一种实用的传感器网络广播认证协议

由于Tree-Based μTESLA协议随着网络中广播节点数量的增加产生大量开销，使其适用的网络规模受到限制．通过构造μTESLA参数链(μTESLA Parameters Hash Chain)和μTPC树(μTPC Merkle Hash Tree)，对Tree-Based μTESLA协议进行改进，提出基于μTESLA参数链的传感器网络广播认证协议．分析和验证表明，该协议能够抵抗针对μTESLA参数分发过程的DoS攻击，较Tree-Based μTESLA协议的计算、通信和存储开销小，能够立即撤销被俘节点的认证能力，且适用于大规模多广播节点传感器网络．

Practical broadcast authentication protocol for sensor networks

Broadcast authentication is one of the most important security primitive services in Sensor Networks. With more and more senders in a network, costs of Tree-based μTESLA are rising rapidly, which limits strictly the scale of networks employing it. Aiming at eliminating such a limit, this paper presents a μTPCT-based broadcasting authentication protocol which mainly rests on constructions of μTPC(μTESLA Parameters Hash Chain) and μTPCT(μTPC Merkle Hash Tree). Analysis and experiments have shown that our proposed protocol not only possesses both excellent resistance to DoS attacks against the distribution of μTESLA parameters and the ability to revoke authenticating capabilities of compromised nodes instantly, but also greatly outperforms the Tree-based μTESLA by largely reducing the cost of computation, communication, and storage needed, making it more applicable to large-scale sensor networks.