance analysis show that the scheme has comprehensive security and better performance.