Collaborative Research: KEYING SUITE -- A Library of Key Establishment Schemes for Sensor Networks

协作研究：密钥套件-传感器网络密钥建立方案库郑秀珍，乔治华盛顿大学陈德昌，健康科学统一服务大学杜丁柱：德克萨斯大学达拉斯摘要：由于无线通信的广播性和在恶劣环境中的无人值守操作，传感器网络容易受到各种攻击。现有的基于PKI的密钥管理方案，如RSA，由于计算量大、存储需求大，以及传感器节点的约束和组网的约束之间的矛盾，并不是很理想。另一方面，对称密钥密码学由于其效率高而具有吸引力并适用于传感器网络。因此，为通信方建立共享密钥成为传感器网络安全研究的中心问题。在过去的几年中，研究人员提出了一些基于概率的方法，依赖于在部署后将密钥信息预加载到每个传感器来引导成对密钥。然而，所有基于概率的密钥建立方案都存在可扩展性差、密钥共享概率与抗节点捕获攻击能力之间不可避免的冲突等问题，本课题旨在为大规模传感器网络设计真正的就地密钥建立方案。我们的算法不需要将密钥信息预先加载到常规工人传感器中。少数传感器作为服务提供者，方便工人传感器之间的密钥建立。这是一种根本不同的方法。我们的初步研究表明，在低通信开销和零部署知识的情况下，我们的就地密钥建立能够实现高可伸缩性，并解决基于概率的方案所面临的冲突。然而，在就地建立密钥方面仍有一些挑战需要解决，我们提出了应对这些挑战的新办法。我们还打算对现有的主要密钥建立方案进行系统的比较和对比，并研究传感器网络安全研究中重塑的几何问题。所有结果都将被输入到我们的按键套件中，这是一个向公众开放的按键机制库，以促进相关研究。

Collaborative Research: KEYING SUITE - A Library of Key Establishment Schemes for Sensor Networks Xiuzhen Cheng, The George Washington University Dechang Chen, Uniformed Services University of the Health Sciences Ding-Zhu Du: University of Texas as DallasAbstract:Sensor networks are vulnerable to a variety of attacks because of the broadcast nature of wireless communications and the unattended operation in harsh environments. The well-established PKI-based key management schemes such as RSA are unfavorable due to the conflict between the extensive computation and large memory requirements, and the sensor node constraints and networking constraints. Symmetric key cryptography, on the other hand, is attractive and applicable to sensor networks due to its efficiency. Therefore establishing shared keys for communicating parties becomes a central problem for sensor network security research. Within the past few years, researchers proposed a number of probabilistic-based approaches relying on preloading keying information to each sensor for bootstrapping pairwise keys after deployment. However, the nondeterministic nature of all probabilistic-based schemes causes problems such as low scalability in network size and the unavoidable conflict between key-sharing probability and resilience against node capture attacks.This project intends to design truly in-situ key establishment schemes for large-scale sensor networks. Our algorithms require no keying information to be preloaded into regular worker sensors. A small number of sensors serve as service providers to facilitate the key establishment among worker sensors. This is a fundamentally different approach. Our preliminary research indicates that with low communication overhead and zero deployment knowledge our in-situ key establishment can achieve high scalability and resolve the conflict faced by probabilistic-based schemes. However, there are challenges that still need to be addressed in the context of in-situ key establishment, and we propose novel approaches to address these challenges. We also intend to systematically compare and contrast major existent key establishment schemes, and to study the geometric problems recasted by the sensor network security research. All outcomes will be infused into our KEYING SUITE, a library of keying mechanisms that will be open to the public to facilitate relevant research.