【作者】 冯健；

【导师】 汪洋；

【作者基本信息】 哈尔滨工业大学 ， 信息与通信工程， 2015， 硕士

【摘要】 随着物联网和移动互联网技术的兴起,各种融合了这两种技术的产品不断涌现,在家居智能化方面,对智能家居系统的研究是近年来的一个研究热点。目前绝大部分针对智能家居系统的研究都是基于ZigBee网络,研究重点都放在如何丰富智能家居系统的控制功能上,对智能家居网络通信安全方面的研究很少。现阶段各种网络安全事件时有发生,对个人的隐私和财产安全都造成了较大威胁。网络安全已经成为移动互联网时代所必须面对的问题,在一个国家的安全体系中其具有和军事安全同等的地位。隐私是家庭环境特有的属性,考虑智能家居系统的安全通信问题有着非常现实的意义。本文重点研究安全通信技术在智能家居系统中的应用,在选定具体安全通信方案前,设计了一种以433 MHz作为家庭内部无线网络通信频率的新的智能家居系统硬件平台。该硬件平台是为了解决现阶段智能家居系统设备控制模块价格过高,通信协议过于复杂,缺少安全保护策略这三种可能影响其市场化的问题。完成了硬件平台各子功能模块设计后,本文对硬件平台进行了联合测试,测试结果显示：系统实现了预设的各种功能,达到了设计要求。针对智能家居系统的安全通信问题,本文在分析了智能家居系统网络组成结构后,找到了其中可能存在安全通信隐患的环节,并设计了一种智能家居系统安全通信解决方案。该方案由身份认证系统和数据加密系统组成,在对各模块算法进行研究后,本文将身份认证系统和数据加密系统进行了融合。身份认证系统能够完成登录用户身份的合法性检验工作,相对于传统静态口令身份认证系统而言,本文所设计的基于哈希函数消息认证算法的一次口令身份认证系统能够抵抗静态口令丢失攻击、伪造服务器攻击、重播攻击、窃听鉴权攻击四种常见的网络攻击手段。为解决控制指令在家庭内部无线网络中传输可能存在的被窃听、篡改等问题,本文设计了基于AES-128加密算法的数据加密系统。为弥补AES-128算法使用单一密钥而给整个系统通信安全所带来的影响,本文将身份认证系统产生的128位动态密钥输入数据加密系统,大大提高了系统的安全性。本文完成了系统硬件平台的搭建,并在该平台上实现了本文设计的安全通信解决方案,测试结果显示：论文完成了预定的课题目标。更多还原

【Abstract】 With the fast development of the Internet of things and the Mobile Internet, more and more products which combine the two techniques come to our life. Research on the Smart Home system is a hot topic in recent years. Most of the researches are based on systems using Zig Bee network, they focus on enriching the control function of the Smart Home system. While research on the security of smart home is very few. Nowdays cyber security incidents happen all the time which pose a serious threat on personal privacy as well as personal property. Cyber security has become the problem which the Mobile Internet era must face with. The government has even evaluated the cyber security to the level of national security. As privacy is a unique attribute of family life, research on the secure communication of smart home system is of very positive and practical significance.This thesis foucus on applying some secure communication techniques on the Smart Home system. Before comming up with a solution to the secure communication of smart home system, a new hardware platform which use 433 Megahertz as the communication frequency of the wireless home network is built. The platform is designed to solve some problems that the current smart home systems are facing with, such as the hight cost, the complicated protocol as well as lacking security policies. After finished designing all the sub-function modules, this thesis takes a joint test on this platform. The test results show that the system meet all the preset function requirements. When dealing with the secure communication problems of smart home system, this thesis come up with a solution after finding out the security risks of the smart home network. The solution contains two sub-systems, the one time password(OTP) authentication system and the data encryption system. After analyzing the algorithms of the two sub-system, this thesis fuses the two algorithms of the two sub-systems to get a highter level security. The authentication system can verify the legality of the user who want to login the system. Comparing with traditional authentication system, the OTP authentication system can resist four different kinds of cyber attacks, such as the Forgery Server Attack, the Replay Attack, the Password Guessing Attack, the Password Loss Attack. In order to prevent the control command from being eavesdropping and tampering, this thesis designs an encryption system based on AES-128 data encryption algorithm. In order to make up for the deficiencies that the AES-128 algorithm used a static key as the seed key for the data encryption system, this thesis import the 128 bits dynamic key that the OTP authentication system produces into the data encryption system, This can greatly enhance the security of the system.This thesis built a new smart home hardware platform. At the same time, a secure communication solution of smart home is implemented on the platform. The test results show that the thesis has completed the tasks that the research set.更多还原