Resilient Packet Traceback in Wireless Mesh Networks
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing network traceback techniques are inadequate in identifying the true origin of packets in wireless mesh and sensor networks, where intermediate nodes can be compromised, leading to false data injection attacks and resource constraints, and existing schemes fail to handle colluding moles that manipulate packet markings.
Innovation Solution
A system and method using nested and probabilistic marking schemes to generate message authentication codes (MACs) at each forwarding node, ensuring that marks protect previous nodes' marks, allowing the sink to verify packet paths and identify false data injection sources even in the presence of colluding compromised nodes, with probabilistic marking reducing overhead to suit resource-constrained networks.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If conventional packet marking schemes are used, then traceback capability is provided, but the system becomes vulnerable to compromised intermediate nodes that can forge markings and prevent accurate identification of packet origins
Solution Approach 1:
The patent implements nested marking where each intermediate node embeds its marking within the markings of previous nodes, creating a hierarchical structure. The sink node can verify each marking in reverse order, and the nested structure ensures that a compromised node cannot forge markings of previous nodes without detection, as each marking is authenticated by subsequent nodes in the path
Solution Approach 2:
The patent applies preliminary action by having each node pre-compute and embed its marking and authentication data before forwarding the packet. This allows the sink node to later verify the entire path by checking markings in reverse order, preventing compromised nodes from successfully forging traceback information
2Loss of information
If deterministic marking is used at every node, then complete path information is available, but network overhead and resource consumption increase significantly in wireless mesh and sensor networks
Solution Approach 1:
The patent implements probabilistic marking where intermediate nodes mark packets with a certain probability rather than always marking. This partial action approach provides sufficient path information for traceback while significantly reducing the number of markings in the network, thereby lowering energy consumption and resource usage in wireless mesh and sensor networks
Data Source
AI summary
A system and method for packet traceback in a network includes maintaining an identity number (ID) for each node in a network and generating a signature (e.g., a message authentication code (MAC)) using a secret key shared between each node on a forwarding path and a sink. Each forwarding node leaves a mark by appending its ID and a signature in the packet, either in a deterministic manner or with a probability. Upon receiving a packet at the sink, correctness of the signatures included in each packet is verified in the reverse order by which these signatures were appended. A last valid MAC is determined in the forwarding path to determine the locations of compromised nodes that collude in false data injection attacks.