Methods for SN (sensor node) equipment authentication and state authentication, as well as security protocol method

Abstract

The invention provides a security protocol method in a sensor network. A plurality of SNs in the sensor network are connected to sensor network gate ways SGWs, at least on gate way is connected to a controller UC which is connected to an authentication server AAA. The methods comprise the steps as follows: in an SN equipment authentication process, the gate ways collect requests sent by the plurality of SNs respectively and send the requests to the controller; and after the SN equipment authentication, the controller initiates a state verification process to verify the states of each SN and the sensor network. The invention achieves the SN equipment authentication and the state authentication of the SNs and the sensor network, and provides the complete security protocol.

Description

technical field [0001] The invention designs a sensor network, and in particular relates to a security protocol of the sensor network. Background technique [0002] Sensor networks are widely used in many civilian fields, including environment and residence monitoring, agricultural monitoring, industrial control and automation, medical reference, home automation, intelligent traffic control and so on. For complex tasks and applications, multiple isolated sensor networks require global interconnection to collaboratively achieve data acquisition and control, thereby realizing a ubiquitous sensor network (USN) environment. [0003] Due to the sensitive nature of many applications (such as smart measurement, health monitoring, security systems, industrial automation, etc.), USN should provide security mechanisms for device authentication, message integrity, and encrypted data security. Security considerations need to take into account the active malicious behavior of the advers...

AI Technical Summary

Problems solved by technology

[0007] 3. Simply authenticating the device is not enough to verify that the operating software and status of the sensor network have not been maliciously tampered with

The disadvantage of this method is that it is difficult to support roaming or mobile situations, because the target sensor gateway cannot know the credit of the incoming sensor node

There are three main problems with this scheme: First, since each sensor node directly authenticates with the authentication server, in a large-scale environment, the communication overhead for transmitting data packets will generate a huge network load

[0012] Also, there is another major problem with existing approaches: they cannot verify the running software and state of the sensor node / network

Therefore, simple device authentication is not enough to verify that the running software and status of sensor nodes have not been maliciously tampered with

Images