WSN中基于全同态加密的对偶密钥建立方案

Pair-wise key establishment for wireless sensor networks based on fully homomorphic encryption

针对Guo等人基于排列的多对称多项式方案提出一种攻击方法,证明其方案未能突破容忍门限,并不能抵御大规模节点俘获攻击。通过引入全同态加密提出一种对偶密钥建立方案,使共享密钥计算过程在加密状态下完成,.阻止了敌手获得与多项式有关的信息,成功应对了大规模节点俘获攻击。提出一种全同态加密体制的间接实现方法,降低了方案的存储及计算复杂度。分析及实验表明本方案的存储、计算和通信开销完全满足无线传感器网络的要求。

An attack on the permutation-based multi-polynomial scheme exposed in the paper of Guo was proposed.The scheme couldn＇t frustrate the large-scale node capture attack was proved. A pair-wise key establishment scheme was pro- posed by introducing homomorphic encryption thought, which was used to protect polynomials and made all keys be estab- lished in encrypted state. Therefore, the large-scale node capture attack was thwarted because adversaries couldn＇t get any information about polynomials from the encrypted data used to establish keys. A method was presented to achieve fully homomorphic encryption indirectly, which used much less storage and computation resource than existing fully homomor- phic encryption. The analysis and experiment show our pair-wise key establishment scheme has very good performance in terms of storage, computation as well as communication and is suitable to wireless sensor networks with limited capability.