一种新的多级μTESLA广播认证协议

A New Multilevel μTESLA Broadcast Authentication Protocol

广播认证是无线传感器网络中的一项重要安全服务,它能够使众多传感器节点对消息发送者的身份进行验证.本文针对多级μTESLA无线传感器广播认证协议易受拒绝服务(DOS)攻击及错误恢复时延长的缺点,提出一种新的多级μTESLA协议.协议通过使用底层密钥链认证参数包,减轻DOS攻击问题;通过使用高层密钥产生同一时间段的底层密钥链,缩短了错误恢复时延,并采用动态增加参数包缓存的方式,提高了错误恢复成功率.仿真结果表明在相同拒绝服务攻击条件下,本协议的参数包/数据包认证成功率、通信开销及错误恢复时延性能优于多级μTESLA协议及Tree-based协议,且不易受信道丢包率的影响.

Broadcast authentication is a critical security service in wireless sensor network.It allows multiple sensor nodes to authenticate the identity of the sender.The existing sensor broadcast authentication protocol-Multilevel μTESLA suffers from denial-of-service(DOS) attack and long failure recovery delay.A new multilevel μTESLA protocol is present.The parameter distribution messages are authenticated by the low-level key chain,which can mitigate the DOS attack.The low-level key chain is produced by the up-level key in the same upper interval,which shorten the failure recovery delay.The probability of recovery delay is improved by dynamically increasing the parameter distribution messages buffer.The analysis and experiment show that the performance of authentication rate of parameter/date packets,communication overhead and the failure recovery delay are better than the Multilevel μTESLA and Tree-based μTESLA in the same DOS attack situation.Moreover,It is not affected by the channel loss rate.