CN102917313A - Method suitable for broadcast authentication of wireless sensor network - Google Patents

Abstract

The invention provides a wireless sensor network broadcast authentication method based on a Chinese remainder theorem, and aims to solve the problems of origin authentication and message integrity of a broadcast data package in a wireless sensor network. The wireless sensor network broadcast authentication method comprises the following steps that: a base station takes a unique solution of a congruence equation set of the Chinese remainder theorem as a 'signature' of a message to construct the broadcast data package and sends the broadcast data package; and a receiving party recovers a message authentication code (MAC) according to the 'signature' of in the broadcast data package, generates the message authentication code through the message and pair secret keys in the broadcast data package, and finishes the authentication operation on the broadcast data package by comparing whether the MACs are equal. According to the method suitable for the broadcast authentication of the wireless sensor network, a complex secret key management mechanism is unnecessary in the whole wireless sensor network, the instant authentication, the tolerance package losing and the like on an optional broadcast message can be realized, and according to the method, the capabilities of replay attack resistance, DOC (Disk Operating System) attack resistance, and node trapping resistance also can be realized.

Description

A method suitable for broadcast authentication of wireless sensor networks

technical field

The invention relates to a wireless sensor network, in particular to a broadcast authentication method of the wireless sensor network.

Background technique

With the rapid development of sensor technology and wireless network technology, wireless sensor network, as an emerging next-generation sensor network, has broad application prospects and is currently a very active field. Wireless sensor networks are obviously different from traditional network forms such as the Internet and mobile ad hoc networks in terms of the number of nodes, node composition, networking methods, and application fields. These characteristics mean that wireless sensor networks are widely used in military and civilian applications.

Wireless sensor network is a data-centric network and a new information acquisition platform. Wireless sensor network managers usually need to send commands such as control information, management information, and query information. In order to reduce communication overhead and network bandwidth, broadcasting is an effective communication method to solve problems. Due to the openness of the wireless link, on the one hand, malicious nodes will pretend to be legitimate nodes to send illegal broadcast data packets; In order to ensure the legitimacy of the broadcast source and the integrity of the message, the wireless sensor network needs the most basic broadcast authentication mechanism.

At present, the research on broadcast authentication of wireless sensor networks mainly focuses on the use of asymmetric key system and symmetric key system. 1. The method based on the asymmetric key system, the design method of broadcast authentication based on hierarchical security proposed by Wang Ruchuan et al., the application number is 200910184933.X, and the Chinese patent application date is 2009-10-21. The base station signs the information through the digital signature algorithm and sends it to the cluster head. The cluster head judges the level of security requirements through the threshold, and then selects whether the cluster head sends the broadcast data packet to the nodes in the cluster according to the security requirements. Digital signature or one-way hash chain to generate message authentication codes. Although the invention minimizes the overhead of the protocol, it still requires high computing, communication, and storage overheads when the base station sends broadcast packets to the cluster heads to adopt digital signatures, and it is currently difficult to apply to resource-constrained sensor networks. 2. A method based on a symmetric key system, a broadcast authentication method for resource-constrained wireless sensor networks proposed by Du Zhiqiang et al., the application number is 200910021834.X, and the application date is 2009-04-03. The invention uses one-way chain and Merkle tree to realize efficient μTESLA parameter distribution, and then uses μTESLA protocol for broadcast authentication. The invention is suitable for large-scale wireless sensor networks with multiple broadcast nodes, but there are problems such as delay in broadcast data packet authentication, vulnerability to DOS attacks, and the like.

In summary, although some existing methods have achieved some results in the realization of wireless sensor network broadcast authentication, they cannot fully meet their basic performance requirements, and there are too many calculation, communication and storage overheads, which easily lead to DOS attacks. Introduce delayed authentication, and the need for time synchronization of all nodes in the network in advance.

Contents of the invention

In view of the above problems, the present invention proposes a broadcast authentication method suitable for wireless sensor networks.

