TinySeRSync: secure and resilient time synchronization in wireless sensor networks
TinySeRSync: secure and resilient time synchronization in wireless sensor networks
复制标题
DOI：
10.1145/1180405.1180439
复制
发表时间：
2006-10
期刊：
影响因子：
--
通讯作者：
Kun Sun;P. Ning;Cliff X. Wang
中科院分区：
文献类型：
--
作者：
Kun Sun;P. Ning;Cliff X. Wang
在许多传感器网络应用中，准确和同步的时间是至关重要的，因为需要一致的分布式感知和协调。在敌方可能通过外部节点或受攻击节点攻击网络和/或应用的恶劣环境中，时间同步因其重要性而成为一个有吸引力的目标。本文描述了TinyOS无线传感器网络时间同步子系统TinySeRSync的设计、实现和性能评估。本文主要做了三方面的工作：首先，提出了一种基于硬件辅助的、经过认证的媒体访问控制(MAC)层时间戳的安全单跳成对时间同步技术。与以前的尝试不同，该技术可以处理诸如MICAz微尘产生的高数据速率(与MICA2微尘产生的数据速率相反)。其次，在μTESLA广播认证协议用于本地认证广播的基础上，提出了一种安全的、具有弹性的全球时间同步协议，解决了基于μTESLA的广播认证实现时间同步的目标与μTESLA要求松散时间同步的矛盾。由此产生的协议是安全的，不会受到外部攻击，并且对受攻击的节点具有弹性。第三个贡献包括在运行TinyOS的MICAz微尘上实施所提出的技术，并通过在一个由60个MICAz微尘组成的网络中进行现场实验进行了彻底的评估。
Accurate and synchronized time is crucial in many sensor network applications due to the need for consistent distributed sensing and coordination. In hostile environments where an adversary may attack the networks and/or the applications through external or compromised nodes, time synchronization becomes an attractive target due to its importance. This paper describes the design, implementation, and evaluation of TinySeRSync, a secure and resilient time synchronization subsystem for wireless sensor networks running TinyOS. This paper makes three contributions: First, it develops a secure single-hop pairwise time synchronization technique using hardware-assisted, authenticated medium access control (MAC) layer timestamping. Unlike the previous attempts, this technique can handle high data rate such as those produced by MICAz motes (in contrast to those by MICA2 motes). Second, this paper develops a secure and resilient global time synchronization protocol based on a novel use of the μTESLA broadcast authentication protocol for local authenticated broadcast, resolving the conflict between the goal of achieving time synchronization with μTESLA-based broadcast authentication and the fact that μTESLA requires loose time synchronization. The resulting protocol is secure against external attacks and resilient against compromised nodes. The third contribution consists of an implementation of the proposed techniques on MICAz motes running TinyOS and a thorough evaluation through field experiments in a network of 60 MICAz motes.