WO2011116617A1

WO2011116617A1 - Combination network and method for accessing network of wireless sensor network terminal

Info

Publication number: WO2011116617A1
Application number: PCT/CN2010/080265
Authority: WO
Inventors: 马景旺
Original assignee: 中兴通讯股份有限公司
Priority date: 2010-03-23
Filing date: 2010-12-24
Publication date: 2011-09-29
Also published as: CN102202302A; CN102202302B

Abstract

A method for accessing network of a Wireless Sensor Network (WSN) terminal is provided in the present invention. The network includes a wireless sensor network and a telecommunication network. The wireless sensor network sets WSN terminals and gateways. The telecommunication network sets a wireless sensor network management platform. The method includes: the gateway authenticating the WSN terminal, if the authentication is successful, the gateway allowing the WSN terminal to access the wireless sensor network, and the WSN terminal accessing the wireless sensor network. A combination network also is provided in the present invention. The present invention ensures the safety of the wireless sensor network in the combination network.

Description

Method for joining network by combining network and wireless sensor network terminal

The invention relates to a network technology, in particular to a combined network and a wireless sensor network

(WSN, Wireless Sensor Network) A method by which a terminal joins a network. Background technique

As a product of the combination of computing, communication and sensor technologies, wireless sensor networks are a new information acquisition and processing technology. Due to recent improvements in microfabrication technology, communication technology, and battery technology, tiny sensor terminals have the ability to sense, wirelessly communicate and process information. Such sensor terminals can not only sense and detect the target of the environment and its changes, but also process the collected data and send the processed data to the data collection center by wireless transmission. These sensor terminals typically consist of a power supply, sensing components, an embedded processor, memory, communication components, and execution software. Among them, the power supply provides the sensor node with the energy necessary for normal operation. The sensing component is used to sense, acquire, and convert external information into digital signals. The embedded processor is responsible for coordinating the work of various parts of the node, such as performing necessary processing, saving, and controlling the operating mode of the sensing component and the power supply. The communication component is responsible for communicating with other sensors or observers. Execution software provides the necessary software support for sensor terminals, such as embedded operating systems, embedded database systems, and more. Detecting thermal, infrared, sonar, radar and seismic signals in the surrounding environment of the sensor terminal by means of a variety of sensing components built into the sensor terminal, thereby detecting temperature, humidity, noise, light intensity, pressure, soil composition , a lot of information such as the size, speed and direction of moving objects. Sensor terminals typically form a network in a self-organizing or pre-configured manner. In terms of communication methods, although various forms such as wired, wireless, infrared, and optical can be used, it is generally considered that short-range wireless low-power communication technology is most suitable for use of a sensor network, and is generally called a wireless sensor network. Head Previously used a wide range of wireless low-power communication technologies, including: IEEE ( Institute of Electrical and Electronics Engineers) 802.15.4 and Zigbee technology.

IEEE 802.15.4 is a low-speed wireless personal area network (WPAN) standard developed by IEEE. IEEE 802.15.4 specifies the physical layer and medium access control layer (MAC, Media Access Control) standards. The IEEE 802.15.4 compliant communication module features low cost, low power consumption, and small size.

The Zigbee Alliance is an organization dedicated to developing reliable, low-cost, low-power, wireless network connectivity monitoring and control products based on open global standards. The Zigbee standard physical layer and MAC layer use IEEE 802.15.4 technology, and the network layer, security management, application layer specifications, and interoperability are developed by the Zigbee Alliance. The Zigbee smart energy public applications profile and the Zigbee home automation public applications profile in the Zigbee standard are for business environment applications and home applications.

The WSN terminal's micro-processing capabilities and wireless communication capabilities make wireless sensor networks a promising application for military applications, biological and environmental monitoring, health applications, home applications, industrial control and monitoring.

Wireless sensor network combined with telecommunication network, such as second generation (2G, 2nd Generation) mobile communication, third generation (3G, 3rd Generation) mobile communication, xDSL (x Digital Subscriber line), FTTx (Fiber To The x, x is Home, building, node, premises), wireless access, satellite/microwave, etc., can make the wireless sensor network as an extension of the existing network, expand the ability of the communication network, and extend the communication object from person to the physical world. Development prospects. When combined with the existing telecommunication network, the wireless sensor network can effectively transmit the data perceived by the wireless sensor network to the data center. By sorting and analyzing the data, the way of acquiring data of the natural world can be greatly changed. At the same time, it is also possible to centrally manage wireless sensor networks, and to solve the problem that wireless sensor networks that are currently scattered everywhere are difficult to manage. question.

The combination of a wireless sensor network and a telecommunication network refers to connecting a wireless sensor network with a telecommunication network, and utilizing the telecommunication network to monitor, manage, and complete the service carrying and cooperation of the wireless sensor network and the services provided by the telecommunication network, and expand the telecom network. The services provided by wireless sensor networks. The combination of a wireless sensor network and a telecommunications network is generally a wireless sensor network connected to a telecommunications network platform through a gateway device.

The WSN terminal is a sensor node constituting the wireless sensor network, and is connected to the gateway through one or more hops. The WSN terminal is responsible for collecting and uploading data, as well as receiving and executing commands. The number of devices that make up a wireless sensor network is as few as a few hundreds, and devices can be networked in a star, tree, or mesh (MESH) manner, some of which have strong networking and Data forwarding capability.

After the combination of the wireless sensor network and the telecommunication network, it is necessary to consider the management and security issues of the WSN terminal. The security threats faced by wireless sensor networks and telecommunication networks include:

1. The attacker uses some devices to impersonate the WSN terminal to join the wireless sensor network, perform incorrect data reporting, and interfere with the normal operation of the sensing system.

2. The attacker uses some devices to listen to data transmitted in the wireless sensor network and modify the data to interfere with communication within the wireless sensor network.

3. The attacker picks up the attack means and continuously reports the data through the gateway, thereby increasing the traffic of the communication network and making the telecommunication network unable to work normally.

