Distributed User Access Control in Sensor Networks
Distributed User Access Control in Sensor Networks
复制标题
DOI：
10.1007/11776178_19
复制
发表时间：
2006-06
期刊：
影响因子：
--
通讯作者：
Haodong Wang;Qun A. Li
中科院分区：
文献类型：
--
作者：
Haodong Wang;Qun A. Li
传感器网络中的用户访问控制定义了授予用户对信息和资源的访问权限的过程。这对于未来真实的传感器网络部署是必不可少的，在传感器网络中，传感器可以为用户提供不同的服务，在数据和资源访问。针对传统的集中式访问控制机制需要基站参与用户认证和访问传感器节点信息的问题，提出了一种分布式的用户访问控制机制，该机制在传感器可能被入侵和用户可能相互勾结的现实敌手模型下，具有效率低、可扩展性差、沿着容易受到攻击等缺点.我们将访问控制分为由物理上靠近用户的传感器进行的本地身份验证和基于本地传感器认可的轻型远程身份验证。椭圆曲线加密（ECC）是一种公钥加密方案，用于本地认证。我们实现了访问控制协议的TelosB微尘的测试床。分析和实验结果表明，该方案能够满足真实的访问控制需求。
User access control in sensor networks defines a process of granting user the access right to the information and resources. It is essential for the future real sensor network deployment in which sensors may provide users with different services in terms of data and resource access. A centralized access control mechanism requires base station to be involved whenever a user requests to get authenticated and access the information stored in the sensor node, which is inefficient, not scalable, and is exposed to many potential attacks along the long communication path. In this paper, we propose a distributed user access control under a realistic adversary model in which sensors can be compromised and user may collude. We split the access control into local authentication conducted by the sensors physically close to the user, and a light remote authentication based on the endorsement of the local sensors. Elliptic Curve Cryptography (ECC), a public key cryptography scheme, is used for local authentication. We implement the access control protocols on a testbed of TelosB motes. Our analysis and experimental results show that our scheme is feasible for real access control requirement.