一种实用的传感器网络广播认证协议

doi:10.3969/j.issn.1001-2400.2010.02.022

J4 ›› 2010, Vol. 37 ›› Issue (2): 305-310+325.doi: 10.3969/j.issn.1001-2400.2010.02.022

一种实用的传感器网络广播认证协议

杜志强¹;沈玉龙²;马建峰¹;周利华¹

(1. 西安电子科技大学计算机学院，陕西西安 710071;
2. 西安电子科技大学计算机网络与信息安全教育部重点实验室，陕西西安 710071)

收稿日期:2008-12-16 出版日期:2010-04-20 发布日期:2010-06-03
通讯作者: 杜志强
作者简介:杜志强(1977-)，男，西安电子科技大学博士研究生，E-mail: zqdu@mti.xidian.edu.cn．
基金资助:
国家自然科学基金资助项目(60633020,60573036);陕西省自然科学基金资助项目(2007F37);航空科学基金资助项目(2007ZD31003)

Practical broadcast authentication protocol for sensor networks

DU Zhi-qiang¹;SHEN Yu-long²;MA Jian-feng¹;ZHOU Li-hua¹

(1. School of Computer Science and Technology, Xidian Univ., Xi'an 710071， China;
2. Ministry of Education Key Lab. of Computer Network and Information Security, Xidian Univ., Xi'an 710071， China)

Received:2008-12-16 Online:2010-04-20 Published:2010-06-03
Contact: DU Zhi-qiang

摘要/Abstract

摘要：

由于Tree-Based μTESLA协议随着网络中广播节点数量的增加产生大量开销，使其适用的网络规模受到限制．通过构造μTESLA参数链(μTESLA Parameters Hash Chain)和μTPC树(μTPC Merkle Hash Tree)，对Tree-Based μTESLA协议进行改进，提出基于μTESLA参数链的传感器网络广播认证协议．分析和验证表明，该协议能够抵抗针对μTESLA参数分发过程的DoS攻击，较Tree-Based μTESLA协议的计算、通信和存储开销小，能够立即撤销被俘节点的认证能力，且适用于大规模多广播节点传感器网络．

关键词: 无线传感器网络, 广播认证, 网络安全, μTESLA

Abstract:

Broadcast authentication is one of the most important security primitive services in Sensor Networks. With more and more senders in a network, costs of Tree-based μTESLA are rising rapidly, which limits strictly the scale of networks employing it. Aiming at eliminating such a limit, this paper presents a μTPCT-based broadcasting authentication protocol which mainly rests on constructions of μTPC(μTESLA Parameters Hash Chain) and μTPCT(μTPC Merkle Hash Tree). Analysis and experiments have shown that our proposed protocol not only possesses both excellent resistance to DoS attacks against the distribution of μTESLA parameters and the ability to revoke authenticating capabilities of compromised nodes instantly, but also greatly outperforms the Tree-based μTESLA by largely reducing the cost of computation, communication, and storage needed, making it more applicable to large-scale sensor networks.

Key words: wireless sensor networks, broadcast authentication, network security, μTESLA

杜志强;沈玉龙;马建峰;周利华. 一种实用的传感器网络广播认证协议[J]. J4, 2010, 37(2): 305-310+325.

DU Zhi-qiang;SHEN Yu-long;MA Jian-feng;ZHOU Li-hua. Practical broadcast authentication protocol for sensor networks[J]. J4, 2010, 37(2): 305-310+325.

