| 摘要: |
| 把集合论思想引入异构传感网认证密钥方案设计中,提出一种基于双线性对动态累加器的异构传感网认证密钥协商方案.已往基于经典随机图等理论的安全方案主要实现了节点间密钥协商,使身份认证和密钥协商割裂开来;新方案则从集合论的角度把异构传感网认证密钥协商转化为集合元素关系认证,实现了身份认证和密钥协商的有效融合.方案包括异构传感网身份认证、密钥协商和广播认证这3 部分.节点通过交换 ID 与证人信息相互验证身份合法性;合法节点协商生成共享密钥;利用广播消息动态增加/删除节点,更新节点证人信息.实验分析表明,该方案不但实现了身份认证、密钥协商和广播认证的有效融合,而且具有良好的安全性、扩展性和网络结构变化的自适应性,适用于节点性能和安全性需求较高的场景中. |
| 关键词: 认证密钥协商 动态累加器 双线性对 异构传感网 |
| DOI: |
| 分类号: |
| 基金项目:国家自然科学基金(61170241);山东省自然科学基金(ZR2014FL012);山东省自主创新及成果转化重大专项(2014ZZCX02702);山东省科技发展计划(2013GGB01332);山东省网络环境智能计算技术重点实验室开放基金;临沂大学2014年博士科研启动基金(LYDX2014BS006) |
|
| Authenticated Key Agreement Scheme for Heterogeneous Sensor Networks |
|
WANG Jiu-Ru1,2, DING Lin-Hua1,2, LIU Li1,2, WANG Hai-Feng1,2
|
|
1.School of Informatics, Linyi University, Linyi 276000, China;2.Provincial Key Laboratory for Network Based Intelligent Computing(University of Ji'nan), Ji'nan, 250022, China
|
| Abstract: |
| In this paper, set theory is introduced to the design of authenticated key agreement scheme for heterogeneous sensor networks, and a scheme based on bilinear dynamic accumulator is proposed. The previous schemes based on classical random graph and others mainly achieve key agreement between nodes, and separate authentication and key agreement. From the perspective of set theory, this work transforms authenticated key agreement into set element relationship certification, and integrates identity authentication and key agreement. It includes identity authentication, key agreement, and broadcast authentication. Sensors verify the identity of each other by exchanging ID and witnesses. Legitimate nodes generate a shared key. Broadcast messages are used to dynamically add/delete nodes, and update witness. Experimental results show that the new scheme not only achieves effective integration of authentication, key agreement and broadcast certification; but also has better security, scalability, and adaptive changes in the network structure. It is suitable for higher node performance and security requirements scenarios. |
| Key words: authenticated key agreement dynamic accumulator bilinear pairing heterogeneous sensor network |