基于ECC的无证书WSN广播信息认证方案  

ECC-Based Certificateless Broadcast Information Authentication Scheme for WSN

作　　者：吴昆 魏国珩[1] WU Kun;WEI Guoheng(Department of Information Security,Naval University of Engineering,Wuhan 430033,China)

机构地区：[1]海军工程大学信息安全系,武汉430033

出　　处：《计算机工程》2020年第12期157-162,200,共7页Computer Engineering

基　　金：国家部委基金。

摘　　要：广播认证是无线传感器网络(WSN)安全中的重要部分,针对传统广播认证中资源消耗较多、安全性不高的问题,结合椭圆曲线密码算法,提出一种非双线性的无证书广播信息认证方案。该方案基于计算椭圆曲线离散对数实现安全认证,并通过相邻节点间相互协作共享中间计算结果,以减少节点的计算开销。通过形式化分析得出,在随机预言机模型下证明了方案具有面对2种攻击者的安全性,还拥有抗密钥托管、抗重放攻击与抗拒绝服务攻击等多种安全属性。实验结果表明,该方案执行一次广播信息认证的能耗更少,且具有较长的网络生存周期,适用于资源受限的WSN。Broadcast authentication is an important part of Wireless Sensor Network(WSN)security.To address the high resource consumption and low security in traditional broadcast authentication schemes,this paper proposes a non-bilinear certificateless broadcast information authentication scheme using the Elliptic Curve Cryptography(ECC)algorithm.This scheme calculates the Elliptic Curve Discrete Logarithm(ECDL)to achieve security authentication,and shares the intermediate calculation results through the cooperation between neighboring nodes,so as to reduce the calculation cost of nodes.Through formal analysis,the security of the scheme against two kinds of attackers is demonstrated under the random oracle model.The scheme also has multiple security attributes such as resistance to key hosting,resistance to replay attacks and resistance to denial of service attacks.Experimental results show that the proposed scheme consumes less energy to perform a broadcast information authentication,and extends the network life cycle,which makes it suitable for resource-constrained WSN.

关 键 词：无线传感器网络 广播认证 无证书机制 非双线性 椭圆曲线密码 

分 类 号：TP393[自动化与计算机技术—计算机应用技术]