The technical solution of the present invention to solve the above technical problems is to use the deduction based on the Chinese remainder theorem and the unique solution of the congruence equations of the Chinese remainder theorem to realize the source authentication and message integrity authentication of the broadcast data packets. At the same time, it can meet important requirements such as immediate authentication of wireless broadcast data packets, random broadcast, tolerance of packet loss, and resistance to DOS attacks.

The technical solution of the present invention is realized as follows: a wireless sensor network broadcast authentication method based on the Chinese remainder theorem, comprising the following steps:

S1: Before networking, the base station performs system initialization configuration and sensor nodes pre-store initialization parameters;

S2: the base station generates a corresponding message authentication code MAC through the key pair of each node in the network, and constructs a congruence equation group;

S3: solving the equation group, the base station uses the unique solution of the congruence equation group as a "signature", and sequentially connects the broadcast message, the counter value and the signature to construct a broadcast data packet and send it;

；S4: After receiving the broadcast data packet, the receiver uses the key and the broadcast message m in the broadcast data packet and the value C _B of the counter to generate a message authentication code

;

S5: recover the message authentication code MAC by the "signature" in the broadcast packet;

S6: judging broadcast message authentication code Whether it is equal to the restored message authentication code MAC, if they are equal, the broadcast authentication is successful; otherwise, the authentication fails, and the broadcast data packet is discarded.

Further, the system initialization configuration of the base station includes _{three aspects: first, the base station generates k positive integers (n 1} ^, n ₂ ...n _k ), where c is the bit length of the message authentication code; second, the base station pre-stores the key pair with each sensor node; third, the base station is also configured with a monotonically increasing counter, and the value of the counter is denoted as C _B , and each time a broadcast packet is sent , the counter value C _B is increased by one.

Further, the receiving sensor node pre-stored initialization parameters is to pre-store n ₁ , n _{2 .} . . n _k in each node in a one-to-one correspondence. In addition, each node pre-configures a unique pair key K _Bi, corresponding to the base station, where i=1, 2...k.

Further, the base station generates a "signature" of the message, and uses the key pair between the base station and each receiving node to generate k message authentication codes, which are used as the remainder of each equation of the equation system, and the k two-twos pre-configured during the initialization of the base station Reciprocal positive integers are used as the modulus of the system of equations, and a system of congruence equations based on the Chinese remainder theorem is established, and the unique solution of the congruence group is obtained as the "signature" of the broadcast message. The congruence equation system of the Chinese remainder theorem is specifically :

N_iy_iM_imodN，其中，N=n₁n₂…n_k；N_i=N/n_i；N_iy_i≡1mod n_i, i=1,2…k。Among them, the message authentication code MAC _i is recorded as M _i (i=1,2...k); the only solution to solve the above equations is:

N _i y _i M _i modN, wherein, N=n ₁ n ₂ ...n _k ; N _i =N/n _i ; N _i y _i ≡1 mod n _i , i=1,2...k.

The receiver extracts the "signature" X in the received broadcast data packet, and recovers the message authentication code MAC _i by calculating MAC _i =X mod n _i from the "signature" and the pre-stored prime number n _i .

The present invention proposes a method suitable for broadcast authentication of wireless sensor networks. By using the method proposed by the present invention, the problem of broadcast authentication of wireless sensor networks can be solved, immediate authentication of broadcast data packets can be realized, packet loss is tolerated, and node capture is resistant and anti-replay attacks and other important broadcast authentication requirements. Immediate authentication eliminates the need for the sender and receiver to cache broadcast data packets before sending and verifying messages, thereby overcoming the delay in broadcast data packet authentication and effectively resisting DOS attacks.

Additional advantages, objects and features of the invention will be set forth in part in the description which follows, and will be apparent to those skilled in the art, or can be taught by practice of the invention. The objectives and other advantages of the invention may be realized and attained by the structure particularly pointed out in the written description and claims hereof as well as the appended drawings.

Description of drawings

Fig. 1 is the flowchart of wireless sensor network broadcast authentication of the present invention;

Fig. 2 is the flowchart of generating broadcast message signature;

Fig. 3 is a flow chart of receiving a node authentication broadcast message.

