Collaborative Research: KEYING SUITE -- A Library of Key Establishment Schemes for Sensor Networks

程秀珍，美国乔治华盛顿大学陈德昌，美国卫生科学统一服务大学杜丁zhu，美国德克萨斯大学达拉斯分校摘要：由于无线通信的广播性质和恶劣环境下无人值守的操作，传感器网络容易受到各种攻击。现有的基于pki的密钥管理方案（如RSA）由于计算量大、内存需求大、传感器节点约束和网络约束之间的冲突而受到不利影响。另一方面，对称密钥加密因其高效性而被广泛应用于传感器网络。因此，为通信各方建立共享密钥成为传感器网络安全研究的核心问题。在过去的几年中，研究人员提出了许多基于概率的方法，这些方法依赖于预加载键控信息到每个传感器，以便在部署后启动成对键。然而，所有基于概率的方案的不确定性导致了诸如网络规模的低可扩展性以及密钥共享概率与抗节点捕获攻击的弹性之间不可避免的冲突等问题。本课题旨在为大规模传感器网络设计真正的原位密钥设置方案。我们的算法不需要将密钥信息预加载到常规的工作传感器中。少量传感器作为服务提供者，方便工作传感器之间的关键建立。这是一种完全不同的方法。初步研究表明，该算法具有低通信开销和零部署知识的特点，可以实现高可扩展性，解决了基于概率的方案所面临的冲突。然而，在原位密钥建立的背景下，仍然存在一些挑战需要解决，我们提出了解决这些挑战的新方法。我们还打算系统地比较和对比现有的主要密钥建立方案，并研究传感器网络安全研究所带来的几何问题。所有的研究结果将被输入到我们的键控机制库keyying SUITE中，该库将向公众开放，以促进相关研究。

Collaborative Research: KEYING SUITE - A Library of Key Establishment Schemes for Sensor Networks Xiuzhen Cheng, The George Washington University Dechang Chen, Uniformed Services University of the Health Sciences Ding-Zhu Du: University of Texas as DallasAbstract:Sensor networks are vulnerable to a variety of attacks because of the broadcast nature of wireless communications and the unattended operation in harsh environments. The well-established PKI-based key management schemes such as RSA are unfavorable due to the conflict between the extensive computation and large memory requirements, and the sensor node constraints and networking constraints. Symmetric key cryptography, on the other hand, is attractive and applicable to sensor networks due to its efficiency. Therefore establishing shared keys for communicating parties becomes a central problem for sensor network security research. Within the past few years, researchers proposed a number of probabilistic-based approaches relying on preloading keying information to each sensor for bootstrapping pairwise keys after deployment. However, the nondeterministic nature of all probabilistic-based schemes causes problems such as low scalability in network size and the unavoidable conflict between key-sharing probability and resilience against node capture attacks.This project intends to design truly in-situ key establishment schemes for large-scale sensor networks. Our algorithms require no keying information to be preloaded into regular worker sensors. A small number of sensors serve as service providers to facilitate the key establishment among worker sensors. This is a fundamentally different approach. Our preliminary research indicates that with low communication overhead and zero deployment knowledge our in-situ key establishment can achieve high scalability and resolve the conflict faced by probabilistic-based schemes. However, there are challenges that still need to be addressed in the context of in-situ key establishment, and we propose novel approaches to address these challenges. We also intend to systematically compare and contrast major existent key establishment schemes, and to study the geometric problems recasted by the sensor network security research. All outcomes will be infused into our KEYING SUITE, a library of keying mechanisms that will be open to the public to facilitate relevant research.