广西师范大学学报（自然科学版） ›› 2026, Vol. 44 ›› Issue (6): 87-99.doi: 10.16088/j.issn.1001-6600.2026011503

• 智能信息处理 • 上一篇    下一篇

国密算法在MQTT地震数据安全传输中的应用研究

吴凌杰1, 罗玉玲2, 欧阳雪2*, 李阳1, 严俊峰1   

  1. 1.浙江省地震局, 浙江 杭州 310013;
    2.广西师范大学 电子与信息工程学院/集成电路学院, 广西 桂林 541004
  • 收稿日期:2026-01-15 修回日期:2026-04-10 出版日期:2026-11-05 发布日期:2026-11-10
  • 通讯作者: 欧阳雪(1995—), 女, 广东汕尾人, 广西师范大学讲师, 博士。E-mail: ouyangxue@gxnu.edu.cn
  • 基金资助:
    国家自然科学基金(62462009, 42501519);中国地震局地震信息青年重点任务(CEAITNS202507, CEAITNS202619);浙江省地震局课题(2025ZJJ09)

Application of Chinese commercial cryptographic algorithms in secure MQTT seismic data transmission

Wu Lingjie1, Luo Yuling2, Ouyang Xue2*, Li Yang1, Yan Junfeng1   

  1. 1. Zhejiang Earthquake Agency, Hangzhou Zhejiang 310013, China;
    2. School of Electronic and Information Engineering/College of Integrated Circuits, Guangxi Normal University, Guilin Guangxi 541004, China
  • Received:2026-01-15 Revised:2026-04-10 Online:2026-11-05 Published:2026-11-10

摘要： 消息队列遥测传输协议(MQTT)因高并发、低延时特性被广泛应用于地震预警、速报及灾害评估等业务的数据传输,但该协议存在身份认证简单、明文传输、消息易篡改等安全隐患,且现有安全方案难以同时兼顾轻量化、信创适配与多终端安全防护需求,制约了其在高安全需求地震业务中的应用。为此,本文提出一种信创适配的国密增强型MQTT安全传输方案。该方案基于MQTT5.0增强认证机制设计国密增强认证算法,通过SM2加密与数字签名技术,仅需4轮交互即可完成客户端与MQTT Broker的双向可信认证,实现安全性与轻量性的平衡;引入密钥重加密机制,构建“一订阅端一密钥”的防护模式,有效解决多订阅端场景下“单主题-单密钥”导致的密钥泄露风险。经安全性分析验证,该方案可抵御身份伪造、中间人截获与篡改等典型攻击。仿真实验结果显示,在25组重复测试中,身份认证平均耗时13.36 ms,主题密钥获取平均耗时0.977 ms,300个订阅端场景下数据传输平均耗时551.78 ms。本文方案采用国密算法构建,适配信创环境及地震预警终端等低算力设备,可充分满足地震业务数据传输高安全、低时延的核心需求。

关键词: MQTT, 国密算法, 信息安全, 信创环境

Abstract: The message queuing telemetry transport (MQTT) protocol is widely used for data transmission in earthquake early warning, rapid reporting, and disaster assessment due to its high concurrency and low latency. However, the protocol suffers from security vulnerabilities such as simplistic authentication, plaintext transmission, and susceptibility to message tampering. Moreover, existing security solutions struggle to simultaneously meet the requirements of lightweight design, compatibility with domestic innovation ecosystems, and multi-terminal security protection, which restricts its application in high-security earthquake-related operations. To address these issues, this study proposes a domestic cryptographic-enhanced MQTT secure transmission scheme tailored for domestic innovation ecosystems. Based on the enhanced authentication mechanism of MQTT 5.0, the scheme designs a domestic cryptographic-enhanced authentication algorithm. Utilizing SM2 encryption and digital signature technology, it enables bidirectional trusted authentication between the client and the broker in just four rounds of interaction, achieving a balance between security and lightweight performance. Additionally, a key re-encryption mechanism is introduced to establish a "one-key-per-subscriber" protection model, effectively mitigating the risk of key leakage in multi-subscriber scenarios caused by the "single-topic-single-key" approach. Security analysis confirms that the scheme can resist typical attacks such as identity forgery, man-in-the-middle interception, and tampering. Simulation results show that in 25 repeated tests, the average time for identity authentication is 13.36 ms, the average time for topic key acquisitionis 0.977 ms, and the average data transmission time in scenarios with 300 subscribers is 551.78 ms. Constructed with domestic cryptographic algorithms, this scheme is compatible with domestic innovation ecosystems and low-computing-power devices such as earthquake early warning terminals, fully meeting the core requirements of high security and low latency for earthquake-related data transmission.