Therefore, when the wireless sensor network and the telecommunication network are combined, it is necessary to consider the management of the WSN terminal, thereby realizing the security of the wireless sensor network and the telecommunication network. Summary of the invention

In view of this, the main object of the present invention is to provide a method for joining a network and a WSN terminal to join a network, which can combine the wireless sensor network and the telecommunication network and ensure network security. In order to achieve the above object, the technical solution of the present invention is achieved as follows:

A method for a WSN terminal to join a network, the network comprising a wireless sensor network and a telecommunication network, wherein the wireless sensor network is provided with a WSN terminal and a gateway; and the telecommunication network is provided with a wireless sensor network management platform; :

The gateway performs identity authentication on the WSN terminal, and after the authentication is passed, the WSN terminal is allowed to join the wireless sensor network;

The WSN terminal joins the wireless sensor network.

Preferably, the WSN terminal joins the wireless sensor network, which is:

Transmitting, by the gateway, network configuration parameters of the requested wireless sensor network to the WSN terminal;

The WSN terminal joins the requested wireless sensor network with the network configuration parameters. Preferably, before the gateway performs identity authentication on the WSN terminal, the method further includes: after receiving the request of the WSN terminal to join the wireless sensor network, the gateway notifying the wireless sensor network management platform that a new WSN terminal joins And carrying the identification information of the WSN terminal;

The wireless sensor network management platform sends the WSN terminal authentication related information to the gateway.

Preferably, the WSN terminal is provided with an identity identification module, and the gateway identifies the WSN terminal by using the information in the identity identification module to perform identity authentication on the WSN terminal.

Preferably, the management platform or the service platform sets setting information of the wireless sensor network that the WSN terminal can join.

Preferably, before the gateway performs identity authentication on the WSN terminal, the method further includes: after receiving the request of the WSN terminal to join the wireless sensor network, the gateway notifying the wireless sensor network management platform that a new WSN terminal joins And carrying the identification information of the WSN terminal and the identifier information of the requested wireless sensor network; The wireless sensor network management platform obtains setting information of the wireless sensor network that the WSN terminal can join, and determines, according to the information, whether the WSN terminal is allowed to join the wireless sensor network that is requested to join, and authenticates the WSN terminal when allowed. Related information is sent to the gateway.

Preferably, before the gateway performs identity authentication on the WSN terminal, the method further includes: after receiving the request of the WSN terminal to join the wireless sensor network, the gateway notifying the wireless sensor network management platform that a new WSN terminal joins And carrying the identification information of the WSN terminal;

The wireless sensor network management platform obtains setting information of the wireless sensor network that the WSN terminal can join and sends the information to the gateway;

The gateway determines whether the WSN terminal is allowed to join the wireless sensor network that is requested to join, and obtains the WSN terminal authentication related information from the wireless sensor network management platform when allowed.

Preferably, the telecommunication network is provided with a WSN terminal information storage unit, configured to store information of the WSN terminal, including identifier information of the WSN terminal, authentication information used by the WSN terminal identity authentication, and a wireless sensor network that the WSN terminal can join. Setting information;

The wireless sensor network management platform obtains, from the WSN terminal information storage unit, setting information of the wireless sensor network that the WSN terminal can join, and WSN terminal authentication related information.

Preferably, the WSN terminal information storage unit is located in a wireless sensor network management platform, or in a service platform, or other network element entity in the telecommunication network.

A combined network, comprising a wireless sensor network WSN and a telecommunication network, wherein the wireless sensor network is provided with a WSN terminal and a gateway; wherein the telecommunication network is provided with a wireless sensor network management platform;

a gateway, configured to perform identity authentication on the WSN terminal, and after the authentication is passed, allow the WSN terminal to join the wireless sensor network; The WSN terminal joins the wireless sensor network.

Preferably, after the gateway performs identity authentication on the WSN terminal, the network configuration parameter of the requested wireless sensor network is sent to the WSN terminal;

The WSN terminal joins the corresponding wireless sensor network according to the network configuration parameter.

Preferably, after the gateway receives the request of the WSN terminal to join the wireless sensor network, the gateway notifies the wireless sensor network management platform that a new WSN terminal joins, and carries the identification information of the WSN terminal;

Preferably, after receiving the request of the WSN terminal to join the wireless sensor network, the gateway notifies the wireless sensor network management platform that a new WSN terminal joins, and carries the identifier information of the WSN terminal and the requested wireless sensor. Identification information of the network;

The wireless sensor network management platform obtains setting information of the wireless sensor network that the WSN terminal can join, and determines, according to the information, whether the WSN terminal is allowed to join the wireless sensor network that is requested to join, and when the WSN terminal is allowed, Authentication related information is sent to the gateway.

Preferably, after receiving the request of the WSN terminal to join the wireless sensor network, the gateway notifies the wireless sensor network management platform that a new WSN terminal joins, and carries the identifier information of the WSN terminal;

The wireless sensor network management platform obtains setting information of the wireless sensor network that the WSN terminal can join and sends the information to the gateway; The gateway determines whether the WSN terminal is allowed to join the wireless sensor network that is requested to join, and obtains the WSN terminal authentication related information from the wireless sensor network management platform when allowed.

In the present invention, by combining the wireless sensor network and the telecommunication network, the application function of the wireless sensor network is greatly expanded, and the wireless sensor network management platform for managing the network nodes in the wireless sensor network is set in the combined network and The wireless sensor network service client implements the authentication and joining of the WSN terminal, and does not cause the illegal WSN terminal to join the wireless sensor network, thereby ensuring network security. DRAWINGS

1 is a schematic diagram of a combined network structure of the present invention;

2 is a flowchart of a method for a WSN terminal to join a network according to the present invention;

3 is a flowchart of a method for a second WSN terminal to join a network according to the present invention;

4 is a flow chart of a method for a third WSN terminal to join a network according to the present invention. detailed description

The basic idea of the present invention is: By combining a wireless sensor network and a telecommunication network, the application function of the wireless sensor network is greatly expanded, and a wireless sensor network for managing network nodes in the wireless sensor network is set in the combined network. Management platform and wireless The sensor network service client implements the authentication and joining of the WSN terminal, and does not cause the illegal WSN terminal to join the wireless sensor network, thereby ensuring network security.

The present invention will be further described in detail below with reference to the accompanying drawings.

