基于AKB-OTS的传感器网络广播认证协议

AKB-OTS based broadcast authentication protocol for sensor networks

现有的基于一次性签名的传感器网络广播认证协议因存储开销较大,较难适用于大规模尤其是多广播节点网络。提出基于辅助密钥的一次性签名方案(assistant-key based-onetime signature,AKB-OTS),引入辅助密钥和Merkle树机制对HORS进行改进,降低其公钥和私钥尺寸。提出基于AKB-OTS的多广播节点传感器网络广播认证协议。分析和验证表明,本协议存储、通信和计算开销低,能够抵抗穷举、选择明文、DoS等攻击,适用于大规模多广播节点传感器网络。

The current wireless sensor network （WSN） broadcast authentication protocol based on onetime signature （OTS） can hardly meet the requirement of large scale sensor networks, especially that of multi-sender networks, owing to its high cost of storing and communicating. To reduce the size of private-key and public-key of HORS, a scheme named assistant-key based onetime signature （AKB-OTS） is presented which introduces an assistant-key and Merkle tree mechanism, and a broadcast authentication protocol for multi-sender sensor net-works based on AKB-OTS is also presented. Analyses and experiments show that the proposed protocol is low in overhead consumed by computation, communication and storage, can resist attacks including brute-force, chosen message and DoS, and is more applicable to large scale multi-sender sensor networks.