传感器网络安全协议的分析和改进

Analysis and improvement of sensor networks security protocol

分析A.Perrig提出的传感器网络安全协议套件的安全性,发现其中的节点密钥协商协议存在攻击,即攻击者可以冒充合法节点发送密钥协商请求。针对以上攻击,给出了一个改进协议。为了分析改进协议的安全性,对原始串空间理论进行了扩展,并使用扩展后的理论从保密性和认证性两个方面分析了改进协议的安全性。分析结果显示,改进后的协议是安全的。同时,对串空间理论的扩展,为其能够分析较复杂的安全协议打下了基础。

A suit of security protocols for sensor networks was presented by A. Perrig. The security of the protocols was analyzed, and then one attack had been found in the two-party key agreement protocol that a false request message from an intruder. In that case, the intruder impersonates the node and creates false requests. An improved protocol to this attack was proposed. The security of improved protocol was analyzed by the extended strand spaces, where two main security properties, authenticity and confidentiality, were checked. And the analysis proves the correctness of the protocol. The extended strand spaces also gives a practical base for further application of strand spaces in analyzing complicated protocols.