CT-ISG: Broadcast/Multicast Security in Multi-User Wireless Sensor Networks

无线传感器网络在过去几年中受到了极大的关注，并被设想为未来普适计算环境的关键使能技术。为了成功实现这一愿景，除了少量（固定）汇聚节点外，允许大量（移动）用户安全有效地访问无线传感器网络的机制是必不可少的。该项目旨在开发安全机制，以保护多用户无线传感器网络中的广播/组播通信，因为当用户试图访问无线传感器网络时，广播/组播是最重要的通信类型，无论是检索所需信息还是请求某些传感器/执行器节点采取的某些操作。更具体地说，这个项目主要关注两个主要的安全任务：广播/组播身份验证和加密。第一项任务是多用户广播身份验证，旨在提供有效、高效、可扩展和安全的广播身份验证机制，支持大量移动用户在网络中的任何地点随时向无线传感器网络广播。高效的加密工具将与公钥操作相结合，最大限度地减少整体计算和通信开销，为各种应用场景提供更高的安全强度。第二部分是基于语义的动态组播加密，旨在提供一种更有效的解决方案来处理组成员动态。该思想基于一种新颖的基于语义的基本组概念，并结合节能的地理组播路由技术，设计出高效的组播加密方案。

Project AbstractWireless sensor networks have received tremendous attention in the past few years and have been envisioned as the key enabling technology for the future ubiquitous computing environment. To successfully realize such a vision, mechanisms that allow a large number of (mobile) users, in addition to a small number of (fixed) sink nodes, to securely and efficiently access the wireless sensor networks are indispensable. This project is to develop security mechanisms to secure broadcast/multicast communications in a multi-user wireless sensor networks since broadcast/multicast is the most important communication type when a user attempts to access a wireless sensor network, either to retrieve desired information or to request some actions taken by some sensor/actuator nodes. More specifically, this project is focused on two major security tasks: broadcast/multicast authentication and encryption. The first task is on multi-user broadcast authentication, which aims to provide effective, efficient, scalable, and secure broadcast authentication mechanisms that support a large number of mobile users to broadcast to a wireless sensor network anytime from anywhere in the network. Efficient cryptographic tools will be integrated with public key operations to minimize the overall computation and communication overhead and achieve higher security strength for various application scenarios. The second task is on semantics-based dynamic multicast encryption, which aims to provide a more efficient solution to handle the group membership dynamics. The idea is based on a novel semantics-based elementary group concept and efficient multicast encryption schemes that integrate energy-efficient geographical multicast routing techniques will be devised.