【作者】 胡佳；

【导师】 白恩健；

【作者基本信息】 东华大学 ， 通信与信息系统， 2011， 硕士

【摘要】 无线传感器网络以其低成本、多功能及特殊的应用环境,自问世以来,受到了各领域的广泛关注。它的出现和发展,不仅影响了现代科学技术,同时改变了人们的生活和观念。随着无线传感器网络各项技术和应用条件的日趋成熟,其安全问题也越来越受到人们的重视,而密钥管理方案的研究便是其中一个重要的方面。由于传感器节点自身低功耗、低存储、低计算能力等的限制和网络应用的特殊环境,传统的密钥管理方案无法直接运用到无线传感器网络中。因此,设计出能够满足无线传感器网络各种需求的密钥管理方案,对其进一步的发展有着极为重要而深远的意义。本文首先介绍了无线传感器网络目前所面临的安全问题及需求,总结了现有的典型无线传感器网络的密钥管理方案,并将这些方案的优缺点及性能进行了讨论分析。然后,根据这些方案的不足,针对无线传感器网络的特性和安全需求,本文提出了一种新的基于分簇的动态密钥管理方案——KMSS方案。该方案结合了分簇网络结构和动态密钥管理的特点,将网络分成若干簇并提供密钥定期更新机制,减小节点各部分的能量消耗,延长网络寿命,同时满足了无线传感器网络的可扩展性。另一方面,本文将网络中的通信密钥分成簇内会话密钥和主密钥两种。普通节点之间的会话密钥通过预置的单向函数来生成,加强了节点的抗俘获性,而簇头节点与基站之间的主密钥则利用门限秘密共享机制,将主密钥分成n个子密钥分发给各个簇头,单个簇头节点的失效只能泄露其子密钥,提高了网络的安全性。最后,经过分析与比较,该方案能够有效地降低节点的计算、存储开销和网络的通信开销,增强抗俘获性,能够抵御外部的各种攻击,也很好地满足了网络的可扩展性要求。最后,在KMSS方案原有的模型上,提出了一种基于椭圆曲线密码体制的密钥管理方案·——KMSE方案,并针对其各方面性能进行了分析。更多还原

【Abstract】 The technology of wireless sensor networks (WSNs for short) has attracted more and more interests from all over the world because its low cost, multi-function and extensive potential applications. The development of WSN has changed peoples’ way of life and conceptions. Since wireless sensor networks are often deployed in hostile environments in many applications, security becomes the critical issue in WSN. Due to the limitation of the sensor nodes, traditional key management schemes are not suitable for it and existing protocols cannot provide sufficient security in many cases and a feasible and efficient key management scheme is an important guarantee for security communication.This paper first introduces the security problems and requirements faced by WSN nowadays. It also reviews the exit key management schemes for wireless sensor networks, and then analyses and compares the features and merits and faults of these schemes. According to the characteristics and requirements of wireless sensor networks, we propose a novel key management scheme for hierarchical wireless sensor networks -MSS. In this scheme, we combine the clustering structure of WSN with dynamic key management schemes, dividing the whole network into several clusters and providing key update mechanism. In this way, it can reduce the conception of nodes and meet the requirements of dynamic. There are two kinds of keys to encrypt the data. One is the session key shared between sensor nodes, the other is the master key shared between cluster head nodes and the base station. In our scheme, the sensor nodes use the preloaded information to generate the session keys in order to increase the resistance of captured attack. On the other hand, we adopt the main idea of threshold secret sharing scheme to enhance the security of the master key. This scheme divides the master key into several sub keys and each cluster head only keep the sub key, and the compromise of the cluster head won’t release the message of the master key. Thus, it can provide strong security and resistance of captured attack. Compared to other key management schemes, our protocol has strong security and resistance of captured attack as well as low computational overhead and storage, and it also can meet the demands of the scalability. In the end, we propose a new key management scheme based ECC-KMSE, which is proposed on the base of KMSS and can provide high security and low conception.更多还原