无线传感器网络轻量级数据加密机制设计

A light-weight data encryption mechanism in wireless sensor networks

针对无线传感器网络处理能力、存储空间、能量等有限的特点,设计了轻量级数据加密机制。该机制对RC6算法进行了改进,添加了"对称层"运算,使改进后的RC6算法在运算工作量变化不大的情况下,硬件实现更加容易,硬件资源消耗更小。为进一步提高密文的安全性与数据加密强度,使用双密钥对明文进行两级加密,并引入了随机密钥管理机制,使网络节点每次加密时都能使用不同的密钥,提高了密钥的安全性。数据加密机制还使用了节点ID认证、带有身份标识的密钥池认证等多种安全认证机制来阻止非法节点的接入。实验基于低功耗Cortex-M3内核的控制芯片搭建无线传感器网络节点硬件平台,设计了通信协议,并在硬件平台上移植与实现了该机制。实验结果表明,该加密机制能够很好地在低功耗平台上运行。

Aiming at the limited processing power, storage space, and energy of wireless sensor networks, we a design lightweight data encryption mechanism which improves the RC6 algorithm and adds in “symmetric layer” operation. The improved RC6 algorithm is easier to implement and the hardware resource consumption is smaller when the computational workload is not changed. In order to further increase the security of cipher texts and the intensity of data encryption, dual keys are applied to reencrypt the texts. In addition, a random key management mechanism is introduced, which makes the network nodes use different keys for each encryption. Thus, the security of the key is improved. Meanwhile the data encryption mechanism also adopts ID authentication and various kinds of security authentication mechanisms such as key pools with identity authentication to prevent access to illegal nodes. Based on the low power consumption CortexM3 core control chip, we design a wireless sensor network node hardware platform and a communication protocol, and the mechanism is transplanted and implemented on the hardware platform. Experimental results reveal that the encryption mechanism can run well on the lowpower platform.