ZigBee网络抵御Sybil攻击的自适应链路指纹认证方案  

Adaptive Link Fingerprint Authentication Scheme Against Sybil Attack in Zig Bee Network

作　　者：郁滨[1] 黄美根 黄一才[1] 孔志印 

机构地区：[1]解放军信息工程大学,郑州450004 [2]信息保障技术重点实验室,北京100072

出　　处：《电子与信息学报》2016年第10期2627-2632,共6页Journal of Electronics & Information Technology

基　　金：信息保障技术重点实验室开放基金(KJ-15-104)~~

摘　　要：该文针对ZigBee网络中Sybil攻击破坏节点身份唯一性的问题,提出一种抵御Sybil攻击的自适应链路指纹认证方案。方案首先基于无线链路特征设计了链路指纹,在此基础上,提出了反映信道质量的相干时间估测算法和适应子节点数量变化的保护时隙(GTS)动态申请算法,并给出了Sybil攻击认证流程。安全性分析及实验结果表明,方案在通信环境的安全边界条件下节点认证成功率可达97%以上,且链路指纹无需存储,具有较低的资源需求。To solve the problem that Sybil attack damages the uniqueness of node identity in ZigBee network, an adaptive link fingerprint authentication scheme against Sybil attack is proposed. First, a link fingerprint based on the characteristics of wireless link is designed. Based on this fingerprint, two algorithms are presented. One is the estimation algorithm of coherence time reflecting channel＇s quality and the other is the dynamic application algorithm of Guaranteed Time Slot （GTS） adapting to changes in child node＇s number. At the same time, the authenticating procedure for Sybil attack is presented. Security analysis and experiment results show that the node authentication rate of the proposed scheme can reach more than 97% under the condition of security boundary in communication environment. Due to the usage of link fingerprint, the scheme has lower resource requirements.

关 键 词：无线网络安全 Zig BEE SYBIL攻击 链路指纹 保护时隙 

分 类 号：TP309[自动化与计算机技术—计算机系统结构]