一种适用于异构Ad Hoc无线传感器网络的身份认证与密钥共识协议

doi:10.3969/j.issn.1671-1122.2018.01.004

信息网络安全 ›› 2018, Vol. 18 ›› Issue (1): 23-30.doi: 10.3969/j.issn.1671-1122.2018.01.004

一种适用于异构Ad Hoc无线传感器网络的身份认证与密钥共识协议

亢保元, 王佳强(), 邵栋阳, 李春青

天津工业大学计算机科学与软件学院,天津 300387

收稿日期:2017-11-18 出版日期:2018-01-20 发布日期:2020-05-11
作者简介:
作者简介：亢保元（1965—）,男,陕西,教授,博士,主要研究方向为密码学、信息安全、数字签名、身份认证与密钥共识等;王佳强（1991—）,男,山西,硕士研究生,主要研究方向为密码学、信息安全、身份认证与密钥共识;邵栋阳（1991—）,男,河南,硕士研究生,主要研究方向为密码学、信息安全、电子货币;李春青（1962—）,男,天津,教授,博士,主要研究方向为MBR计算机模拟仿真、大数据、云计算。
基金资助:
国家自然科学基金[51378350];天津市应用基础与前沿技术研究计划[15JCYBJC15900]

A Secure Authentication and Key Agreement Protocol for Heterogeneous Ad Hoc Wireless Sensor Networks

Baoyuan KANG, Jiaqiang WANG(), Dongyang SHAO, Chunqing LI

School of Computer Science and Software Engineering, Tianjin Polytechnic University, Tianjin 300387, China

Received:2017-11-18 Online:2018-01-20 Published:2020-05-11

摘要/Abstract

摘要：

随着无线传感器网络的应用越来越广泛,保证通信实体间传输数据的安全变得尤为重要,在对传输数据加密之前,如何达成会话密钥成为了一个紧要问题,需要AKA协议进行保障。文章通过对TAI等人提出的AKA协议进行分析后,发现该协议存在一些问题,用户和传感器节点达成共享密钥后,并不能确定对方身份的真实性,因此,容易受到假冒攻击。文章指出了TAI等人的AKA协议的安全缺陷后,给出了一个改进的AKA协议。新协议对原方案中传感器节点身份信息的提供方式进行改进,将传感器节点提供身份信息改为用户提供身份信息,传感器节点可以通过计算得到用户的身份信息,从而验证通信双方的真实性,有效地避免了假冒攻击,提高了协议的安全性。

关键词: 无线传感器网络, 身份认证, 密钥共识, 信息安全

Abstract:

With the use of wireless sensor networks becomes more and more wildly, it is very important to ensure the safety of data transmission between communication parties. So how to reach a session key has become a critical issue before encrypting the transmission data. And AKA protocol is used to solve this problem. After analysing TAI et al’s AKA protocol, we find that their protocol suffers from such a security flaw. When a user and a sensor node reach the session key, they cannot confirm identity of each other. So their AKA protocol cannot withstand impersonation attack. This paper shows the found security flaws and propose an improvement by changing the method of sensor node identity provides. And the sensor node can also get the user’s identity. So the authenticity of the communication parties will be verified. The proposed protocol can resist the impersonation attack effectively and the security is improved.

Key words: wireless sensor networks, identity authentication, key agreement, information security

中图分类号:

TP309.1

亢保元, 王佳强, 邵栋阳, 李春青. 一种适用于异构Ad Hoc无线传感器网络的身份认证与密钥共识协议[J]. 信息网络安全, 2018, 18(1): 23-30.

Baoyuan KANG, Jiaqiang WANG, Dongyang SHAO, Chunqing LI. A Secure Authentication and Key Agreement Protocol for Heterogeneous Ad Hoc Wireless Sensor Networks[J]. Netinfo Security, 2018, 18(1): 23-30.

