Broadcast authentication method for wireless network with limited node resource

Abstract

A method for broadcasting authentication in a node-resource-limited wireless network is provided. The method includes the following steps: the protocol is initialized; a broadcast node obtains a µ Timed Efficient Stream Loss-Tolerant Authentication (µTESLA) parameters hash chain, certificate and original key of the µTESLA instance from a backend server; a receiving node authenticates the identity of the broadcast node publishing the certificate according the root of the µTESLA parameters hash chain tree; the broadcast node passing the identity authentication distributes the µTESLA parameters and the other keys in the µTESLA instance generated by using the original keys of the µTESLA instance; the receiving node authenticates a broadcast message of the broadcast node based on theµTESLA protocol by using the µTESLA parameters passing the authentication and the keys in the µTESLA instance. The invention creates a µTESLA parameters hash chain (µTPC) and µTPC tree (µTPCT) based on the one-way chain and Merkle tree mechanism to implement the safe and effective µTESLA parameters (µTP) distribution. TheµTESLA method based on the tree is improved. So the broadcast authentication will be more applicable to the node-resource-limited wireless network much more, and the denial of service (DoS) attacks aiming at the µTESLA parameters distribution process can be prevented. Therefore, the costs of computation, communication and storage can be reduced, and the authentication ability of the captured node can be canceled immediately. The invention is applied to the large-scale and multiple broadcast nodes wireless network.

Description

technical field [0001] The invention relates to the application field of wireless network security in information security technology, in particular to a broadcast authentication method of a wireless network with limited node resources. Background technique [0002] With the development of technology, resource-constrained wireless networks such as sensor networks, Zigbee networks, RFID networks, and wireless personal area networks have expanded human remote monitoring and remote control capabilities. and other fields have broad application prospects. When this type of wireless network is deployed in a hostile environment, due to its wireless and broadcast characteristics, the broadcast information may be tampered or inserted malicious information by attackers, and an authentication mechanism needs to be introduced to ensure the legitimacy and integrity of the broadcast information. Broadcast authentication is one of the basic security services of wireless networks. [0003...

AI Technical Summary

Problems solved by technology

However, there are still two deficiencies in this protocol: 1. When there are a large number of broadcast nodes in the network, the overhead generated by the parameter distribution process increases rapidly, which limits the applicable network scale; 2. Among its revocation methods, the revocation tree method requires a large number of storage space, the a priori authentication key update method cannot revoke the authentication capability of the captured node in time, and the communication overhead is large, so it is difficult to fully meet the needs of wireless networks with limited node resources

Images