In the present invention, the wireless sensor network is a wireless network composed of a group of sensor node devices in a self-organizing manner, and the sensor node devices communicate by short-range wireless communication technology. Wireless sensor networks are typically deployed in areas ranging from a few meters to a few hundred meters, where sensor node devices are typically battery powered, with lower power consumption and cost. Near field communication technology generally uses Zigbee and IEEE 802.15.4 technology.

In the present invention, the combination of the wireless sensor network and the telecommunication network refers to connecting the wireless sensor network with the telecommunication network, and using the telecommunication network to monitor, manage, and complete the service bearer and cooperation implementation of the wireless sensor network and the services provided by the telecommunication network, and Extend the services provided by wireless sensor networks through telecommunications networks. The telecommunication network includes various communication networks such as mobile communication networks, xDSL, FTTx, and satellite communication.

In the present invention, the wireless sensor network is composed of a WSN terminal and a gateway device, and the WSN terminal and the gateway can be set up according to relevant technical standards of the wireless sensor network, and the short-range communication technology that can be used to form the wireless sensor network includes the Zigbee technology and the IEEE 802.15.4 standard. Wait. The wireless sensor network is connected to the telecommunications network through a gateway, and establishes communication with a wireless sensor network management platform in the telecommunications network.

1 is a schematic diagram of a network structure according to the present invention. As shown in FIG. 1, the bonding network of the present invention includes a wireless sensor network and a telecommunication network, and the wireless sensor network is provided with a WSN terminal and a gateway; Wireless sensor network management platform;

a gateway, configured to perform identity authentication on the WSN terminal, and after the authentication is passed, allow the WSN terminal to join the wireless sensor network;

The WSN terminal joins the wireless sensor network. After the gateway authenticates the WSN terminal, the network configuration parameter of the requested wireless sensor network is sent to the WSN terminal;

After the gateway receives the request of the WSN terminal to join the wireless sensor network, the gateway notifies the wireless sensor network management platform that a new WSN terminal joins, and carries the identifier information of the WSN terminal;

The WSN terminal is provided with an identity identification module, and the gateway identifies the WSN terminal by using the information in the identity identification module to perform identity authentication on the WSN terminal.

Setting information of the wireless sensor network that the WSN terminal can join is set in the management platform or the service platform.

After receiving the request of the WSN terminal to join the wireless sensor network, the gateway notifies the wireless sensor network management platform that a new WSN terminal joins, and carries the identifier information of the WSN terminal and the identifier of the requested wireless sensor network. Information

After receiving the request of the WSN terminal to join the wireless sensor network, the gateway notifies the wireless sensor network management platform that a new WSN terminal joins, and carries the identifier information of the WSN terminal;

Determining, by the gateway, whether the WSN terminal is allowed to join the wireless sensor requested to join And obtaining, by the wireless sensor network management platform, the WSN terminal authentication related information when allowed.

The WSN terminal information storage unit is configured to store the information of the WSN terminal, including the identifier information of the WSN terminal, the authentication information used by the WSN terminal identity authentication, and the setting information of the wireless sensor network that the WSN terminal can join. ;

The WSN terminal information storage unit is located in the wireless sensor network management platform, or in the service platform, or other network element entities in the telecommunication network.

The gateway determines an identity authentication random number for the WSN terminal, and sends the identity authentication random number to the WSN terminal;

The WSN terminal calculates an identity authentication key according to the identity authentication random number and a predetermined encryption algorithm, and sends the identity authentication key to the gateway;

When the gateway determines that the identity authentication key matches, the WSN terminal identity authentication passes, and when the identity does not match, the identity authentication fails.

The network configuration parameter includes: an authentication key and a gateway address of the WSN terminal to be joined to the wireless sensor network;

The WSN terminal joins the requested wireless sensor network by using the network configuration parameter, as follows:

Sending, by the WSN terminal, a join request to the gateway, where the join request includes the authentication key;

The gateway authenticates the WSN terminal according to the authentication key, and allows the gateway to join after the authentication is passed.

The authentication key includes a primary authentication key, a link key, and a network key. The wireless sensor network further includes a routing node disposed between the WSN terminal and the gateway. The WSN terminal sends a join request to the gateway through the routing node; wherein the primary authentication key is used by the gateway to join the WSN terminal for authentication; the link key is used by the WSN terminal and the route Join authentication between nodes, and join authentication between routing nodes.

The wireless sensor network management platform is further configured to periodically update the primary authentication key, the link key, and the network key, and notify the gateway, the WSN terminal, and the routing node correspondingly.

The above wireless sensor network can use Zigbee technology for networking, or use other communication technologies for networking.

In the present invention, in order to realize the connection between the wireless sensor network and the telecommunication network, the wireless sensor network accesses the telecommunication network through the gateway and is connected to the service platform, the wireless sensor network management platform and other network element entities in the telecommunication network via the telecommunication network. The WSN terminal is connected to the telecommunication network platform through a gateway device. The WSN terminal device is a sensor node constituting the wireless sensor network, and is connected to the gateway by one or more hops. The WSN terminal device is responsible for collecting and uploading data, and receiving and executing commands. The devices that make up the WSN are as few as a few hundreds, and the devices can be networked in a star, tree, or MESH mode, some of which have strong networking and data forwarding capabilities. The WSN terminal is the end of the extended network. In the present invention, the gateway is responsible for connecting the wireless sensor network and the telecommunication network, and mainly performs functions such as protocol conversion, address mapping, and data forwarding, and can also integrate functions such as security and charging. The functions that the gateway can support include: Support for data collaboration and aggregation within the sensor network;

One or more types of long-distance communication access methods such as 2G mobile communication, 3G mobile communication, xDSL, FTTx, broadband wireless access, satellite/microwave, etc., transmit aggregated data to the communication peer; support service platform and remote management Server authentication and user authentication for the WSN gateway; supporting parameters and software configuration of the WSN gateway by the service platform and the remote management server; supporting user authentication, service security, and device management security mechanisms.

