无线传感器网络中抗共谋的自愈组密钥分配方案

Self-Healing Group Key Distribution Scheme with Collusion Attack Resistance Capability for Wireless Sensor Networks

针对现有基于双向Hash链技术的自愈组密钥分配方案不能抵抗撤销节点和新加入节点的共谋攻击问题,并进一步提高现有方案的性能,提出了一种适用于无线传感器网络的有效的抗共谋攻击的自愈组密钥分配方案。方案对传统的双向Hash链进行了结构性改造,在有撤销节点的会话中,用随机值替换前向密钥,使得已被撤销节点无法和新加入节点共谋获取它们未被授权的会话密钥,消除了共谋攻击对网络构成的安全威胁,更适用于俘获节点攻击高发的网络环境。方案还考虑了在实际网络环境中,并不是在每一个会话都有节点被撤销这一个实际情况,减少了通信开销和能量消耗。安全性和性能分析与仿真结果表明,方案在保证更好安全性的同时,降低了通信开销。

To resolve the collusion resistance problem in the dual directional Hash chain（DDHC）-based self-healing group key distribution （SGKD）schemes and improve the performance of previous SGKD schemes, an efficient collusion attack resistant SGKD scheme for wireless sensor networks is proposed. In the proposed scheme, the structure of traditional DDHC is improved by replacing the forward key with a random value in sessions with revoked users, which makes that revoked sensor nodes cannot collude with new joined sensor nodes to recover unauthorized session keys, eliminates the threat of the collusion attack on the network and is more suitable for the network environment with high node capture attack. Moreover, the fact that sensor nodes are revoked from the group not in all sessions in a real-world network is taken into consideration, which contributes to reducing the communication overhead and energy consumption. Security analysis and simulation results show that our proposed scheme not only provides a stronger security, but also reduces the communication overhead.