PEACE: A Novel Privacy-Enhanced Yet Accountable Security Framework for Metropolitan Wireless Mesh Networks
PEACE: A Novel Privacy-Enhanced Yet Accountable Security Framework for Metropolitan Wireless Mesh Networks
复制标题
DOI：
10.1109/tpds.2009.59
复制
发表时间：
2010-02
影响因子：
5.3
通讯作者：
K. Ren;Shucheng Yu;Wenjing Lou;Yanchao Zhang
中科院分区：
文献类型：
--
作者：
K. Ren;Shucheng Yu;Wenjing Lou;Yanchao Zhang
近年来，多跳无线网状网（WMN）作为一种在大城市范围内提供宽带互联网接入的低成本方法，吸引了越来越多的关注和部署。安全和隐私问题是推动WMN广泛部署和支持面向服务应用的成功的最重要因素。尽管有必要，有限的安全研究已经进行了WMN中的隐私保护。这激励我们开发PEACE，这是一种新型的隐私增强但可负责的安全框架，专为WMN量身定制。一方面，PEACE实施严格的用户访问控制，以科普免费搭车者和恶意用户。另一方面，PEACE提供了针对对手和各种其他网络实体的复杂的用户隐私保护。PEACE是一套认证和密钥协商协议，建立在我们提出的短群签名的变化。我们的分析表明，PEACE对一些与安全和隐私相关的攻击具有弹性。还讨论了进一步提高方案效率的其他技术。
Recently, multihop wireless mesh networks (WMNs) have attracted increasing attention and deployment as a low-cost approach to provide broadband Internet access at metropolitan scale. Security and privacy issues are of most concern in pushing the success of WMNs for their wide deployment and for supporting service-oriented applications. Despite the necessity, limited security research has been conducted toward privacy preservation in WMNs. This motivates us to develop PEACE, a novel Privacy-Enhanced yet Accountable seCurity framEwork, tailored for WMNs. On one hand, PEACE enforces strict user access control to cope with both free riders and malicious users. On the other hand, PEACE offers sophisticated user privacy protection against both adversaries and various other network entities. PEACE is presented as a suite of authentication and key agreement protocols built upon our proposed short group signature variation. Our analysis shows that PEACE is resilient to a number of security and privacy related attacks. Additional techniques were also discussed to further enhance scheme efficiency.