Numerous resource-limited smart objects (SOs) such as sensors and actuators have been widely deployed in smart environments, opening new attack surfaces to intruders. The severe security flaw discourages the adoption of the Internet of things in smart living. In this paper, we leverage fog computing and microservice to push certificate authority (CA) functions to the proximity of data sources. Through which, we can minimize attack surfaces and authentication latency, and result in a fast and scalable scheme in authenticating a large volume of resource-limited devices. Then, we design lightweight protocols to implement the scheme, where both a high level of security and low computation workloads on SO (no bilinear pairing requirement on the client-side) is accomplished. Evaluations demonstrate the efficiency and effectiveness of our scheme in handling authentication and registration for a large number of nodes, meanwhile protecting them against various threats to smart living. Finally, we showcase the success of computing intelligence movement towards data sources in handling complicated services.

中文翻译：

---

物联网中用于智能生活的快速且可扩展的身份验证方案

许多资源受限的智能对象 (SO)，例如传感器和执行器，已广泛部署在智能环境中，为入侵者打开了新的攻击面。严重的安全漏洞阻碍了物联网在智能生活中的应用。在本文中，我们利用雾计算和微服务将证书颁发机构 (CA) 功能推送到数据源附近。通过它，我们可以最大限度地减少攻击面和身份验证延迟，并在对大量资源有限的设备进行身份验证时产生快速且可扩展的方案。然后，我们设计轻量级协议来实现该方案，其中在 SO（客户端没有双线性对要求）上实现了高级别安全性和低计算工作量。评估证明了我们的方案在处理大量节点的身份验证和注册方面的效率和有效性，同时保护它们免受智能生活的各种威胁。最后，我们展示了计算智能在处理复杂服务方面向数据源移动的成功。