A method for authentication in sensor network and sensor network

Abstract

An embodiment of the present invention provides a method for authentication in a sensor network and a sensor network, the network includes: a network root node, a convergence node and a network leaf node; in the method: at least two clusters are established, the first cluster includes the network root node and the network leaf node At least one sink node, the network root node is the root node of the first cluster, at least one sink node is the leaf node of the first cluster; the second cluster includes a sink node and at least one network leaf node, the sink node is the root of the second cluster Node, at least one network leaf node is the leaf node of the second cluster; a hash tree is established in each cluster, and its root node has the first root node value; each leaf node of the cluster stores the first root node value; the root node Send a data packet; the leaf node of the cluster receives the data packet, judges that the time stamp of the data packet is legal, calculates a second root node value according to the auxiliary authentication information in the data packet, the second root node value and the first root node value The same, the data packet is considered legal.

Description

technical field [0001] The invention relates to information security technology, in particular to a method for authentication in a sensor network and the sensor network. Background technique [0002] There is a big difference between the sensor network and the traditional network. The security of the sensor network is due to the openness of its deployment environment, which makes it easy for intruders to eavesdrop, interfere, insert and tamper with data packets. Authentication technology is a basic security service in sensor networks. The purpose of authentication is to prove the identity of nodes and the source of messages. The existing authentication technology provides two aspects of security: one is entity authentication, the sensor network can confirm the identity of the communication node, and then realize security services such as access control and authorization service; the other is message source authentication, in order to protect the data in the sensor network L...

AI Technical Summary

Problems solved by technology

[0004] The inventor found the following problems in the prior art: when there are a large number of sensor nodes in the network, the constructed Merkle tree will be too large, the node storage space and communication consumption will be too much, and the resources of the sensor network are limited; secondly, the broadcast authentication technology It is a one-way authentication technology, that is, the sensor node authenticates the source of the message, which only guarantees the legitimacy of the message packet received by the sensor node, and the legitimacy of the message packet received by the sink node from the sensor node cannot be authenticated

Images