一种无状态的传感器网络密钥预分配方案

 在无线传感器网络中,节点被敌方捕获以后将泄露节点内存储的群组密钥等秘密信息,所以需要建立一种安全高效的群组密钥管理系统来及时对被捕获节点进行撤销,以保证无线传感器网络中群组通信的安全.提出一种基于逻辑密钥树结构的密钥预分配方案,群组控制者和密钥服务器(GCKS)为逻辑密钥树中每一逻辑节点分配一个密钥集,每一sensor节点对应一个叶节点,以及一条从该叶节点到根节点的路径,GCKS将该路径上所有节点的密钥植入sensor节点.节点撤销时,GCKS将逻辑密钥树分成互不相连的子树,利用子树中sensor节点的共享密钥进行群组密钥的更新.分析表明本方案满足无状态性,以及正确性、群组密钥保密性、前向保密性和后向保密性等安全性质,具有较低的存储、通信和计算开销,适用于无线传感器网络环境.

A Stateless Key Pre-distribution Scheme for Wireless Sensor Networks

Since the secret information such as the group key in the compromised sensor nodes in the wireless sensor networks (WSN) may be compromised by the adversary,it is necessary to build a secure and efficient group key management system to revoke the compromised sensor nodes.Based on the logical key tree,a key predistribution scheme is proposed.Each internal vertex of the logical key tree is assigned a set of keys. Each sensor node is assigned to a leaf of the logical key bee, and keeps the key sets assigned to the vertices on the path from the leaf to the root. During the revocation phase, the logical key tree is divided into disjointed subtrees. All the sensor nodes in the same subtree share a common key, which is used to encrypt the new session key. Analysis shows that the proposed scheme satisfies the stateless,correctness,group key secrecy,forward secrecy and backward secrecy.The performance analysis shows that the proposed scheme has a low storage,communication and computation overload,and it is applicable to WSN.