Collaborative Research: KEYING SUITE - A Protocol Library for Key Establishment in Sensor Networks

合作研究：KEYING SUITE - 用于传感器网络中密钥建立的协议库

• 批准号: 0627233
• 负责人: Weili Wu
• 金额: $ 19万
• 依托单位: University of Texas at Dallas
• 依托单位国家: 美国
• 项目类别: Standard Grant
• 财政年份: 2007
• 资助国家: 美国
• 起止时间: 2007-02-01 至 2012-01-31
• 项目状态: 已结题
• 来源: https://www.nsf.gov/awardsearch/showAward?AWD_ID=0627233&HistoricalAwards=false
• 关键词: Collaborative; Research; KEYING; SUITE; Protocol

Sensor networks are vulnerable to a variety of attacks because of the broadcast nature of wireless communications and the unattended operation in harsh environments. The well-established PKI-based key management schemes such as RSA are unfavorable due to the conflict between the extensive computation and large memory requirements, and the sensor node constraints and networking constraints. Symmetric key cryptography, on the other hand, is attractive and applicable to sensor networks due to its efficiency. Therefore establishing shared keys for communicating parties becomes a central problem for sensor network security research. Within the past few years, researchers proposed a number of probabilistic-based approaches relying on preloading keying information to each sensor for bootstrapping pairwise keys after deployment. However, the nondeterministic nature of all probabilistic-based schemes causes problems such as low scalability in network size and the unavoidable conflict between key-sharing probability and resilience against node capture attacks. This project intends to design truly in-situ key establishment schemes for large-scale sensor networks. Our algorithms require no keying information to be preloaded into regular worker sensors. A small number of sensors serve as service providers to facilitate the key establishment among worker sensors. This is a fundamentally different approach. Our preliminary research indicates that with low communication overhead and zero deployment knowledge our in-situ key establishment can achieve high scalability and resolve the conflict faced by probabilistic-based schemes. However, there are challenges that still need to be addressed in the context of in-situ keyestablishment, and we propose novel approaches to address these challenges. We also intend to systematically compare and contrast major existent key establishment schemes, and to study the geometric problems recasted by the sensor network security research. All outcomes will be infused into our KEYING SUITE, a library of keying mechanisms that will be open to the public to facilitate relevant research.

由于无线通信的广播特性和恶劣环境下无人值守的特点，传感器网络容易受到各种攻击。RSA等基于PKI的密钥管理方案由于计算量大、存储量大、传感器节点约束和网络约束的矛盾而显得力不从心。另一方面，对称密钥加密由于其效率而具有吸引力并且适用于传感器网络。因此，为通信双方建立共享密钥成为传感器网络安全研究的核心问题。在过去的几年里，研究人员提出了许多基于概率的方法，这些方法依赖于将密钥信息预加载到每个传感器，以便在部署后引导成对密钥。然而，所有基于概率的方案的不确定性的性质导致的问题，如低的可扩展性在网络规模和密钥共享概率和抵御节点捕获攻击之间的不可避免的冲突。 本计画旨在为大规模感测网路设计真正的原位金钥建立方案。我们的算法不需要将密钥信息预加载到普通工人传感器中。少量的传感器作为服务提供者，以促进工人传感器之间的密钥建立。这是一种根本不同的方法。我们的初步研究表明，由于通信开销低且部署知识为零，我们的原位密钥建立可以实现高可扩展性并解决基于概率的方案所面临的冲突。然而，仍有一些挑战需要解决的背景下，在原位keyestablishment，我们提出了新的方法来解决这些挑战。系统地比较和对比了现有的主要密钥建立方案，并研究了传感器网络安全研究所带来的几何问题。所有的成果都将被注入我们的密钥套件，这是一个密钥机制库，将向公众开放，以促进相关研究。