無線感測網路上的資料認證機制

Data Authentication Scheme for Wireless Sensor Networks

林育德(Yu-De Lin)

指導教授 ： 郭斯彥

國立臺灣大學/電機資訊學院/電機工程學研究所/碩士(2009年)

https://doi.org/10.6342/NTU.2009.01168

摘要

無線感測網路是由具有限資源的sensor node 所組成的分散式系統,其可被應用於危險地區環境的觀測,例如:高山,沙漠,戰場的環境,並將傳回的觀測報告以幫助後端伺服器作出有效的結論以及正確的判斷,假如在這一網路中有數個sensor node被某不善人士(簡稱敵方)所占據,並且發送出錯誤的報告,則會擾亂後端伺服器的判斷而作出不正確的決定. 目前已有學者在提出傳遞訊息時過濾錯誤訊息的機制以避免錯誤的訊息傳回後端伺服器,而本論文則提出新的訊息認證的方法以助於過濾錯誤訊息.

這篇論文提出在無線感測網路系統下受限函數為基礎的訊息認證機制(以下簡稱CFA),此訊息認證機制可達到無線感測網路的訊息認證標準(目前現有的訊息認證機制只能達到訊息認證標準的部分要求),並且此認證機制可幫助在傳遞訊息時的錯誤訊息過濾.

在這篇論文中,我們從理論及實驗中驗證CFA機制的安全性及對系統資源的消耗,我們使用TelosB硬體架構做為實驗的硬體平台,以TinyOS系統開發環境實做CFA,並測量實驗的結果

關鍵字

無線感測網路 ； 安全 ； 資料認證

並列摘要

This thesis presents a Constrained Function based message Authentication (CFA) scheme for wireless sensor networks, which meets all the requirements of the so-called sensor authentication criteria, while most of the existing schemes only achieve partial requirements. In particular, to the best of our knowledge, CFA is the first authentication scheme supporting en-route filtering with only a single packet overhead. We examine the CFA scheme from the theoretical analysis to demonstrate the efficiency and security. Our method has also been practically implemented on the TelosB compatible mote for evaluating performance and resource overhead.

並列關鍵字

wireless sensor network ； security ； data authentication

參考文獻

[1] J. Deng, R. Han, S. Mishra. Defending against Path-based DoS Attacks in Wireless Sensor Networks. Proceedings of the ACM Workshop on Security of Ad Hoc and Sensor Networks (SASN), 2005.

[2] D. Liu, P. Ning, “Establishing Pairwise Keys in Distributed Sensor Networks,” Proceedings of the ACM Computer and Communications Security Conference (CCS), 2003.

[4] D. J. Malan, M. Walsh, and M. D. Smith, “Implementaing Public-Key Infrastructure for Sensor Networks,” ACM Trans. on Sensor Networks (TOSN), 2008.

[6] K. Ren, W. Lou, and Y. Zhang, “LEDS: providing location-aware end-to-end data security in wireless sensor networks,” Proceedings of the IEEE Conference on Computer Communications (INFOCOM), 2006.

[7] C. M. Yu, C. S. Lu, and S. Y. Kuo, “A Simple Non-Interactive Pairwise Key Establishment Scheme in Sensor Networks,” Proceedings of the IEEE Communications Society Conference on Sensor, Mesh and Ad Hoc Communications and Networks (SECON), 2009