Detailed ways

Since the length of the broadcast message "signature" may increase with the increase of the number of recipients, the present invention is suitable for broadcast application scenarios that are not large in scale, require immediate authentication, have high security, and are not suitable for signatures using public-private key mechanisms. For example, it is used in small wireless sensor networks such as community security or smart home control. In the management and control of community security, the console broadcasts program initialization commands, management commands, alarm commands, etc., and the receiver can filter out illegal nodes. falsification and falsification of information. For a large-scale cluster topology sensor network, the present invention can be applied to the broadcast communication between the base station and the cluster head, and the cluster head node broadcasts to the nodes in the cluster. In this way, broadcast Authentication of packets.

The present invention will be described in detail below with reference to the drawings and embodiments. The present invention will be described in further detail below in conjunction with accompanying drawing:

FIG. 1 is a flow chart of wireless sensor network broadcast authentication in the present invention. In order to describe the design idea of the present invention more clearly and easily, the present invention can be implemented in three stages: system initialization, broadcast message signature, and broadcast message authentication. The various data and methods in this embodiment are only a special case of a clear implementation method. The application of this patent is not limited to the data, methods, etc. in the examples.

1) System initialization. For example, the number of base station nodes is k, and the length of the message authentication code is c.

1.1) The base station generates a message authentication code with a bit length c.

1.2) The base station generates k positive integers (n ₁ ,n ₂ ...n _k ) that are greater than 2 ^c -1 and mutually prime according to the total number of nodes k deployed in the wireless sensor network within the scope of the base station as the modulus of the Chinese remainder theorem .

1.3) Pre-store pairwise mutually prime positive integers (n ₁ , n ₂ ...n _k ) in corresponding nodes in the network in one-to-one correspondence. Each node is configured with a unique pair key K _Bi corresponding to the base station, where i=1, 2...k;

1.4) The base station is configured with a monotonically increasing counter, and the value of the counter is denoted as C _B , and each time a broadcast packet is sent, the counter value C _B is increased by one;

2) Broadcast message signature

Fig. 2 is the flowchart of base station generating broadcast message signature, and its specific steps are as follows:

2.1) The algorithm module in the base station uses the key K _Bi corresponding to each receiving node S _i to calculate the broadcast message authentication code MAC _i for the broadcast message m according to the formula MAC _i =H(m∥C _B , K _Bi ), thus obtaining k message authentication codes, where ‖ is a connector; i=1, 2...k; H(·) represents a Hash function, and C _B is the counter value generated by a monotonically increasing counter in the base station, providing strong freshness authentication for broadcast packets .

2.2) The base station constructs a congruence equation group, and takes k message authentication codes (MAC ₁ , MAC ₂ ...MAC _k ) as the remainder of each equation of the equation group, and the base station generates k pairwise mutually prime positive integers (n ₁ , n ₂ …n _k ) as the modulus of each equation of the system of equations. In order to facilitate the expression of congruence equations, the message authentication code MAC _i is denoted as M _i (i=1,2...k), and the following Chinese remainder theorem (CRT) congruence equations are established:

 N_iy_iM_imodN；其中，N=n₁n₂…n_k；N_i=N/n_i；N_iy_i≡1mod n_i, i=1,2…k。Find the unique solution to the above system of equations:

N _i y _i M _i modN; wherein, N=n ₁ n ₂ ...n _k ; N _i =N/n _i ; N _i y _i ≡1 mod n _i , i=1,2...k.

Computing the system of congruence equations leads to a unique solution X, which is called the "signature" of the broadcast message.

2.3) The base station sequentially connects the broadcast message m, the value C _B of the monotonically increasing counter, and the signature X to construct a broadcast packet denoted as <m‖C _B ,X>, and send the broadcast packet to all nodes in the network.

3) Receive node authentication broadcast message

Fig. 3 is a flow chart of authenticating the broadcast message after the sensor node receives the broadcast data packet.

3.1) The receiving node S _i first checks whether the counter value C _B in the received broadcast packet is greater than the counter value C′ _B in the broadcast packet received last time, if C _B ≤ C′ _B , discard the broadcast packet; if C _B >C′ _B , go to step 3.2) to continue authentication.

