摘要
针对新节点加入的传感器网络中进行合法的身份认证带来的节点内存占有量大、计算量大、秘密值的信息安全度低等问题,提出一种适用于内存有限的传感网络,安全度高的节点身份认证机制。该方案采用增添节点自身密码,并采用单向哈希函数对密码和身份(ID)进行散列化,利用密码参与椭圆曲线的签名算法的生成,可信节点间采用同余方程的认证方案,且各认证阶段均采用互认证模式。该方案不仅能防范窃听、重放、注入等攻击,而且能抵御猜测攻击、中介攻击、匿名信息攻击和拒绝服务攻击。与现有算法相比,所提方案能减少节点最初内存占有量三个单位级别,减少密钥检测率。
Concerning the problems of large node memory occupation, complex calculation, low information safety degree, in the legal identity authentication when new node joins in sensor networks, a node authentication mechanism of highly safety degree applicable to the limited memory network was proposed. The mechanism used the password to add the node itself, and one-way Hash function was applied to the password and IDentity （ID） for hashing. Password was involved in the generation of the elliptic curve signature algorithm and authentication scheme of congruence equation was adopted between credible nodes. Each certification stage used mutual authentication mode. The proposed algorithm not only can prevent eavesdropping, replay, injection and so on, but also is able to resist guessing attack, mediation attack, anonymous attack and denial of service attack. The comparison with the existing algorithms show that the proposed scheme can reduce the node original memory occupation of three unit level and can reduce key detection rate.
出处
《计算机应用》
CSCD
北大核心
2014年第1期104-107,共4页
journal of Computer Applications
基金
江苏省产学研联合创新资金资助项目(BY2013015-33)
关键词
无线传感器网络
安全认证
节点认证
同余方程
椭圆曲线加密
Wireless Sensor Network （WSN）
safety certification
node authentication
congruence equation
Ellipse Curve Cryptography （ECC）
