MANET节点不相交多路径安全源路由协议  

Multiple Node-Disjoint Paths Secure Source Routing for MANET

作　　者：冯涛[1,2] 郭显[1,3] 马建峰[2] 李兴华[2] 

机构地区：[1]兰州理工大学计算机与通信学院,兰州730050 [2]西安电子科技大学计算机网络与信息安全教育部重点实验室,西安710071 [3]甘肃联合大学数学与信息科学学院,兰州730010

出　　处：《计算机学报》2009年第6期1126-1133,共8页Chinese Journal of Computers

基　　金：国家“八六三”高技术研究发展计划项目基金(2007AA01Z429);国家自然科学基金(60573036,60633020,60702059);甘肃省自然科学基金(2007GS04823);兰州理工大学博士基金(BS14200901)资助~~

摘　　要：多路径路由实现是移动Adhoc网络(MANET)可靠运行的有效保证.现有MANET节点不相交多路径路由协议主要关注节点不相交多路径的可实现性和效率问题.针对节点不相交多路径路由协议MNDP协议在主动攻击者安全模型中的安全缺陷,提出了可证明安全的MANET节点不相交多路径动态源路由协议——SMNDP协议.SMNDP协议路由请求算法中,建立了中间节点路由请求消息传播策略的检错机制,SMNDP协议路由应答算法中建立了消息防篡改机制和身份认证机制.基于攻陷的网络拓扑模型,扩展了可模糊路由概念,提出了多路径可模糊路由集合概念和节点不相交多路径源路由协议的安全定义,并应用于SMNDP协议的安全分析.SMNDP协议的安全性可以归约为消息认证码和签名机制的安全性.The implementation of multipath routing provides guarantee for reliable running of mobile Ad hoc network （MANET）. Most of existing node-disjoint multipath routing focuses mainly on establishment issues of multiple node-disjoint paths and efficiency issues of identifying multiple node-disjoint paths. Multiple Node-Disjoint Paths （MNDP） has secure faults in the se- cure model of active adversary. To address this issue, a provably Secure Multiple Node-Disjoint Paths source routing （SMNDP） is proposed in this paper. Error-check scheme is used for the transmission of the route quest in the algorithm of route request for SMNDP. In addition, the schemes such as the message authentication and the digital signature are used in the algorithm of route reply for SMNDP. The concept of plausible route is extended in this paper, and the defini- tion of plausible-route set is given. And then, security definition of multiple node-disjoint paths routing is presented. The security of SMNDP can be reduced to the security of the message authentication code and the digital signature.

关 键 词：MANET MNDP 可证明安全 可模糊路由 SMNDP 

分 类 号：TP309[自动化与计算机技术—计算机系统结构]