The service platform is a functional entity that operates and manages the services combined with the wireless sensor network in the telecommunication network. It is responsible for integrating the services provided by each service provider and providing them to the end users, and managing the use of the services by the users. The service platform cooperates with other functional entities in the telecommunication network to complete the entire business process according to the needs of different services, such as AAA, Authentication Authorization and Accounting. The business platform may also be connected to a remote server to update the business directly.

The wireless sensor network management platform is an entity that implements management functions for the wireless sensor network and is composed of a remote management server. The remote management server implements basic management functions for the wireless sensor network over the telecommunications network.

In the present invention, the WSN terminal has an identity identification module that can be recognized by the WSN terminal authentication network element entity, and the identity identification module can identify the WSN terminal and authenticate the wireless sensor network device. The gateway of the wireless sensor network is responsible for authenticating the WSN terminal.

The identity module can include the identity of the device, the key used by the terminal authentication, and other information. The identity module may be written by the wireless sensor network device provider to the WSN terminal, and the information in the identity module is also saved by the network entity unit responsible for saving the WSN terminal identity module, which may be a wireless sensor network management. a platform or service platform, or other network element entity in the telecommunication network, such as in a mobile communication network Home Location Register (HLR) / Home Subscriber Server (HSS) server. The identity module is securely stored on the WSN terminal, and the encrypted storage mode is adopted. The confidential information such as the key cannot be read by the outside world or the identity identification module in the WSN terminal can be read only after the security authentication.

In the present invention, only the authenticated WSN terminal can join the wireless sensor network and become a node of the wireless sensor network. The gateway performs authentication on the WSN terminal. The identity module of the WSN terminal required for terminal authentication can be obtained by the gateway from the network element entity responsible for saving the WSN terminal identity module.

When the WSN terminal device joins the wireless sensor network, the WSN terminal is first authenticated by the gateway. After the authentication is passed, the WSN terminal can join the wireless sensor network; if the authentication fails, the WSN terminal cannot join the wireless sensor network.

When performing WSN terminal authentication, the WSN terminal establishes a connection with the gateway; the WSN terminal authentication uses the identity identification module of the WSN terminal.

When the WSN terminal authenticates with the gateway, the identity module of the wireless sensor network can be used to establish a secure connection between the WSN terminal and the gateway. After the WSN terminal passes the authentication, the network configuration parameters required for joining the wireless sensor network can be securely sent to the WSN terminal. The WSN terminal, the WSN terminal joins the wireless sensor network through the network configuration parameter. For WSN terminals that are not certified, they cannot join the wireless sensor network because they cannot obtain wireless sensor network configuration parameters. In the present invention, the network configuration parameter of the wireless sensor network is a network configuration parameter related to the wireless sensor network required for the WSN terminal to join the wireless sensor network, and may include but not limited to a gateway address, and a key required for verifying the WSN terminal. And other information. WSN terminals that do not have wireless sensor network configuration parameters cannot join the wireless sensor network.

In the present invention, after the WSN terminal passes the authentication, the network configuration parameters added to the wireless sensor network may be provided by the gateway and sent to the WSN terminal. The gateway can encrypt the network configuration parameters by using the key related to the secure connection between the gateway and the WSN terminal, and then encrypt the encrypted configuration parameters. The network configuration parameters are sent to the WSN terminal.

In the present invention, after the WSN terminal is authenticated, the wireless sensor network management platform can send the information of the WSN terminal to the service platform, and the service platform configures the relevant service parameters of the WSN terminal and enables the service performed by the WSN terminal.

In the present invention, when the WSN terminal leaves the wireless sensor network, the gateway notifies the wireless sensor network management platform, and the wireless sensor network management platform records the status of the WSN terminal and notifies the service platform, and the service platform stops the service performed by the WSN terminal.

In the present invention, the wireless sensor network management platform or the service platform can set a wireless sensor network that the WSN terminal can join, thereby realizing restrictions on the use area of the WSN terminal. When the WSN terminal applies to join the wireless sensor network, the wireless sensor network management platform or the service platform can determine whether the wireless sensor network that the WSN terminal is currently applying to join is a wireless sensor network that is allowed to join according to the setting information of the wireless sensor network that the WSN terminal can join. If the currently applied wireless sensor network is not a wireless sensor network that is allowed to join, the WSN terminal is denied to join the wireless sensor network. The wireless sensor network management platform or the service platform may set the WSN terminal to allow the wireless sensor network to be joined by the WSN terminal, and the setting information may be the network identifier of the wireless sensor network that the WSN terminal can join, and determine the WSN terminal by using the network identifier of the wireless sensor network. Join the wireless sensor network. In this way, the wireless sensor network management platform can set the area used by the WSN terminal to optimize the management of the WSN terminal.

In addition, when the limitation of the wireless sensor network that the WSN terminal can join is implemented in the present invention, the gateway may also determine whether the wireless sensor network to which the wireless sensor network applies to join is a wireless sensor network that is allowed to join. When the WSN terminal applies to join the wireless sensor network, the gateway obtains the setting information of the wireless sensor network that the WSN terminal can join from the wireless sensor network management platform or the service platform, and determines whether the wireless sensor network that the WSN terminal is currently applying to join is a wireless sensor network that is allowed to join. . If the wireless sensor network that is currently applying to join does not If the wireless sensor network is allowed to join, the WSN terminal is denied to join the wireless sensor network.

In the present invention, a method of constructing a wireless sensor network and managing a WSN terminal by Zigbee technology is described.

ZigBee is an emerging short-range, low-rate, low-cost, low-power wireless network technology. It uses Direct Sequence Spread Spectrum (DSSS) technology and operates at 868MHz, 915MHz or 2.4GHz, all without the need to apply for a license. The configuration of wireless personal area networks based on ZigBee technology is a new development of short-range wireless communication technology in recent years, and has been widely used in the field of industrial automation and smart home.

There are three types of nodes in the ZigBee network: ZigBee coordination points, ZigBee routing nodes, and

ZigBee endpoint.

1. ZigBee coordination point

The ZigBee coordination point is also called the Personal Area Network (PAN) coordination point (ZC, ZigBee Coordinator) in IEEE 802.15.4, and can be used as a sink node in wireless sensor networks. The ZigBee coordination point must be a Full Function Device (FFD). A ZigBee network has only one ZigBee coordination point, which is often more powerful than other nodes in the network. It is the master node of the entire network. It is responsible for initiating the establishment of new networks, setting network parameters, managing nodes in the network, and storing node information in the network. The network can also perform the functions of the router. The ZigBee coordination point is the most complex of the three types of ZigBee nodes, and is generally powered by AC power.