Key words: message queuing telemetry transport (MQTT), Chinese commercial cryptographic algorithm, information security, information innovation environment

中图分类号:  TN918

[1] 陈旭清, 张烁, 郭旭敏, 等. 基于信创平台应用能力评价系统软件设计与实现[J]. 计算机应用与软件, 2024, 41(11): 60-65,130. DOI: 10.3969/j.issn.1000-386x.2024.11.008.
[2] 安立强, 张景发, Monteiro R, 等. 地震灾害损失评估与遥感技术现状和展望[J]. 遥感学报, 2024, 28(4): 860-884. DOI: 10.11834/jrs.20232093.
[3] Cauzzi C, Behr Y, Clinton J, et al. An open-source earthquake early warning display[J]. Seismological Research Letters, 2016, 87(3): 737-742. DOI: 10.1785/0220150284.
[4] 蔡寅, 张明, 赵瑞, 等. 地震预警信息快速发布系统研究[J]. 震灾防御技术, 2019, 14(1):247-258. DOI: 10.11899/zzfy20190124.
[5] Zou Y L, Zhu J, Wang X B, et al. A survey on wireless security: technical challenges, recent advances, and future trends[J]. Proceedings of the IEEE, 2016, 104(9): 1727-1765. DOI: 10.1109/JPROC.2016.2558521.
[6] 沈小渝, 李红映. 基于联合估计的无线通信网络干扰抑制算法[J].计算机仿真, 2023, 40(12): 283-287. DOI: 10.3969/j.issn.1006-9348.2023.12.050.
[7] 李菁菁. 政府数据开放中个人信息保护效果的量化评估[J]. 科技管理研究, 2024, 44(20): 19-27. DOI: 10.3969/j.issn.1000-7695.2024.20.003.
[8] 吴凌杰, 孟真, 严俊峰. 基于混合加密API算法对地震数据安全传输的研究[J]. 华南地震, 2022, 42(2): 46-52.DOI:10.13512/j.hndz.2022.02.07.
[9] Liu Z C, Liang T, Lyu J Z, et al. A security-enhanced scheme for MQTT protocol based on domestic cryptographic algorithm[J]. Computer Communications, 2024, 221: 1-9. DOI:10.1016/j.comcom.2024.04.013.
[10]Innamorati C, Boiano A, Redondi A E C, et al. The pulse of MQTT in the wild: a large-scale traffic analysis[J]. Computer Networks, 2026, 274: 111845. DOI: 10.1016/j.comnet.2026.111845.
[11]欧阳龙斌, 苏柱金, 刘军, 等. 国家地震烈度速报与预警工程融合决策平台建设[J]. 中国地震, 2024, 40(1): 24-39. DOI: 10.3969/j.issn.1001-4683.2024.01.003.
[12]申源, 郭凯, 梁厚朗, 等. 国家紧急地震信息服务系统的设计、开发及实践[J]. 中国地震, 2024, 40(1): 1-23. DOI: 10.3969/j.issn.1001-4683.2024.01.002.
[13]郑韵, 杨天青, 王青平, 等. 基于MQTT协议的地震专题图自动生成和推送系统的设计与实现[J]. 中国地震, 2021, 37(4): 837-842. DOI: 10.3969/j.issn.1001-4683.2021.04.009.
[14]Swain M, Tripathi N, Sethi K. Identifying communication sequence anomalies to detect DoS attacks against MQTT[J]. Computers & Security, 2025, 157: 104526. DOI: 10.1016/j.cose.2025.104526.
[15]赵国峰, 李卫东, 李丽, 等. 基于国产密码的地震预警服务系统防篡改框架设计与应用[J]. 地震工程学报, 2023, 45(1): 145-152. DOI: 10.20000/j.1000-0844.20220812001.
[16]蒋宏毅, 李小军, 李丽. 基于MQTT协议的紧急地震信息发布系统应用研究[J]. 地震研究, 2025, 48(3): 440-449. DOI: 10.20015/j.cnki.ISSN1000-0666.2025.0046.
[17]Chien H Y, Chen Y J, Qiu G H, et al. A MQTT-API-compatible IoT security-enhanced platform[J]. International Journal of Sensor Networks, 2020, 32(1): 54-68. DOI: 10.1504/IJSNET.2020.104463.
