面向WSN的双向认证与密钥协商方案设计  

Two-Party Authentication and Key Agreement Scheme for Wireless Sensor Networks

作　　者：吴昆 胡现刚 张学超 WU Kun;HU Xiangang;ZHANG Xuechao(Unit 91977 of PLA,Beijing 100071,China;Confidential Code Room of the Naval Staff Department of the Southern Theater Command,Zhanjiang Guangdong 524000,China;Political and Legal Affairs Commission of the Central Military Commission,Beijing 100000,China)

机构地区：[1]中国人民解放军91977部队,北京100071 [2]南部战区海军参谋部机要密码室,广东湛江524000 [3]中国共产党中央军事委员会政法委员会,北京100000

出　　处：《通信技术》2023年第11期1289-1295,共7页Communications Technology

摘　　要：由于无线传感器网络(Wireless Sensor Network,WSN)节点计算能力等资源受限,如何使用较少的计算量实现节点间的认证与密钥协商以保证通信安全一直是研究的热点。针对基于对称密码的认证方案网络扩展性较差、密钥更新困难的问题,以及基于非对称密码的认证方案计算资源开销大的问题,面向WSN安全需求,提出了一种基于身份的非双线性节点认证与密钥协商方案,以椭圆曲线密码算法(Elliptic Curve Cryptography,ECC)为基础,实现了通信节点之间的双向认证、会话密钥协商、确认和更新。分析表明,方案可以满足无线传感器网络节点密钥协商过程所需的几种典型的安全属性,且在资源消耗上有所优化。As computing power and other resources of wireless sensor network are limited,it is always a research hotspot that using less computing to achieve authentication and key agreement between nodes to ensure communication security.To address the problems of poor network scalability and difficult key updating of symmetric cryptography-based authentication schemes,as well as the high computational resource overhead of asymmetric cryptography-based authentication schemes,an identity-based non-two-party authentication and key agreement scheme is proposed to meet the security requirements of WSNs.The scheme is based on the ECC(Elliptic Curve Cryptography)algorithm which realizes two-party authentication,session key agreement,confirmation and update between communication nodes.The analysis indicates that the scheme can satisfy several typical security attributes required for the key agreement process of WSN nodes and is optimized in terms of resource consumption.

关 键 词：无线传感器网络 节点身份认证 密钥协商 椭圆曲线密码 

分 类 号：TP309[自动化与计算机技术—计算机系统结构]