摘要
无线传感器网络(WSN,wireless sensor network)用户认证技术是传感器网络验证用户的合法性以避免网络数据信息泄露的有效手段之一,同时,用户也需验证传感器网络的合法性,避免获得错误或虚假数据信息。由于WSN节点能量、通信和计算能力等资源受限,且通常部署在敌对或无人值守的区域,因此传统用户认证协议并不完全适用于WSN。从WSN认证协议的安全攻击入手,给出其安全需求及理论基础,归纳总结了设计流程,针对其安全性分析,描述了安全攻击模型,并综述了形式化分析验证工具AVISPA体系结构和HLPSL语言构成。评述了当前的各种WSN用户认证协议,建议了未来研究方向,这些研究工作将有助于WSN用户认证协议的设计、分析与优化。
In wireless sensor network (WSN), the user authentication technology is an effective approach, which can guarantee the user's validity, avoid WSN's information disclosure. Meanwhile, the users also need to verify the WSN's validity, avoid obtaining incorrect or false information. However, since the sensor nodes have limited energy, communications and computing capacity, and they are usually deployed in hostile or unattended environment, the traditional user authentication protocol (UAP) is not entirely suitable for WSN. The security attacks were introduced for the UAP in WSN, its secure requirements and the theoretical foundation were given, and then the UAP's design processes were summarized. For the analysis of its security, the attack model was described, and the automated validation of intemet Security protocols and applications (AVISPA) and the high level protocols specification language (HLPSL) were overviewed in detail. Then, the current UAPs were reviewed in WSN, the future research directions were proposed. These researches will contribute to the design, analysis and optimization for the UAP in WSN.
作者
房卫东
张武雄
单联海
何为
陈伟
FANG Wei-dong ZHANG Wu-xiong SHAN Lian-hai HE Wei CHEN Wei(Key Laboratory of Wireless Sensor Network & Communication, Shanghai Institute of Mierosystem and Information Technology, Chinese Academy of Sciences, Shanghai 200051, China Shanghai Research Center for Wireless Communication, Shanghai 201210, China Shanghai Internet of Things Co., Ltd, Shanghai 201899, China School of Computer Science and Technology, China University of Mining and Technology, Xuzhou 221116, China)
出处
《网络与信息安全学报》
2017年第1期1-12,共12页
Chinese Journal of Network and Information Security
基金
国家自然科学基金资助项目(No.61471346)
上海市自然科学基金资助项目(No.14ZR1439700)
国家科技重大专项基金资助项目(No.2014ZX03005001)
上海市科技重大基金资助项目(No.15DZ1100400)
中国科学院科技服务网络计划基金资助项目(No.kfj-sw-sts-155)
国家自然科学基金委员会-山西省人民政府煤基低碳联合基金资助项目(No.U1510115)~~