传感器网络中一种基于分布式更新权限的组密钥管理方案  

A Group Key Management Scheme Based on Distributed Rekeying Authority in Sensor Networks

作　　者：曾玮妮[1] 林亚平[1] 胡玉鹏[1] 易叶青[1] 李小龙[1] 

机构地区：[1]湖南大学计算机与通信学院,长沙410082

出　　处：《计算机研究与发展》2007年第4期606-614,共9页Journal of Computer Research and Development

基　　金：湖南省自然科学基金重点项目(06JJ20049);湖南省教育厅科学研究优秀青年基金项目(06B047)

摘　　要：传统网络中的组密钥管理方案一般依赖于一个长期可信的节点,由该节点存储其他所有用户的信息进行组密钥管理.与传统网络不同的是传感器网络不存在这种可信节点,而且其资源十分有限,因此传统网络中的组密钥管理方案不适合传感器网络.结合传感器网络的特性,提出一种基于分布式更新权限的组密钥管理方案DRA,DRA在组密钥更新过程中引入广播机制,并构造权限分布函数、组密钥隐藏函数及广播认证函数以实现对妥协节点的剔除(revocation)及更新信息的完整性鉴别.理论分析及仿真结果表明,方案DRA在保证安全性的同时具有较小的存储开销和通信开销,并能有效地避免孤立节点的问题.Most of the group key management schemes proposed in traditional networks rely on a reliable node. Different from the traditional networks, sensor networks don＇t have such reliable nodes and their resources are constrained. So all these schemes can＇t be used in sensor networks directly. Proposed in this paper is a group key management scheme based on the distributed rekeying authority. And a broadcast mechanism is introduced in the process of group rekeying. Furthermore, three novel polynomials are presented to revoke compromised nodes and distinguish rekeying information＇s integrality. Extensive analyses and simulations show that the proposed scheme can provide a high level of security, reduce communication and storage overheads, and avoid the problem of isolated nodes.

关 键 词：传感器网络 组密钥管理 分布式更新权限 广播认证函数 节点剔除 

分 类 号：TP393[自动化与计算机技术—计算机应用技术] TP309[自动化与计算机技术—计算机科学与技术]