基于CPK的无线Mesh网络节点双向认证方案研究  

Research on Two-way Authentication Scheme for Wireless Mesh Network Based on CPK

作　　者：李东臻[1] 严承华[2] 罗旬 

机构地区：[1]海军装备部 [2]海军工程大学 [3]92325部队

出　　处：《信息网络安全》2016年第8期32-38,共7页Netinfo Security

基　　金：湖北省自然科学基金[2015CFA066]

摘　　要：无线Mesh网络是一种新型的无线网络,它是WLAN和移动自组网的结合,同时兼有二者的优点,因而具有很大的发展潜力。然而安全问题一直是制约其发展的根本性问题,节点认证是保证无线Mesh网络安全的第一道屏障。文章通过对比分析IBC认证和CPK认证的优缺点,得出CPK组合公钥具有密钥空间巨大、密钥管理简单、安全性和保密性高等特点,特别适合大规模的网络节点接入。为解决无线Mesh网络节点安全、高效入网认证的问题,文章提出了基于CPK的无线Mesh网络节点双向认证方案,该方案针对Mesh网络特点,将CPK组合公钥技术引入到无线Mesh网络节点认证当中,在此基础上结合公钥密码体制和设置挑战随机数、时间戳等,实现了入网节点的双向身份认证,简化了认证的流程,减少了认证的时延,为大规模的节点接入提供了一种新的认证方案。最后通过安全分析和仿真验证,证明了该方案的安全性和有效性。Mesh network is a new type o f wireless network, which combined by W L A N and A dhoc,and it has great potentialities. But the security problems restrict the development o f Mesh, Thispaper analyses the advantages and disadvantages o f CPK and IB C , and finds that CPK is suitableto access for large-node. In order to solve the problem o f authentication fo r wireless mesh network,this paper carried out a new protocol to deal w ith e fficiently and safely access o f Mesh, by takingCPK into Mesh access authentication. And the two-way authentication was achieved, by using CPKalgorithm, public key system, random numbers and time stamp. According to the protocol, the processo f authentication is simplified, and the delay is also reduced, meanwhile a new authentication method isprovided to mass node access. In the end, security analysis and simulation proved the effectiveness andsecurity o f this method.

关 键 词：网络安全 MESH网络 认证技术 CPK 

分 类 号：TN929.5[电子电信—通信与信息系统]