参考文献

［1］ Jens-Matthias B, Alban H, Osman U. A Secure and Resilient WSN Roadside Architecture for Intelligent Transport Systems［C］//Proceedings of the First ACM Conference on Wireless Network Security. New York: ACM, 2008: 161-171.
［2］霍宏伟, 张宏科, 张思东. 一种面向铁路轨道监测的无线传感器网络模型研究［J］. 西安电子科技大学学报, 2007, 34(1): 35-38.
Huo Hongwei, Zhang Hongke, Zhang Sidong. Research on a Wireless Sensor Network Used in Railway Track Inspection［J］. Journal of Xidian University, 2007, 34(1): 35-38.
［3］ Zhang Y C, Liu W, Lou W J, et al. Location-based Compromise Tolerant Security Mechanisms in Wireless Sensor Networks［J］. Areas Communication Special Issue Security Wireless Ad Hoc Networks, 2006, 24(2): 247-260.
［4］ Dong Q, Liu D G, Ning P. Pre-authentication Filters: Providing Dos Resistance for Signature-based Broadcast Authentication in Sensor Networks［C］//Proceedings of the First ACM Conference on Wireless Network Security. New York: ACM, 2008: 2-12.
［5］ Ren K, Zeng K, Lou W J, et al. On Broadcast Authentication in Wireless Sensor Networks［J］. IEEE Transactions on Wireless Communications, 2007, 6(11): 4136-4144.
［6］ Ayday E, Delgosha F, Fekri F. Efficient Broadcast Authentication for Wireless Sensor Networks［C］//Networking Technologies for Software Define Radio Networks, 2007 2nd IEEE Workshop. San Diego: IEEE Computer Society, 2007: 61-62.
［7］ Chang S M, Shieh S, Lin W W, et al. An Efficient Broadcast Authentication Scheme in Wireless Sensor Networks［C］//Proceedings of the 2006 ACM Symposium on Information, Computer and Communications Security ASIACCS'06. San Diego: IEEE Computer Society, 2006: 311-320.
［8］ Perrig A, Szewczyk R, Wen V, et al. SPINS: Security Protocols for Sensor Networks［J］. Wireless Networks Journal, 2002, 8(5): 521-534.
［9］ Liu D G, Ning P. Multi-level μTESLA: Broadcast Authentication for Distributed Sensor Networks ［J］. ACM Trans in Embedded Computing Systems (TECS), 2004, 3(4): 800-836.
［10］ Liu D G, Ning P. Efficient Distribution of Key Chain Commitments for Broadcast Authentication in Distributed Sensor Networks［C］//Proceedings of the 10th Annual Network and Distributed System Security Symposium (NDSS'03). New York: ACM, 2003: 263-276.
［11］ Liu D G, Ning P, Zhu S C. Practical Broadcast Authentication in Sensor Networks［C］//Proceedings of The 2nd Annual International Conference on Mobile and Ubiquitous Systems Networking and Services. Piscataway: IEEE, 2005:118-129.
［12］ Drissi J, Gu Q J. Localized Broadcast Authentication in Large Sensor Networks［C］//Proceedings of the International Conference on Networking and Services. Washington: IEEE Computer Society, 2006: 25.
［13］沈玉龙, 裴庆琪, 马剑锋. MMμTESLA:多基站传感器网络广播认证协议［J］. 计算机学报, 2007, 30(4): 539-546.
Shen Yulong, Pei Qingqi, Ma Jianfeng. MMμTESLA: Broadcast Authentication Protocol for Multi-Base-Station Sensor Networks［J］. Chinese Journal of Computers, 2007, 30(4): 539-546.
［14］ Saurabh G, Christina P, Mani B S, et al. Secure Time Synchronization in Sensor Networks［J］. Trans on Information and System Security, 2008, 11(4): 23.
［15］孙纪敏, 沈玉龙, 裴庆琪, 等. 传感器网络异常时间同步数据过滤算法［J］. 西安电子科技大学学报, 2008, 35(5): 910-915.
Sun Jimin, Shen Yulong, Pei Qingqi, et al. Abnormal Time Synchronization Data Filter Algorithm in Sensor Networks［J］. Journal of Xidian University, 2008, 35(5): 910-915.
［16］ Atakli I M, Hu H B, Chen Y, et al. Malicious Node Detection in Wireless Sensor Networks Using Weighted Trust Evaluation［C］//SpringSim'08: Proceedings of the 2008 Spring Simulation Multiconference. San Diego: Society for Computer Simulation International, 2008: 836-843.
［17］ Karlof C, Sastry N, Li Y, et al. Distillation Codes and Applications to Dos Resistant Multicast Authentication［C］//11th Network and Distributed Systems Security Symposium (NDSS). San Diego: IEEE Computer Society, 2004.
［18］ Ning P, Liu A, Du W L. Mitigating DoS Attacks Against Broadcast Authentication in Wireless Sensor Networks［J］. ACM Trans on Sensor Networks, 2008, 4(1): 1-31.

[1]	李明,胡江平,曹晓莉. 异构传感网成本优化的节点部署策略[J]. 西安电子科技大学学报, 2021, 48(4): 11-19.
[2]	刘华渊,苏云飞,李瑞林,唐朝京. 结构状态覆盖导向的灰盒模糊测试技术[J]. 西安电子科技大学学报, 2021, 48(1): 117-123.
[3]	李腾,曹世杰,尹思薇,魏大卫,马鑫迪,马建峰. 应用Q学习决策的最优攻击路径生成方法[J]. 西安电子科技大学学报, 2021, 48(1): 160-167.
[4]	杨宏宇,曾仁韵. 一种深度学习的网络安全态势评估方法[J]. 西安电子科技大学学报, 2021, 48(1): 183-190.
[5]	郑献春,李晖,王瑞,闫皓楠,戴睿,萧明炽. 匿名网络应用及仿真平台研究综述[J]. 西安电子科技大学学报, 2021, 48(1): 22-38.
[6]	杨宏宇,张旭高. 一种网络安全态势自适应预测模型[J]. 西安电子科技大学学报, 2020, 47(3): 14-22.
[7]	黄影,华雨晴. 能量与路径约束的无线传感网络路由优化[J]. 西安电子科技大学学报, 2020, 47(3): 113-120.
[8]	周杰,徐梦颖,王娇娇,卢毅. 认知无线传感器网络频谱分配的一种改进方法[J]. 西安电子科技大学学报, 2020, 47(3): 80-85.
[9]	杨杰,蒋俊正. 利用联合图模型的传感器网络数据修复方法[J]. 西安电子科技大学学报, 2020, 47(1): 44-51.
[10]	田强,冯大政,李进,胡豪爽. 一种利用声音能量的两步SDR定位算法[J]. 西安电子科技大学学报, 2019, 46(4): 16-21.
[11]	甄岩,赵虎. 层次型软件定义无线传感器网络资源调度策略[J]. 西安电子科技大学学报, 2019, 46(4): 87-98.
[12]	卢毅,周杰,万连城. 一种无线传感器网络二维目标覆盖的改进方法[J]. 西安电子科技大学学报, 2019, 46(2): 101-106.
[13]	杨宝旺. 采用符号动力学方法检测低速率拒绝服务攻击[J]. 西安电子科技大学学报, 2018, 45(1): 140-144.
[14]	方德亮;冉晓旻;李鸥. 一种能量有效的分布式传感器管理算法[J]. 西安电子科技大学学报, 2017, 44(2): 171-177.
[15]	乔俊峰;刘三阳;齐小刚. 无线传感器网络中基于鲁棒优化的功率控制[J]. 西安电子科技大学学报, 2016, 43(5): 81-87.

一种实用的传感器网络广播认证协议

Practical broadcast authentication protocol for sensor networks

PDF (PC)

赞

可视化

被引次数

摘要/Abstract

引用本文

使用本文

参考文献

相关文章 15

Metrics

本文评价

推荐阅读 10