摘要
为了解决无线传感网络数据聚合过程中增加新的节点所引发的身份认证安全信息泄漏问题,提出了一种改进型的密钥协商和认证机制.该机制的节点通过主密钥与认证的轮数形成认证密钥,以此替代主密钥,从而充分确保主密钥信息的安全.同时还建立了认证器规则,以此完成节点相互间的认证.在此基础上,利用二次剩余定理对认证器信息与认证密钥加密,从而为认证信息在不同节点间的交互安全提供了保障.从安全和性能分析结果看,该协议机制能够有效地抵抗一系列网络攻击行为.对比其他的基于主密钥的认证协议,该认证协议具有较低的能量消耗,又因不需要第三方认证中心而具有较好的可扩展性,能够适应网络规模的不断增大.
In order to solve identity authentication security information leaks caused by increasing the new node in the data polymerization process of networking applications,the paper proposed an improved key agreement and authentication mechanism.The nodes of the mechanism form authentication key mainly through the number of rounds of the master key and certification,so the master key would be replaced in order to fully ensure security of the master key information.On the other hand,the mechanism also established a certification rule to complete the authentication node among the nodes,on this basis,and utilize secondary remainder theorem to encrypt authenticator information and authentication keys,so as to provide interaction security of authentication information among different nodes.From the security and performance analysis results,the protocol mechanism can effectively resist the series of network attacks.At the same time,compared to other authentication protocols based on the master key,the authentication protocol consumes less energy.And also because the authentication protocol does not need the third-party certification,it has good extensibility,and could adapt to the increasing size of the network better.
出处
《内蒙古师范大学学报（自然科学汉文版）》
CAS
北大核心
2015年第1期70-75,共6页
Journal of Inner Mongolia Normal University(Natural Science Edition)
基金
广西高校科学技术研究项目(LX2014418)
关键词
数据聚合
身份认证
密钥协商
认证器规则
二次剩余定理
data aggregation
identity authentication
key negotiation
certification rules
secondary
作者简介
梁川（1979-），男（壮族），广西百色人，百色学院讲师，主要从事计算机网络研究．