2. ZigBee routing node

The ZigBee Routing Node (ZR, ZigBee Router) must also be a fully functional device. The ZigBee routing node can participate in route discovery, message forwarding, and extend the coverage of the network by connecting other nodes. In addition, the ZigBee routing node can also act as a common coordination point (IEEE 802.15.4 is called coordination point) in its Personal Operating Space (POS). The normal coordination point is different from the ZigBee coordination point, which is still controlled by the ZigBee coordination point.

3. ZigBee terminal node

The ZigBee EndNode (ZE, ZigBee EndDevice) can be a full-featured device or a Reduced-Function Device (RFD), which connects to the network through ZigBee co-nodes or ZigBee routing nodes, but does not allow any other node to join through it. Network, ZigBee endpoints can operate at very low power.

In the present invention, the gateway acts as a Zigbee coordination point in the Zigbee network and is responsible for the establishment of the wireless sensor network. The WSN terminal can join the wireless sensor network as a Zigbee routing node or a Zigbee terminal node. Gateways and WSN terminals need to support Zigbee communication technology.

In addition, in order to realize the security of the Zigbee network, it is necessary to encrypt the communication in the wireless sensor network. The encryption operation in the Zigbee network uses the Advanced Encryption Standard (AES) algorithm, and the symmetric key length is 128 bits. . The keys used in the Zigbee network mainly include:

Master key: This key is a shared key used in the process of establishing a symmetric key establishment protocol. The master key is the basis for long-term security between the two devices and can be used to generate link keys.

Link key: In a PAN network, a key shared between two devices for secure communication between two devices.

Network key: This key is a shared key in a PAN network and is used for the security of broadcast communication.

In order to realize the security and key management of the Zigbee network, there is a trust center in the Zigbee network. A trust center is a trusted device that distributes security keys across the network. It allows devices to join the network and assign keys, thus ensuring end-to-end security between devices. In a network that uses security mechanisms, the network coordinator can become a trust center. The Trust Center provides three functions: (1) Trust Management. The task is responsible for verifying the device joining the network. (2) Network management. The task is to get and assign network keys to the device.

(3) Configuration management. The task is to bind the application to the device it manages, enabling end-to-end secure transfer between the two devices.

In order to implement trust management, the device needs to receive the trust center to receive the initial master key.

For network management purposes, the device should receive the initial network key and can only obtain updates to the network key from the Trust Center.

To implement network configuration, the device needs to receive a master key or link key from the trust center to establish an end-to-end secure link between the two devices.

In addition to the initial master key, the additional link key, master key, and network key can only be obtained from the trust center in a secure manner. The trust center should periodically update the network key according to a policy and pass the new network key to each device.

In the present invention, the gateway is used as a trust center for security management of the network. In the Zigbee network, after a WSN terminal is authenticated, the network configuration parameters for implementing secure communication are obtained from the gateway. The network configuration parameters may include a network address, an initial master key, and a network key, and the WSN terminal uses the network configuration parameter to join the wireless sensor. Network and secure communication.

In the present invention, the wireless sensor network management platform and other network element entities in the gateway and the telecommunication network can implement identity authentication and secure communication to the gateway through the identity of the gateway.

In the present invention, a certain wireless sensor network is identified by a network identifier of the wireless sensor network. After the gateway creates the wireless sensor network, the network identifier of the wireless sensor network may be determined by the gateway or by the wireless sensor network management platform, and the wireless sensor network management platform records related information including the network identifier of the wireless sensor network. The wireless sensor network management platform and other network element entities in the telecommunications network can obtain the network identity of the wireless sensor network when communicating with the gateway.

In the present invention, in order to implement the security authentication when the WSN terminal joins the wireless sensor network, the identity identification module of the terminal needs to be built in the WSN terminal. The identity module can include a terminal Network configuration parameters such as the identification number, the key used for authentication, the length of the key, and the algorithm used. The identity module of the terminal can be written to the WSN terminal by the WSN terminal manufacturer in a secure manner when the WSN terminal is produced. When the WSN terminal manufacturer delivers the WSN terminal, the information in the identity module of the WSN terminal is also passed through the security. The method is provided to the wireless sensor network management platform, and the information in the identity module of the WSN terminal is saved by the wireless sensor network management platform, and the information in the identity module can also be saved by other network element entities in the telecommunication network, for example, in a telecommunication network. HLR/HSS server. The gateway responsible for WSN terminal authentication can obtain the information in the identity module of the WSN terminal in a secure manner from the network element entity responsible for saving the identity module of the WSN terminal.

In the present invention, for the identification number in the identity module of the WSN terminal, the WSN terminal can be identified in a format similar to the International Mobile Equipment Identity (IMEI). Considering the limitation of the computing power of the WSN terminal, the key in the WSN terminal identity module can use the 128-bit AES symmetric key to appropriately reduce the computing power requirement of the WSN terminal. The terminal is authenticated by a key in the identity module and a secure communication between the WSN terminal and the gateway is established based on the key.

The following describes the process of joining a WSN terminal to a wireless sensor network in a wireless sensor network formed by Zigbee technology. In this example, the identity module of the WSN terminal is stored by the wireless sensor network management platform.

2 is a flowchart of a method for a WSN terminal to join a network according to the present invention. As shown in FIG. 2, the method for joining a WSN terminal to a network includes the following steps:

Step 201: The WSN terminal determines the wireless sensor network to join, and sends a request to join the wireless sensor network to the wireless sensor network.

The WSN terminal can perform network scanning on the set channel to determine the wireless sensor network to join. The network scan can send a Beacon Request frame on the channel. After the device in the wireless sensor network on this channel receives the Beacon Request, if A new WSN terminal joins the wireless sensor network and will respond to the Beacon frame. The Beacon frame contains the address information of the device that sent the frame and whether other devices are allowed to join as their child nodes. The WSN terminal saves the information of the received Beacon frame in its own neighbor table.

