Home automation Internet of Things (IoT) systems have recently become a target for several types of attacks. In this paper, we present an authentication and key agreement protocol for a home automation network based on the ZigBee standard, which connects together a central controller and several end devices. Our scheme performs mutual authentication between end devices and the controller, which is followed by device-to-device communication. The scheme achieves confidentiality, message integrity, anonymity, unlinkability, forward and backward secrecy, and availability. Our scheme uses only simple hash and XOR computations and symmetric key encryption, and hence is resource-efficient. We show using a detailed security analysis and numerical results that our proposed scheme provides better security and anonymity, and is more efficient in terms of computation time, communication cost, and storage cost than schemes proposed in prior works.

翻译：在本文件中,我们提出了一个基于Zigbee标准的家用自动化网络的认证和关键协议协议协议协议协议,该协议协议协议将中央控制器和几个终端装置连接在一起。我们的计划在终端装置和控制器之间进行相互认证,随后是设备对设备通信。该计划实现了保密性、信息完整性、匿名性、不可连接性、前向和后向保密性以及可用性。我们的计划只使用简单的散列和XOR计算和对称关键加密,因此是资源效率高的。我们用详细的安全分析和数字结果显示,我们提议的计划提供了更好的安全和匿名性,在计算时间、通信成本和存储成本方面比先前工程中提议的计划效率更高。