3.2) The receiving node S _i extracts the signature X in the broadcast data packet <m∥C _B ,X> according to the frame format, and restores and obtains the message authentication code MAC _i of the i-th receiving node according to the formula X mod n _i .

计算消息认证码，其中，‖为连接符，H(·)表示Hash函数。3.3) Then the receiving node S _i is based on the unique pair key K _Bi between itself and the base station, as well as the broadcast message m in the currently received broadcast packet and the counter value C _B , according to the formula

Calculate message authentication code , where, ‖ is a connector, and H(·) represents a Hash function.

是否相等，若

，则广播认证失败，丢弃广播数据包；若

，则广播认证成功，接收广播数据包。3.4) The receiving node S _i compares the message authentication code MAC _i with

are equal, if

, the broadcast authentication fails, and the broadcast data packet is discarded; if

, the broadcast authentication is successful, and the broadcast data packet is received.

In the present invention, the authentication of broadcast data packets is carried out independently without depending on other broadcast packets, and the loss of broadcast packets has no influence on the authentication of other broadcast packets, so the loss of messages can be tolerated. Since the broadcaster (base station) uses its unique pair key with each receiver to calculate the broadcast message authentication code, only the broadcaster can calculate the correct signature. And each node can only use its key pair with the broadcaster to authenticate the received signature. The respective pair keys are only known by the broadcaster and the corresponding node. Therefore, if the receiving node is captured, it will not help the attacker to generate a legitimate broadcast packet, and will not affect the communication between the broadcaster and other nodes and the communication between the broadcaster and other nodes. certified.

Claims (3)

1. wireless sensor network broadcast authentication method based on Chinese remainder theorem is characterized in that: may further comprise the steps:

The base station is according to wireless sensor node sum k in this base station scope, and pre-configured k greater than 2 ^c-1 and coprime positive integer (n in twos ₁, n ₂N _k), every the broadcast packet in base station, Counter Value C _BAdd one;

With coprime in twos positive integer (n ₁, n ₂N _k) respectively one by one corresponding pre-stored in the net in the respective nodes.Unique to key K corresponding with the base station of each node configuration _Bi, i=1 wherein, 2 ... k;

The base station is according to key K _BiBe that broadcast is calculated k message authentication code by the message authentication code generating algorithm;

The base station is with k message authentication code (MAC ₁, MAC ₂MAC _k) as the remainder of each equation of Chinese remainder theorem congruence equations, with positive integer (n ₁, n ₂N _k) as the mould of each equation of congruence equations, make up congruence equations; Calculate congruence equations and draw unique solution X, with " signature " of X as broadcast, and then structure broadcast packet＜m ‖ C _B, X 〉, and with broadcast packet send to the net in all nodes;

Receiving node S _iReceive broadcast packet＜m ‖ C _B, X〉after, the signature X in the broadcast packet extracted, according to formula MAC _i=X mod n _iObtain receiving node S _iBroadcast authentication code MAC _i, receiving node S _iAccording to the message m sum counter value C that receives in the broadcast packet _BAnd with the base station share unique to key K _Bi, by the message authentication code calculation

Calculate message authentication code Compare MAC _iWith

Whether equate, if , then broadcast authentication failure abandons broadcast data packet; If

, then broadcast authentication success receives broadcast data packet.

2. wireless sensor network broadcast authentication method according to claim 1 is characterized in that: described base station is specially by the Chinese remainder theorem congruence equations that message authentication code and coprime positive integer make up:

Wherein, M _i(i=1,2 ... k) be message authentication code MAC _iThe unique solution of finding the solution above-mentioned equation group is: N _iy _iM _iModN, wherein, N=n ₁n ₂N _kN _i=N/n _iN _iy _i≡ 1mod n _i, i=1,2 ... k.

3. wireless sensor network broadcast authentication method according to claim 1 is characterized in that: recipient S _iAfter receiving broadcast packet, according to the value C of current counter _BWith the front value C ' that once receives the broadcast packet Counter _BRelatively, if C ' _B≤ C _B, abandon this broadcast packet.

Images