無線感測網路之配對金鑰預先分配機制

A Pairwise Key Pre-distribution Scheme for Wireless Sensor Networks

陳怡安(Yi-An Chen)

指導教授 ： 張克寧

國立暨南國際大學/科技學院/資訊工程學系/碩士(2016年)

摘要

無線感測網路由大量的感測節點組成，感測節點本身具有計算、儲存及感測物理變化的功能。最初應用於軍事方面，隨著無線感測網路技術日漸成熟，現在廣泛應用於各種環境，例如:天災回報、工廠監控及智慧家園等，因此感測設備之間通訊安全日益重要。因為感測節點的計算能力、儲存空間、電力大小和通訊範圍有所限制，目前已有許多學者針對以上限制提出相關的金鑰管理機制，像是金鑰分配中心、公開金鑰加密系統、金鑰預先分配機制。
EPKEM金鑰分配機制從金鑰池中選出n把金鑰製成m × m的金鑰矩陣，並將金鑰矩陣中的其中一行與一列存入每個感測節點。此方法可以保證，任兩個感測節點至少會擁有兩把相同的金鑰。根據這兩把相同的金鑰產生新的配對金鑰，作為這兩個感測節點通訊的金鑰。
EPKEM金鑰分配機制需要把金鑰存入感測節點，並需基地台以新增感測節點，本論文將針對這兩點改進。本論文提出從α個金鑰矩陣中選出β個金鑰矩陣,並將β個金鑰矩陣中的其中一行與一列存入每個感測節點。只要兩個感測節點的金鑰集合來自同一個金鑰矩陣，則會存在共同的金鑰成為配對金鑰；若無共同金鑰矩陣，則透過其他感測節點產生路徑金鑰及溝通金鑰。此方法在無線感測網路中，幾乎任兩個感測節點都可以建立溝通金鑰。為了提高金鑰管理機制的安全性，本論文以隨機的金鑰搭配節點認證號碼產生溝通金鑰，加上此溝通金鑰只會屬於這兩個感測節點，是以此機制對於入侵感測節點之攻擊有著良好的抵禦能力。在效能評估上，此機制的演算法簡易，而且無需太大的記憶體儲存空間。

關鍵字

金鑰矩陣 ； 路徑金鑰 ； 配對金鑰 ； 金鑰預先分配機制 ； 無線感測網路

並列摘要

A wireless sensor network is composed of a large number of low-cost sensor nodes. They can monitor environmental conditions, such as temperature, sound, pressure, etc. The development of wireless sensor network was motivated by military applications such as battlefield surveillance. Today, wireless sensor network is used in many industrial and consumer applications, such as monitoring and controlling industrial process, machine health, and so on. Due to the fact that each sensor node only has limited battery power, memory storage, data processing capacity and short radio transmission range, many scholars have proposed key management mechanism, key distribution center, public key encryption system and key pre-distribution mechanism.
EPKEM randomly selects n keys from key pool and uses them to construct a m × m key matrix. The key chain which is composed by ith row and jth column of key matrix and stores them into sensor node. In this way, any two sensors share at least two common keys which can be used to construct the pairwise key.
In this paper, I propose to select β key matrix from α key matrix and store one row and one column of β key matrix into a sensor node. As long as the key chain of two sensor nodes come from the same key matrix, there will have a common key to generate the communication key; if there do not have common key matrix, the path key can be generated through other sensor nodes. Thus, in wireless sensor network, almost any two sensor nodes have communication keys with this method. In order to improve the security of the key management, this paper also propose to generate the communication key with the random key and identity number of node. The communication key only belongs to these two sensor nodes. With this key management, wireless sensor network will have a good ability to resist intrusion attack.

並列關鍵字

Key Matrix ； Path Key ； Pairwise Key ； Key Pre-distribution management ； Wireless Sensor Networks

參考文獻

[1] A. Alemdar, M. Ibnkahla, Wireless sensor networks: applications and challenges, Proceedings of the Ninth International Symposium on Signal Processing and Its Applications (ISSPA 2007), IEEE Computer Society, Washington, DC, USA, 2007, pp. 1–6.

[2] A. Jain, K. Kant, M.R. Tripathy, Security solutions for wireless sensor networks, Proceedings of the IEEE Second Intl. Conf. Advanced Computing and Communication Technologies, Rohtak, Haryana, India, 2012, pp. 430–433.

[3] D. Carman, P. Kruus, B. Matt, Constraints and approaches for distributed sensor network security, Technical Report 00-010, NAI Labs, September 2000.

[4] H. Chan and A. Perrig, PIKE: peer intermediaries for key establishment in sensor networks, Proceedings of IEEE INFOCOM, pp.13-17, 2005.

[5] H. Chan, A. Perrig, and D. Song, Random key predistribution schemes for sensor networks, In IEEE Symposium on Research in Security and Privacy, 2003.