一种基于可信计算平台的无线传感器网络标识密钥更新方法

A WSN identity-based keys updating method based on trusted computing platform

针对无线传感器网络使用标识密码的密钥更新问题,设计了一种以可信计算平台为密钥生成中心,利用单向函数构造随机数池的高效密钥更新方案,使得传感器节点既能对密钥更新消息进行验证,又不至于引起过多的网络通信。为保证通信密钥的安全性,使用可信计算平台作为密钥生成中心,保证了密钥源头的安全。密钥更新时,利用可信计算平台的特性对其平台配置情况进行验证,来判断其所发出的消息和密钥的真实性与完整性。利用单向函数产生随机数池,一方面使得传感器节点可以验证消息的真实性,另一方面可以抵抗重放攻击。

We proposed an efficient identity-based keys updating scheme in wireless sensor networks （WSN）, in which the trusted computing platform serves as the key generation center, and the one-way function is used to construct a random pool. The scheme enables sensor nodes to verify key updating messages without causing excessive network traffic. To ensure the security of the keys, the scheme uses the trusted computing platform as the key generation center to ensure the security of the key source. When keys are updated, the features of the trusted computing platform can be used to validate the platform configurations and determine the authenticity and integrity of the messages and the keys in question. One-way function is used for generating a random pool, so that sensor nodes can verify the authen- ticity of the messages and resist replay attacks.