基于轻量级CA无线传感器网络双向认证方案  

Lite CA-based Bilateral Authentication Schemes for Wireless Sensor Network

作　　者：郭萍[1,2] 张宏[1] 周未[1,3] 曹雪[1] 

机构地区：[1]南京理工大学计算机科学与技术学院,南京210094 [2]南京信息工程大学计算机与软件学院,南京210044 [3]中国人民解放军驻南京大桥机器厂,南京211104

出　　处：《小型微型计算机系统》2013年第3期557-562,共6页Journal of Chinese Computer Systems

基　　金：国家自然科学基金青年基金项目(60903027)资助

摘　　要：无线传感器网络(Wireless Sensor Network,WSN))认证协议,多是基于秘密密码算法或传统证书公钥密码算法,前者需要在传感器节点中预置大量信息,后者又过于复杂,很难在资源受限的WSN中取得理想效果,针对该问题结合轻量级CA(Lite Certificate Authority,LCA)公钥机制,设计WSN移动用户与LCA及与传感器节点的双向认证协议.分析表明,LCA简化了传统基于证书CA公钥机制的复杂性,产生公钥轻量化、公钥验证轻量化、无需证书管理.系统初始化完成后,用户与传感器节点及传感器节点间的双向认证无需LCA参与,简单高效,通信量少,可抵御无线环境下易于实施的多种攻击,适用于资源受限的WSN.Most of the protocols for wireless sensor network(WSN) are built on secret key cryptography algorithms or public key cryptography algorithms.The former usually needs to initialize more preset keys information in WSN′s nodes,and the latter is too complex,which are both difficult to be deployed for WSN because of constricted resources.In order to solve the problems,two bilateral authentication protocols that one is between user and lite certificate authority(LCA),and another is between user and node,based on LCA are proposed.Comparing LCA with traditional certificate-based CA system,analysis shows LCA simplifies complications of producing and verifying public keys,such as generating public/private keys more flexibly and conveniently,and is cetificateless.After the system initialization,authentications between users and nodes are processed without LCA.Moreover,the protocols need less communications,can effectively defense some attacks known for wireless environments,and are applicable to wireless sensor network.

关 键 词：无线传感器网络(WSN) 轻量级CA 双向认证 

分 类 号：TP309[自动化与计算机技术—计算机系统结构]