Matter Protocol
Matter Protocol 是什么?
Matter ProtocolAn IP-based smart-home interoperability protocol launched by the Connectivity Standards Alliance (Apple, Google, Amazon, Samsung) in 2022, with built-in certificate-based device identity, mandatory encryption, and PAKE-secured commissioning.
Matter is a smart-home interoperability protocol launched by the Connectivity Standards Alliance (formerly Zigbee Alliance) in October 2022 with Apple, Google, Amazon, and Samsung as principal backers. It defines a common IP-based application layer that lets accessories from any vendor work with any compatible ecosystem (HomeKit, Google Home, Alexa, SmartThings). Matter runs over standard IP transports — Wi-Fi and the Thread mesh — with Bluetooth LE used only during commissioning. Security is a central design feature, in contrast to historically weak smart-home protocols: every Matter device has a Device Attestation Certificate signed by its vendor's PAA (Product Attestation Authority) rooted at a Matter CA, every fabric (home network) has its own root and per-device operational certificates, all device-to-device traffic is authenticated and AES-CCM encrypted, and commissioning uses SPAKE2+ with the 11-digit setup code printed on the device's QR sticker to derive a shared secret without the user typing the code into the wrong app. Matter 1.4 (2024) added home routers, energy management, solar/battery, and EV-charging device types. As an OT/IoT category, Matter is widely seen as one of the strongest commodity smart-home stacks from a security perspective.
● 示例
- 01
A new Matter light bulb commissions into a Google Home / HomeKit / SmartThings fabric simultaneously by scanning a single QR code; the SPAKE2+ exchange ensures the commissioning channel is bound to that physical device.
- 02
A smart-home gateway's firmware-update process verifies the new image against the device's Matter DAC chain before applying it.
● 常见问题
Matter Protocol 是什么?
An IP-based smart-home interoperability protocol launched by the Connectivity Standards Alliance (Apple, Google, Amazon, Samsung) in 2022, with built-in certificate-based device identity, mandatory encryption, and PAKE-secured commissioning. 它属于网络安全的 OT / ICS / 物联网 分类。
Matter Protocol 是什么意思?
An IP-based smart-home interoperability protocol launched by the Connectivity Standards Alliance (Apple, Google, Amazon, Samsung) in 2022, with built-in certificate-based device identity, mandatory encryption, and PAKE-secured commissioning.
Matter Protocol 是如何工作的?
Matter is a smart-home interoperability protocol launched by the Connectivity Standards Alliance (formerly Zigbee Alliance) in October 2022 with Apple, Google, Amazon, and Samsung as principal backers. It defines a common IP-based application layer that lets accessories from any vendor work with any compatible ecosystem (HomeKit, Google Home, Alexa, SmartThings). Matter runs over standard IP transports — Wi-Fi and the Thread mesh — with Bluetooth LE used only during commissioning. Security is a central design feature, in contrast to historically weak smart-home protocols: every Matter device has a Device Attestation Certificate signed by its vendor's PAA (Product Attestation Authority) rooted at a Matter CA, every fabric (home network) has its own root and per-device operational certificates, all device-to-device traffic is authenticated and AES-CCM encrypted, and commissioning uses SPAKE2+ with the 11-digit setup code printed on the device's QR sticker to derive a shared secret without the user typing the code into the wrong app. Matter 1.4 (2024) added home routers, energy management, solar/battery, and EV-charging device types. As an OT/IoT category, Matter is widely seen as one of the strongest commodity smart-home stacks from a security perspective.
如何防御 Matter Protocol?
针对 Matter Protocol 的防御通常结合技术控制与运营实践,详见上方完整定义。
Matter Protocol 还有哪些其他名称?
常见的别称包括: Matter, CSA Matter, Project CHIP (legacy)。
● 相关术语
- ot-iot№ 615
物联网安全
针对物联网设备、网关、网络与云服务的安全防护学科。需要应对其规模、资源受限以及长生命周期等挑战。
- ot-iot№ 1402
Zigbee 安全
保护低功耗 IoT 设备 Zigbee 网状网络的加密和网络控制集合,基于 IEEE 802.15.4 与 AES-CCM* 密钥体系。
- ot-iot№ 131
Bluetooth LE 安全
蓝牙核心规范为低功耗蓝牙设备定义的配对、加密与隐私机制。
- network-security№ 1381
WPA3
Wi-Fi Protected Access 的第三代,引入基于 SAE 的身份认证、前向保密以及更强的个人与企业 Wi-Fi 防护。
- cryptography№ 881
PAKE (Password-Authenticated Key Exchange)
A class of cryptographic protocols (SRP, OPAQUE, SPAKE2, CPace) that let two parties derive a strong shared key from a low-entropy password without exposing the password to offline brute-force or to passive eavesdroppers.
- identity-access№ 458
FIDO2
FIDO 联盟推出的开放认证标准,结合 WebAuthn(浏览器 API)和 CTAP(认证器协议),实现抗钓鱼的无密码登录。