基于动态多簇密钥管理模型的安全数据聚合方案  

Data Aggregation Security Solution Based on Key Management Scheme of Dynamic Multi-cluster

作　　者：雷凤宇[1,2] 秦玉化 陈文鑫 陈晶[3] 

机构地区：[1]华中科技大学计算机学院信息安全系 [2]广州军区75741部队 [3]武汉大学计算机学院

出　　处：《计算机科学》2011年第9期36-40,共5页Computer Science

基　　金：国家自然科学基金(60903175;60903196和60703048)资助

摘　　要：军事领域需要强有力的安全措施,但由于环境恶劣,缺乏物理保护,难以展开固定的通信设施。设计了一种基于身份的动态多簇密钥管理模型。该模型以簇为单位进行密钥管理,每个成员节点只需存储本簇的公钥因子矩阵,极大地节省了密钥存储空间,且可抵抗同谋攻击;密钥分发过程安全高效,节点加入和退出时密钥更新开销小;不依赖可信第三方便可实现身份认证,且不需要固定基础设施的支持。基于该模型提出了一种安全数据聚合方案。列举了部分可以抵御的攻击;讨论了该方案握手过程需要消耗的能量。结果显示,在新模型下将公钥密码体制用于无线传感器网络是可行的。A dynamic multiple cluster key management model based on identity was designed in wireless sensor network.The key management in the model is cluster-based.Every node in the network is just required to store its private key and the public key factor matrix of the cluster that it belongs to,which consumes little storage space and can resist the collusion attack.The key distribution is secure and effective.It costs little during the node joining and leaving.And it realizes the identity authentication independent of the third party and has no use for infrastructure to sustain the key distribution center.A secure data aggregation solution based on the model was proposed.Security of the proposed solution was analyzed and some attacks that can be resisted were listed.The energy consumption during the handshaking process was discussed,which indicates that it is feasible to use the identity-based cryptography in the wireless sensor networks.

关 键 词：无线传感器网络 数据聚合 基于身份的公钥密码体制 密码系统 

分 类 号：TP309[自动化与计算机技术—计算机系统结构]