一种异构传感网认证密钥协商方案

把集合论思想引入异构传感网认证密钥方案设计中,提出一种基于双线性对动态累加器的异构传感网认证密钥协商方案.已往基于经典随机图等理论的安全方案主要实现了节点间密钥协商,使身份认证和密钥协商割裂开来;新方案则从集合论的角度把异构传感网认证密钥协商转化为集合元素关系认证,实现了身份认证和密钥协商的有效融合.方案包括异构传感网身份认证、密钥协商和广播认证这3 部分.节点通过交换 ID 与证人信息相互验证身份合法性;合法节点协商生成共享密钥;利用广播消息动态增加/删除节点,更新节点证人信息.实验分析表明,该方案不但实现了身份认证、密钥协商和广播认证的有效融合,而且具有良好的安全性、扩展性和网络结构变化的自适应性,适用于节点性能和安全性需求较高的场景中.

Authenticated Key Agreement Scheme for Heterogeneous Sensor Networks

In this paper, set theory is introduced to the design of authenticated key agreement scheme for heterogeneous sensor networks, and a scheme based on bilinear dynamic accumulator is proposed. The previous schemes based on classical random graph and others mainly achieve key agreement between nodes, and separate authentication and key agreement. From the perspective of set theory, this work transforms authenticated key agreement into set element relationship certification, and integrates identity authentication and key agreement. It includes identity authentication, key agreement, and broadcast authentication. Sensors verify the identity of each other by exchanging ID and witnesses. Legitimate nodes generate a shared key. Broadcast messages are used to dynamically add/delete nodes, and update witness. Experimental results show that the new scheme not only achieves effective integration of authentication, key agreement and broadcast certification; but also has better security, scalability, and adaptive changes in the network structure. It is suitable for higher node performance and security requirements scenarios.