在無線感測網路中基於多項式運算的群組金鑰更新之研究

Abstract

感測器是一個具備基本微處理器、有限記憶體以及少量電力的嵌入式系統, 當將足夠數量的感測器放置在欲觀測的地理環境時, 經由無線網路的資料傳輸能力, 使得資料中心可以在稀少人為接觸下亦能對有興趣的環境進行資料搜集與回饋, 無線感測網路的感測項目包含聲波、電磁波、定位、溫度、氣壓、濕度、光的明亮度, 測速器等, 感測器主要運用在不易受照料的環境當中, 舉例來說, 戰爭環境、森林火災感測和健康醫療檢測等, 如今感測裝置更被運用在定位或工廠作業監控上, 顯示無線感測網路的經濟效益與有用性愈來愈受到政府和民眾的關注與推廣, 然而在無線感測網路中所遭受的各種攻擊必須被預防, 例如, 攻擊者可以透過竊聽感測資料、入侵合法感測器的手段, 進而啟動錯誤報告注入、資料丟棄和阻斷服務等攻擊, 使得資料中心的決策制定受干擾, 因此, 相關資訊安全論文陸續在近年被學者發表, 期望能防禦上述攻擊。 然而, 感測器的資源匱乏特質使得非對稱式金鑰加密機制或可信第三方機制通常不適合運用在感測網路中, 因此有學者著墨於低複雜度的金鑰產生機制換言之, 輕量級的群組金鑰更新機制在無線感測網路中具必要性。 本論文透過期刊文章的研習, 將在過往學者基礎下, 提出一系列更有效的群組金鑰更新機制, 使得被入侵的感測器可輕易被剔除在外, 確保無線感測網路具備機密性、有用性與安全性, 此外, 希望在低複雜度的數學模型下, 可讓感測器在網路中的存活時間延長, 本論文運用密碼學、多項式運算、與分群金鑰配置等方式到無線感測網路中, 相信能在此領域中有所貢獻。

WSN (Wireless Sensor Network) are widely used to detect the sound, magnetic field, location, temperature, pressure, humidity, light, and speed detector etc. sensors are deployed in hostile environment. For instance, battlefield surveillance, fire detection, and ocean water quality monitoring. In recent years, sensors are applied to intelligence appliance and high speedway. Therefore, we cannot neglect WSN which is now a popular infrastructure. However, there are a lot of secure issues that have to be overcome when expanding sensors in a hostile environment. For instance, an adversary can easily eavesdrop on the communication of other sensors, capture one of sensors, or intentionally spread misleading or nonsensical information to other sensors. To defend against such attack, volumes of research have been published on several papers which are focused on secret communication. Nevertheless, a sensor has constrained CPU calculation, memory space, and power. Therefore, WSNs need a group rekeying scheme with low overheads. WSN is usually unfeasible to execute the operations of an asymmetric cryptography and Trusted server-based because the sensor has limit resources. In order to solve such problems, the purpose of our thesis is to establish a group rekeying mechanism. When a base station is in WSNs, it made a mechanism of group rekeying on purpose to eliminate a compromised sensor, some authentication mechanisms and encryption methods are used to this work. According to the above requirements, we design a secure, efficient and practical system for wireless sensor network by applying cryptographic techniques, polynomials computation and the key hierarchy management.