[18]Calabretta M, Pecori R, Veltri L. A token-based protocol for securing MQTT communications[C]//2018 26th International Conference on Software, Telecommunications and Computer Networks (SoftCOM). Split, Croatia: University of Split, 2018: 1-6. DOI: 10.23919/SOFTCOM.2018.8555834.
[19]谷正川, 郭渊博, 方晨. 基于代理重加密的消息队列遥测传输协议端到端安全解决方案[J]. 计算机应用, 2021, 41(5): 1378-1385. DOI: 10.11772/j.issn.1001-9081.2020060985.
[20]Singh M, Rajan M A, Shivraj V L, et al. Secure MQTT for internet of things (IoT)[C]//2015 Fifth International Conference on Communication Systems and NetworkTechnologies. Los Alamitos, CA; IEEE Computer Society, 2015: 746-751. DOI: 10.1109/CSNT.2015.16.
[21]Mathur A, Newe T, Elgenaidi W, et al. A secure end-to-end IoT solution[J]. Sensors and Actuators A: Physical, 2017, 263: 291-299. DOI: 10.1016/j.sna.2017.06.019.
[22]刘泽超, 梁涛, 孙若尘, 等. 基于国密算法的MQTT安全机制研究与实现[J]. 计算机科学, 2024, 51(2): 333-342. DOI: 10.11896/jsjkx.221100157.
[23]Zhang Y D, He D B, Zhang M W, et al. A provable-secure and practical two-party distributed signing protocol for SM2 signature algorithm[J]. Frontiers of Computer Science,2019, 14(3): 143803. DOI: 10.1007/s11704-018-8106-9.
[24]Abed S, Jaffal R, Mohd B J, et al. Performance evaluation of the SM4 cipher based on field-programmable gate array implementation[J]. IET Circuits, Devices & Systems, 2021, 15(2): 121-135. DOI: 10.1049/cds2.12011.
[25]Mileva A, Velinov A, Hartmann L, et al. Comprehensive analysis of MQTT 5.0 susceptibility to network covert channels[J]. Computers & Security, 2021, 104: 102207. DOI: 10.1016/j.cose.2021.102207.
[26]OASIS. MQTT Version 5.0 OASIS Standard[S/OL]. (2019-03-07)[2026-06-04]. https://docs.oasis-open.org/mqtt/mqtt/v5.0/os/mqtt-v5.0-os.html.
[27]Sanjuan E B, Abad Cardiel I, Cerrada J A, et al. Message queuing telemetry transport (MQTT) security: a cryptographic smart card approach[J]. IEEE Access, 2020, 8: 115051-115062. DOI: 10.1109/ACCESS.2020.3003998.
[1] 涂广升, 孔咏骏, 宋哲超, 叶康. 密文域可逆信息隐藏研究进展及技术难点分析[J]. 广西师范大学学报（自然科学版）, 2024, 42(2): 1-15.
[2] 梁钰婷, 罗玉玲, 张顺生. 基于压缩感知的混沌图像加密研究综述[J]. 广西师范大学学报（自然科学版）, 2022, 40(5): 49-58.
[3] 周戎龙,罗玉玲,闭金杰,岑明灿,丘森辉,廖志贤. 图像并行加密算法在手持设备上的应用研究[J]. 广西师范大学学报（自然科学版）, 2019, 37(3): 60-70.
[4] 俞春强, 付睿, 陈艳, 雷芸, 张显全, 王晓云. 基于信息隐藏的图像感兴趣区域保护算法[J]. 广西师范大学学报（自然科学版）, 2016, 34(2): 67-73.
Viewed
Full text


Abstract

Cited
  Shared   
  Discussed   
No Suggested Reading articles found!
版权所有 © 广西师范大学学报（自然科学版）编辑部
地址：广西桂林市三里店育才路15号　邮编：541004
电话：0773-5857325　E-mail: gxsdzkb@mailbox.gxnu.edu.cn
本系统由北京玛格泰克科技发展有限公司设计开发