图/表 1

参考文献 15

[1]	TAI Weiliang, CHANG Yafen, LI Weihan.An IoT Notion-based Authentication and Key Agreement Scheme Ensuring User Anonymity for Heterogeneous Ad Hoc Wireless Sensor Networks[J]. Journal of Information Security and Applications, 2017, 34(2): 133-141.
[2]	TURKANOVIĆ M, BRUMEN B, HÖLBL M. A Novel User Authentication and Key Agreement Scheme for Heterogeneous Ad Hoc Wireless Sensor Networks, Based on the Internet of Things Notion[J]. Ad Hoc Networks, 2014, 20(2): 96-112.
[3]	HE Debiao, KUMAR N, CHILAMKURTI N.A Secure Temporal-credential-based Mutual Authentication and Key Agreement Scheme with Pseudo Identity for Wireless Sensor Networks[C]//IEEE. 2013 International Symposium on Wireless and Pervasive Computing, November 20-22, 2013, Taipei, Taiwan, China. New Jersey: IEEE, 2014: 263-277.
[4]	XUE Kaiping, MA Changsha, HONG Peilin, et al.A Temporal-credential-based Mutual Authentication and Key Agreement Scheme for Wireless Sensor Networks[J]. Journal of Network & Computer Applications, 2013, 36(1): 316-323.
[5]	WU Fan, XU Lili, KUMARI S, et al.An Efficient Authentication and Key Agreement Scheme for Multi-gateway Wireless Sensor Networks in IoT Deployment[J]. Journal of Network and Computer Applications, 2017, 89(C): 72-85.
[6]	FARASHA M S, TURKANOVIĆ M, KUMARI S, et al.An Efficient User Authentication and Key Agreement Scheme for Heterogeneous Wireless Sensor Network Tailored for the Internet of Things Environment[J]. Ad Hoc Networks, 2016, 36(P1): 152-176.
[7]	KUMARI S, LI Xiong, WU Fan, et al. Design of a Provably Secure Biometrics-based Multi-cloud-server Authentication Scheme[EB/OL]. .
[8]	AMIN R, BISWAS G P. A Secure Light Weight Scheme for User Authentication and Key Agreement in Multi-gateway Based Wireless Sensor Networks[EB/OL]. , 2017-10-24.
[9]	陈宇,王晋东. 无线传感网身份认证协议研究[J]. 信息网络安全,2011(12):46-47.
[10]	LI Xiong, IBRAHIM M H, KUMARI S, et al. Anonymous Mutual Authentication and Key Agreement Scheme for Wearable Sensor in Wireless Body Area Networks[EB/OL]. , 2017-10-24.
[11]	CHOO K K R, NAM J, WON D. A Mechanical Approach to Derive Identity-based Protocols from Diffie-Hellman-based Protocols[EB/OL]. , 2017-10-24.
[12]	王博识. 物联网安全架构初探[J]. 信息网络安全,2016(S1):137-140.
[13]	SIMPLICIO M, SILVA M V M, ALVES R, et al. Lightweight and Escrow-less Authenticated Key Agreement for the Internet of Things[EB/OL]. , 2017-10-24.
[14]	SIMPLICIO M A, OLIVEIRA B T D, MARGI C B, et al. Survey and Comparison of Message Authentication Solutions on Wireless Sensor Networks[J]. Ad Hoc Networks, 2013, 11(3): 1221-1236.
[15]	钟敦昊,张冬梅,张玉. 一种基于相似度计算的无线传感器网络入侵检测方法[J]. 信息网络安全,2016(2):22-27.

一种适用于异构Ad Hoc无线传感器网络的身份认证与密钥共识协议

A Secure Authentication and Key Agreement Protocol for Heterogeneous Ad Hoc Wireless Sensor Networks

RichHTML

PDF (PC)

可视化

摘要/Abstract

引用本文

使用本文

图/表 1

参考文献 15

相关文章 15

编辑推荐

Metrics

本文评价

[1]	江金芳, 韩光洁. 无线传感器网络中信任管理机制研究综述[J]. 信息网络安全, 2020, 20(4): 12-20.
[2]	刘晓芬, 陈晓峰, 连桂仁, 林崧. 基于d级单粒子的可认证多方量子秘密共享协议[J]. 信息网络安全, 2020, 20(3): 51-55.
[3]	张富友, 王琼霄, 宋利. 基于生物特征识别的统一身份认证系统研究[J]. 信息网络安全, 2019, 19(9): 86-90.
[4]	周艺华, 吕竹青, 杨宇光, 侍伟敏. 基于区块链技术的数据存证管理系统[J]. 信息网络安全, 2019, 19(8): 8-14.
[5]	张顺, 陈张凯, 梁风雨, 石润华. 基于Bell态的量子双向身份认证协议[J]. 信息网络安全, 2019, 19(11): 43-48.
[6]	黎琳, 张旭霞. zk-snark的双线性对的国密化方案[J]. 信息网络安全, 2019, 19(10): 10-15.
[7]	张敏, 许春香, 黄闽英. 远程医疗环境下面向多服务器的轻量级多因子身份认证协议研究[J]. 信息网络安全, 2019, 19(10): 42-49.
[8]	胡卫, 吴邱涵, 刘胜利, 付伟. 基于国密算法和区块链的移动端安全eID及认证协议设计[J]. 信息网络安全, 2018, 18(7): 7-9.
[9]	李月, 姜玮, 季佳华, 段德忠. 一种基于虚拟化平台的安全外包技术研究[J]. 信息网络安全, 2018, 18(5): 82-88.
[10]	李月, 姜玮, 季佳华, 段德忠. 一种基于虚拟化平台的安全外包技术研究[J]. 信息网络安全, 2018, 0(5): 82-88.
[11]	游林, 梁家豪. 基于同态加密与生物特征的安全身份认证研究[J]. 信息网络安全, 2018, 0(4): 1-8.
[12]	魏占祯, 王守融, 李兆斌, 李伟隆. 基于OpenFlow的SDN终端接入控制研究[J]. 信息网络安全, 2018, 0(4): 23-31.
[13]	陈妍, 戈建勇, 赖静, 陆臻. 云上信息系统安全体系研究[J]. 信息网络安全, 2018, 0(4): 79-86.
[14]	吕从东, 韩臻. 基于IP模型的云计算安全模型[J]. 信息网络安全, 2018, 18(11): 27-32.
[15]	陈付龙, 张紫阳, 王涛春, 谢冬. 一种基于联络信号的物联网安全身份认证方法[J]. 信息网络安全, 2018, 18(11): 40-48.