The WSN terminal selects the appropriate parent node in the association table and sends an Association Request frame request to the parent node to join the wireless sensor network. After receiving the request to join the wireless sensor network, the parent node device in the wireless sensor network notifies the gateway of the wireless sensor network that a new wireless sensor network device requests to join the wireless sensor network, and the gateway obtains the device information of the WSN terminal requesting to join the wireless sensor network. , including the identity of the wireless sensor network device.

Step 202: The gateway notifies the wireless sensor network management platform that a new WSN terminal requests to join the wireless sensor network, and sends the information of the WSN terminal to the wireless sensor network management platform, and the gateway obtains the identity identifier module of the WSN terminal from the wireless sensor network management platform.

Step 203: Perform identity verification between the gateway and the WSN terminal.

The gateway sends an authentication request to the WSN terminal, where the authentication request includes a random number. After receiving the authentication request, the WSN terminal may use the random number and the key in the terminal identity module to perform the operation, and the result is authenticated. The response is sent to the gateway; after receiving the authentication response, the gateway uses the key of the WSN terminal obtained from the wireless sensor network management platform and the same random number to perform the operation, and then compares the operation result with the operation result of the WSN terminal; If the result is the same, the WSN terminal passes the authentication, and the operation of step 204 is performed. If the operation result is different, the WSN terminal authentication fails, and the operation of step 205 is performed.

In this step, in addition to the gateway can authenticate the WSN terminal, the WSN terminal can also authenticate the gateway to confirm the authenticity of the identity of the gateway; the method of authenticating the gateway is similar to the method of authenticating the WSN terminal, and the WSN terminal can The gateway sends an authentication request, and the authentication request includes a random number; after receiving the authentication request, the gateway uses the WSN terminal that is mastered by itself. The key and the random number in the authentication request are operated, and then the operation result is sent to the WSN terminal through the authentication response message; the WSN terminal performs the operation using the key of the WSN terminal and the same random number, and performs the operation result with the gateway operation result. Comparison; if the two are the same, the authenticity of the gateway can be determined. Conversely, the gateway is not the correct gateway device.

Step 204: After the WSN terminal passes the authentication, the session key required for secure communication can be negotiated between the WSN terminal and the gateway. Then proceed to the operation in step 206.

Key negotiation can use existing symmetric key-based key establishment protocols. The key establishment protocol involves the following three steps: Exchanging temporary data, using the temporary data to generate a session key, and confirming that the key is correctly calculated.

Step 205: The WSN terminal fails to pass the authentication, and the gateway rejects the WSN terminal from joining the wireless sensor network.

Step 206: The gateway sends the network network configuration parameters required to join the wireless sensor network to the WSN terminal.

The network configuration parameters include the network address, network key, and master key of the WSN terminal in the wireless sensor network. In order to achieve secure transmission, the gateway can encrypt the network configuration parameters with the session key and then send it to the WSN terminal.

Step 207: The WSN terminal joins the wireless sensor network by using network configuration parameters.

After receiving the network configuration parameter, the WSN terminal negotiates with the gateway to determine the link key, and the gateway adds the information of the WSN terminal in the node management table, and the parent node device of the WSN terminal saves the WSN terminal in its neighbor table. Information, the WSN terminal saves the information of the parent node and the gateway in its own neighbor table. At this point, the WSN terminal successfully joins the wireless sensor network and becomes a node device in the wireless sensor network. It can enable the sensing function of the WSN terminal and report the sensing data to the wireless sensor network service platform through the gateway.

Step 208: The gateway notifies the wireless sensor network management platform that the WSN terminal has joined the wireless sensor network. The wireless sensor network management platform can record information about the WSN terminal, and send the information of the WSN terminal to the service platform, the service platform configuration and related data of the WSN terminal, and enable the service supported by the WSN terminal.

In the present invention, in order to realize the management of the wireless sensor network that the WSN terminal can join, the wireless sensor network management platform may pre-set one or some wireless sensor networks that the WSN terminal device can join, and the WSN terminal can only join these presets. Wireless sensor networks cannot join other wireless sensor networks. Each wireless sensor network has a unique network identifier after it is created. The wireless sensor network management platform can set a wireless sensor network that a WSN terminal is allowed to join through the network identifier. When the wireless sensor network that the WSN terminal can join is restricted, it may be determined by the wireless sensor network management platform or by the gateway whether the wireless sensor network to which the WSN terminal applies to join is an allowed wireless sensor network.

3 is a flowchart of a method for a second WSN terminal to join a network according to the present invention. As shown in FIG. 3, when a wireless sensor network management platform determines whether a WSN terminal is allowed to join a wireless sensor network, the WSN terminal joins the wireless sensor network. For:

Step 301: The WSN terminal determines a wireless sensor network to join, and sends a request to join the wireless sensor network to the wireless sensor network.

The WSN terminal can perform network scanning on the set channel to determine the wireless sensor network to join. The network scan can send a Beacon Request frame on the channel. After the device in the wireless sensor network on this channel receives the Beacon Request, if a new WSN terminal is allowed to join the wireless sensor network, the Beacon frame will be responded to. Contains the address information of the device that sent the frame, and whether other devices are allowed to join as their child nodes. The WSN terminal saves the information of the received Beacon frame in its own neighbor table.

The WSN terminal selects the appropriate parent node in the association table and sends an Association Request frame request to the parent node to join the wireless sensor network. In wireless sensor network After receiving the request to join the wireless sensor network, the parent node device notifies the gateway of the wireless sensor network that a new wireless sensor network device requests to join the wireless sensor network, and the gateway obtains device information of the WSN terminal requesting to join the wireless sensor network, including wireless. The identity of the sensor network device.

Step 302: The gateway notifies the wireless sensor network management platform that a new WSN terminal requests to join the wireless sensor network, and sends the information of the WSN terminal to the wireless sensor network management platform.

