基于零知识证明的安全认证方案

Security Authentication Scheme Based on Zero Knowledge Proof

为满足无线传感器网络的安全认证需求,针对传统认证方案中可能遭受的重放、中间人攻击的问题,提出了一种基于零知识证明的安全认证方案。网络中的合法节点与请求认证的节点间运行零知识证明协议,根据请求者的回答来验证请求节点的身份。分析表明,敌手无法从认证中获取关于秘密的信息,方案可以抵抗重放,中间人和节点间的合谋攻击,在能耗上也较小,适合资源受限的无线传感器网络。

In order to satisfy the safety certification requirements of wireless sensor networks, and solve the replay and man in the middle attack problem in traditional authentication, a security authentication scheme based on zero knowledge proof is proposed. In the scheme, the zero knowledge protocol is launched between the request node and the legal nodes, which can identify the identity of the request node according to the answers. It is analyzed that our scheme can resist replay attacks, man in the middle attack and collusion attack, while the attacker cannot gain any information about the secret. The consumption of the scheme is light, which can apply to the source limited wireless sensor networks.