With the development of the globalization economic integration in Internet of Things (IoT), it is very crucial to protect the wireless two-way authentication between users’ intelligent terminals and servers in the product authorization chain. In order to ensure that legitimate users connect to the wireless network correctly, a lightweight wireless mutual authentication scheme for the product authorization chain was proposed contrapose to the security defect of Kaul and Awasthi’s scheme, which easily suffered from offline password guessing attack. The improved scheme uses lightweight hash function and verifies the freshness of messages by using the send packet sequence number instead of timestamp, which can avoid strict clock synchronization between devices, and user passwords can be updated by themselves. Security analysis and cost and efficiency analysis show that the scheme presented in this paper has higher security, lower storage and communication costs, and lower computational complexity.

中文翻译：

---

产品授权链轻量级互鉴研究

随着物联网（IoT）全球化经济一体化的发展，保护产品授权链中用户智能终端与服务器之间的无线双向认证至关重要。为了保证合法用户正确接入无线网络，针对Kaul和Awasthi方案容易遭受离线密码猜测攻击的安全缺陷，提出了一种轻量级的产品授权链无线相互认证方案。改进方案使用轻量级哈希函数，通过发送包序列号代替时间戳来验证消息的新鲜度，可以避免设备之间严格的时钟同步，并且用户密码可以自行更新。