Step 303: The wireless sensor network management platform obtains the network identifier of the wireless sensor network that the WSN terminal is ready to join through the gateway, and compares with the wireless sensor network that the WSN terminal can join in the wireless sensor network management platform, and determines that the WSN terminal is ready to join. Whether the wireless sensor network is a wireless sensor network that is allowed to join. If it is a wireless sensor network that is allowed to join, the wireless sensor network management platform sends the information in the identity module of the WSN terminal required for WSN terminal identity authentication to the gateway, and continues to perform the operation of step 304; if it is not allowed to join the wireless sensor network Then, the operation in step 305 is performed.

Step 304: Perform identity verification between the gateway and the WSN terminal.

The gateway sends an authentication request to the WSN terminal, where the authentication request includes a random number. After receiving the authentication request, the WSN terminal may use the random number and the key in the terminal identity module to perform the operation, and the result is authenticated. The response is sent to the gateway; after receiving the authentication response, the gateway uses the key of the WSN terminal obtained from the wireless sensor network management platform and the same random number to perform the operation, and then compares the operation result with the operation result of the WSN terminal; If the result is the same, the WSN terminal passes the authentication, and the operation of step 306 is performed. If the operation result is different, the WSN terminal authentication fails, and the operation of step 307 is performed.

Step 305: The wireless sensor network that the WSN terminal applies for joining is a network that is not allowed to join. The wireless sensor network management platform notifies the gateway that the WSN terminal is not allowed to join the wireless sensor network, and the gateway rejects the WSN terminal to join the wireless sensor network.

Step 306: After the WSN terminal passes the authentication, the session key required for secure communication can be negotiated between the WSN terminal and the gateway. Then the operation in step 308 is performed.

Step 307: The WSN terminal fails to pass the authentication, and the gateway rejects the WSN terminal from joining the wireless sensor network.

Step 308: The gateway sends the network network configuration parameters required to join the wireless sensor network to the WSN terminal.

Step 309: The WSN terminal joins the wireless sensor network by using network configuration parameters.

After receiving the network configuration parameter, the WSN terminal negotiates with the gateway to determine the link key, and the gateway adds the information of the WSN terminal in the node management table, and the parent node device of the WSN terminal saves the WSN terminal in its neighbor table. Information, the WSN terminal saves the information of the parent node and the gateway in its own neighbor table. At this point, the WSN terminal successfully joins the wireless sensor network and becomes a node device in the wireless sensor network, which can enable the sensing function of the WSN terminal, and The sensor data is reported to the wireless sensor network service platform through the gateway.

Step 3010: The gateway notifies the wireless sensor network management platform that the WSN terminal has joined the wireless sensor network.

The wireless sensor network management platform can record the information about the WSN terminal, and send the information of the WSN terminal to the service platform, the service platform configuration and the related data of the WSN terminal, and enable the services supported by the WSN terminal.

4 is a flowchart of a method for a WSN terminal to join a network according to the present invention. As shown in FIG. 4, when the gateway determines whether the WSN terminal is allowed to join the wireless sensor network, the process of joining the WSN terminal to the wireless sensor network is:

Step 401: The WSN terminal determines the wireless sensor network to join, and sends a request to join the wireless sensor network to the wireless sensor network.

The WSN terminal can perform network scanning on the set channel to determine the wireless sensor network to join. The network scan can send a Beacon Request frame on the channel. After the device in the wireless sensor network on this channel receives the Beacon Request, if a new WSN terminal is allowed to join the wireless sensor network, the response will be sent. A Beacon frame containing the address information of the device that sent the frame and whether other devices are allowed to join in the manner of its child nodes. The WSN terminal saves the information of the received Beacon frame in its own neighbor table.

The WSN terminal selects an appropriate parent node in the association table, and sends an Association Request frame request to the parent node to join the wireless sensor network. After receiving the request to join the wireless sensor network, the parent node device in the wireless sensor network notifies the gateway of the wireless sensor network that a new wireless sensor network device requests to join the wireless sensor network, and the gateway obtains the device information of the WSN terminal requesting to join the wireless sensor network. , including the identity of the wireless sensor network device.

Step 402: The gateway notifies the wireless sensor network management platform that a new WSN terminal requests to join the wireless sensor network, and sends the information of the WSN terminal to the wireless sensor network management platform. The gateway obtains setting information of the wireless sensor network of the WSN terminal that is allowed to join from the wireless sensor network management platform.

Step 403: The gateway determines whether the wireless sensor network that the WSN terminal is ready to join is a wireless sensor network that is allowed to join. If it is a wireless sensor network that is allowed to join, the operation of step 404 is performed; if it is not allowed to join the wireless sensor network, the operation in step 405 is performed. The gateway may query the setting information of the wireless sensor network that the WSN terminal is allowed to join, determine whether the wireless sensor network that is allowed to join includes the wireless sensor network to which the WSN terminal applies to join; if included, the wireless sensor network that is allowed to join, On the contrary, it is not a network that is allowed to join.

Step 404: The gateway obtains information in the identity module of the WSN terminal from the wireless sensor network management platform, and performs identity verification between the gateway and the WSN terminal.

The gateway sends an authentication request to the WSN terminal, where the authentication request includes a random number. After receiving the authentication request, the WSN terminal may use the random number and the key in the terminal identity module to perform the operation, and the result is authenticated. The response is sent to the gateway; after receiving the authentication response, the gateway uses the key of the WSN terminal obtained from the wireless sensor network management platform and the same random number to perform the operation, and then compares the operation result with the operation result of the WSN terminal; If the result is the same, the WSN terminal passes the authentication, and the operation of step 405 is performed. If the operation result is different, the WSN terminal authentication fails, and the operation of step 407 is performed.

In this step, in addition to the gateway can authenticate the WSN terminal, the WSN terminal can also authenticate the gateway to confirm the authenticity of the identity of the gateway; the method of authenticating the gateway is similar to the method of authenticating the WSN terminal, and the WSN terminal can The gateway sends an authentication request, and the authentication request includes a random number. After receiving the authentication request, the gateway uses the key of the WSN terminal and the random number in the authentication request, and then sends the operation result to the authentication response message. WSN terminal; the WSN terminal uses the key of the WSN terminal and the same random number to perform the operation and compares the operation result with the result of the gateway operation; if the two are the same, it can be determined The authenticity of the gateway, otherwise, the gateway is not the correct gateway device.

