Sensor network authentication key establishment method based on light certificate and implementation device thereof

Abstract

The method aims to solve the problems that an authentication key establishment method based on a public key in an existing sensor network does not consider the limitation of a maximum transmission unit and is low in reliability. The invention discloses a sensor network authentication key establishment method based on a light certificate and an implementation device thereof, public key authentication, private key authentication and secret value authentication are realized by adopting the light certificate and a digital signature mode, and the confidentiality for calculating a session key secretvalue is realized through a public key encryption / decryption mechanism. The invention further provides an implementation device based on ECC public key primitive ECIES, ECDSA and other operations. The device is realized by using TinyECC based on a TinyOS platform on a TelosB node, and the result shows that when the method disclosed by the invention is applied to ECC primitives, the key establishment of the two nodes takes 66.5 seconds, and in order to improve the reliability, a repeated negotiation parameter is set to be 1 as the most cost-effective way.

Description

technical field [0001] The invention belongs to the technical field of authentication key establishment in network security, in particular to an authentication key establishment (or negotiation, distribution, exchange) method for a sensor network, which can be used for safely and efficiently negotiating a shared session key between nodes in a sensor network . Background technique [0002] As a part of the Internet of Things and fog computing, sensor networks have been extensively studied over the years, and providing security in their resource-constrained network environments has always been a research hotspot. Early researchers focused on using symmetric key mechanism to provide security, but because of the inherent characteristics of symmetric key mechanism, key agreement has not been perfectly solved. Until the feasibility of the public key mechanism in the sensor network was certified later, the public key mechanism based on ECC has been widely used in the key agreement...

AI Technical Summary

Problems solved by technology

[0003] 1), all assume that the lower layer is reliable, so that the existing methods do not consider solving the problem of loss of negotiation packets;

[0004] 2), all do not consider the limitation of the maximum transmission unit (MTU, Maximum Transmission Unit) of the lower layer, such as IEEE802. class case)

Existing schemes either exceed this limit, or implement authentication-less key establishment (such as EPKI)

When the limit is exceeded, the key establishment package will be fragmented at the bottom layer, so that an attacker can destroy the entire key agreement process as long as one of them is destroyed, reducing security

The key agreement without authentication will lead to various attacks, such as impersonation attack, MITM attack, etc.

Images