Numerous resource-limited smart objects (SOs) such as sensors and actuators have been widely deployed in smart environments, opening new attack surfaces to intruders. The severe security flaw discourages the adoption of the Internet of things in smart living. In this paper, we leverage fog computing and microservice to push certificate authority (CA) functions to the proximity of data sources. Through which, we can minimize attack surfaces and authentication latency, and result in a fast and scalable scheme in authenticating a large volume of resource-limited devices. Then, we design lightweight protocols to implement the scheme, where both a high level of security and low computation workloads on SO (no bilinear pairing requirement on the client-side) is accomplished. Evaluations demonstrate the efficiency and effectiveness of our scheme in handling authentication and registration for a large number of nodes, meanwhile protecting them against various threats to smart living. Finally, we showcase the success of computing intelligence movement towards data sources in handling complicated services.

传感器和执行器等众多资源受限的智能对象（SO）已广泛部署在智能环境中，从而为入侵者打开了新的攻击面。严重的安全漏洞不鼓励在智能生活中采用物联网。在本文中，我们利用雾计算和微服务将证书颁发机构（CA）功能推向数据源附近。通过这些方法，我们可以最大程度地减少攻击面和身份验证延迟，并在对大量资源受限的设备进行身份验证时提供一种快速且可扩展的方案。然后，我们设计轻量级协议来实现该方案，从而在SO上实现了高级别的安全性和较低的计算工作量（客户端无需双线性配对）。评估证明了我们的方案在处理大量节点的身份验证和注册方面的效率和有效性，同时可以保护它们免受对智能生活的各种威胁。最后，我们展示了在处理复杂服务方面计算智能向数据源转移的成功。