无线传感器网络的轻量级安全体系研究

Lightweight security architecture design for wireless sensor network

结合无线传感器网络现有的安全方案存在密钥管理和安全认证效率低等问题的特点,提出了无线传感器网络的轻量级安全体系和安全算法。采用门限秘密共享机制的思想解决了无线传感器网络组网中遭遇恶意节点的问题;采用轻量化ECC算法改造传统ECC算法,优化基于ECC的CPK体制的思想,在无需第三方认证中心CA的参与下,可减少认证过程中的计算开销和通信开销,密钥管理适应无线传感器网络的资源受限和传输能耗相当于计算能耗千倍等特点,安全性依赖于椭圆离散对数的指数级分解计算复杂度;并采用双向认证的方式改造,保证普通节点与簇头节点间的通信安全,抵御中间人攻击。

Most previous security proposal did not consider key management or their authentication efficiency was very low. Lightweight security architecture and lightweight security algorithm were proposed for wireless sensor network, The problem of network encounters malicious nodes maybe occur in the procedure of backbone networks networking could be solved by threshold secret sharing mechanism. The lightweight ECC was proposed to optimize the CPK architecture based on normal ECC, authentication was efficient without the third-party CA, and could reduce the computational com- plexity, the key management could meet the resource limit in wireless sensor network, and the key security depended on the exponential computation complexity of the elliptic discrete logarithm decomposition. The scheme used the improved two-way authentication to ensure the communication security between common node and sink node, which could prevent man-in-the-middle attack.