Collaborative Research: KEYING SUITE - A Protocol Library for Key Establishment in Sensor Networks

合作研究：KEYING SUITE - 用于传感器网络中密钥建立的协议库

• 批准号: 0627233
• 负责人: Weili Wu
• 金额: $ 19万
• 依托单位: University of Texas at Dallas
• 依托单位国家: 美国
• 项目类别: Standard Grant
• 财政年份: 2007
• 资助国家: 美国
• 起止时间: 2007-02-01 至 2012-01-31
• 项目状态: 已结题
• 来源: https://www.nsf.gov/awardsearch/showAward?AWD_ID=0627233&HistoricalAwards=false
• 关键词: Collaborative; Research; KEYING; SUITE; Protocol

Sensor networks are vulnerable to a variety of attacks because of the broadcast nature of wireless communications and the unattended operation in harsh environments. The well-established PKI-based key management schemes such as RSA are unfavorable due to the conflict between the extensive computation and large memory requirements, and the sensor node constraints and networking constraints. Symmetric key cryptography, on the other hand, is attractive and applicable to sensor networks due to its efficiency. Therefore establishing shared keys for communicating parties becomes a central problem for sensor network security research. Within the past few years, researchers proposed a number of probabilistic-based approaches relying on preloading keying information to each sensor for bootstrapping pairwise keys after deployment. However, the nondeterministic nature of all probabilistic-based schemes causes problems such as low scalability in network size and the unavoidable conflict between key-sharing probability and resilience against node capture attacks. This project intends to design truly in-situ key establishment schemes for large-scale sensor networks. Our algorithms require no keying information to be preloaded into regular worker sensors. A small number of sensors serve as service providers to facilitate the key establishment among worker sensors. This is a fundamentally different approach. Our preliminary research indicates that with low communication overhead and zero deployment knowledge our in-situ key establishment can achieve high scalability and resolve the conflict faced by probabilistic-based schemes. However, there are challenges that still need to be addressed in the context of in-situ keyestablishment, and we propose novel approaches to address these challenges. We also intend to systematically compare and contrast major existent key establishment schemes, and to study the geometric problems recasted by the sensor network security research. All outcomes will be infused into our KEYING SUITE, a library of keying mechanisms that will be open to the public to facilitate relevant research.

传感器网络很容易受到各种攻击，因为无线通信的广播本质和在恶劣环境中无人看管的操作。由于广泛的计算和较大的内存需求以及传感器节点约束和网络约束，基于PKI的关键管理方案（例如RSA）是不利的。另一方面，由于其效率，对称密钥密码学具有吸引力，并且适用于传感器网络。因此，建立共享的键来通信各方成为传感器网络安全研究的核心问题。在过去的几年中，研究人员提出了许多基于概率的方法，这些方法依靠在部署后向每个传感器预加载键入信息以进行引导成对键。但是，所有基于概率的方案的非确定性性质都会引起诸如网络大小的可扩展性低以及与节点捕获攻击的键共享概率和弹性之间的不可避免的冲突。 该项目旨在为大规模传感器网络设计真正的原位关键建立计划。我们的算法不需要将键入信息预加载到常规的工人传感器中。少数传感器是服务提供商，以促进工人传感器之间的主要建立。这是一种根本不同的方法。我们的初步研究表明，使用低沟通开销和零部署知识，我们的原位主要建立可以实现高可扩展性并解决基于概率的计划所面临的冲突。但是，在原地的基础上仍然需要解决一些挑战，我们提出了解决这些挑战的新方法。我们还打算系统地比较和对比主要存在的关键建立计划，并研究传感器网络安全研究所述的几何问题。所有结果都将被注入我们的钥匙套件，这是一个钥匙机制的库，将向公众开放，以促进相关研究。