Step 405: The wireless sensor network that the WSN terminal applies for joining is a network that is not allowed to join. The wireless sensor network management platform notifies the gateway that the WSN terminal is not allowed to join the wireless sensor network, and the gateway rejects the WSN terminal from joining the wireless sensor network.

Step 406: After the WSN terminal passes the authentication, the session key required for secure communication can be negotiated between the WSN terminal and the gateway. Then the operation in step 408 is performed.

Step 407: The WSN terminal fails to pass the authentication, and the gateway rejects the WSN terminal from joining the wireless sensor network.

Step 408: The gateway sends the network network configuration parameters required to join the wireless sensor network to the WSN terminal.

Step 409: The WSN terminal joins the wireless sensor network by using network configuration parameters.

Step 4010: The gateway notifies the wireless sensor network management platform that the WSN terminal has joined the wireless sensor network. The wireless sensor network management platform can record information about the WSN terminal, and send the information of the WSN terminal to the service platform, the service platform configuration and related data of the WSN terminal, and enable the service supported by the WSN terminal.

In the present invention, when the terminal joining the wireless sensor network leaves the wireless sensor network, the gateway needs to send a message to notify the wireless sensor network management platform, the wireless sensor network management platform records the state of the WSN terminal, and notifies the wireless sensor network service platform, and the service platform stops. Use the services associated with the WSN terminal. The WSN terminal can notify the gateway by leaving a Leave command frame, and the gateway performs the operation of the WSN terminal to leave the network, and notifies the wireless sensor network management platform.

Through the method provided by the invention, the WSN terminal can be authenticated by the gateway when the WSN terminal joins the wireless sensor network, and the WSN terminal that fails the authentication is prevented from joining the wireless sensor network. In addition, after the WSN terminal is authenticated, the network configuration parameters of the wireless sensor network can be sent to the WSN terminal in a secure manner, thereby avoiding leakage of the network configuration parameters of the wireless sensor network, thereby establishing a secure wireless sensor network. In addition, by the method provided by the present invention, a wireless sensor network that the WSN terminal can join can be set, so that the limitation of the area allowed for the WSN terminal can be realized.

The above is only the preferred embodiment of the present invention and is not intended to limit the scope of the present invention.

Claims

Claim

A method for a WSN terminal to join a network, the network comprising a wireless sensor network and a telecommunication network, wherein the wireless sensor network is provided with a WSN terminal and a gateway; and the telecommunication network is provided with a wireless sensor network management platform; The method includes:

The WSN terminal joins the wireless sensor network.

2. The method according to claim 1, wherein the WSN terminal joins the wireless sensor network, specifically:

The WSN terminal joins the requested wireless sensor network with the network configuration parameters.

The method according to claim 1, wherein before the gateway performs identity authentication on the WSN terminal, the method further includes:

After receiving the request of the WSN terminal to join the wireless sensor network, the gateway notifies the wireless sensor network management platform that a new WSN terminal joins, and carries the identification information of the WSN terminal;

The method according to claim 1, wherein the WSN terminal is provided with an identity identification module, and the gateway identifies the WSN terminal by using information in the identity identification module to perform identity authentication on the WSN terminal.

The method according to claim 1, wherein the management platform or the service platform sets setting information of the wireless sensor network that the WSN terminal can join.

6. The method according to claim 5, wherein the gateway is to the WSN Before the terminal authenticates, it also includes:

The wireless sensor network management platform obtains setting information of the wireless sensor network that the WSN terminal can join, and determines, according to the information, whether the WSN terminal is allowed to join the wireless sensor network that is requested to join, and authenticates the WSN terminal when allowed. Related information is sent to the gateway.

The method according to claim 5, wherein before the gateway performs identity authentication on the WSN terminal, the method further includes:

The method according to claim 5, wherein the telecommunication network is provided with a WSN terminal information storage unit, configured to store information of the WSN terminal, including identifier information of the WSN terminal, and used by the WSN terminal identity authentication. Authentication information, setting information of the wireless sensor network that the WSN terminal can join;

9. The method according to claim 8, wherein the WSN terminal information is stored The storage unit is located in the wireless sensor network management platform, or in the service platform, or other network element entities in the telecommunications network.

10. A combined network, comprising a wireless sensor network WSN and a telecommunication network, wherein the wireless sensor network is provided with a WSN terminal and a gateway; and the telecommunication network is provided with a wireless sensor network management platform;

The WSN terminal joins the wireless sensor network.

The combination network according to claim 10, wherein, after the gateway performs identity authentication on the WSN terminal, the network configuration parameter of the requested wireless sensor network is sent to the WSN terminal;

12. The bonding network according to claim 10, wherein, after the gateway receives the request of the WSN terminal to join the wireless sensor network, the gateway notifies the wireless sensor network management platform that a new WSN terminal joins And carrying the identifier information of the WSN terminal; the wireless sensor network management platform sends the WSN terminal authentication related information to the gateway.

The binding network according to claim 10, wherein the WSN terminal is provided with an identity identification module, and the gateway identifies the WSN terminal by using the information in the identity identification module to perform identity authentication on the WSN terminal.

The combination network according to claim 10, wherein the management platform or the service platform sets setting information of the wireless sensor network that the WSN terminal can join.

The binding network according to claim 14, wherein, after receiving the request of the WSN terminal to join the wireless sensor network, the gateway notifies the wireless sensor network management platform that a new WSN terminal joins and carries Identification information of the WSN terminal and the requested Identification information of the wireless sensor network;

The binding network according to claim 14, wherein after receiving the request of the WSN terminal to join the wireless sensor network, the gateway notifies the wireless sensor network management platform that a new WSN terminal joins and carries Identification information of the WSN terminal;

The combination network according to claim 14, wherein the telecommunication network is provided with a WSN terminal information storage unit, configured to store information of the WSN terminal, including identifier information of the WSN terminal, and used by the WSN terminal identity authentication. Authentication information, setting information of the wireless sensor network that the WSN terminal can join;

18. The bonding network according to claim 17, wherein the WSN terminal information storage unit is located in a wireless sensor network management platform, or in a service platform, or other network element entity in the telecommunication network.