针对无线传感器网络多应用场景下异构数据的安全融合问题,提出了一种轻量级的安全数据融合保护方案,该方案可同时保障数据的隐私性、完整性和新鲜性。首先,以当前融合轮数和节点预置密钥作为哈希函数的输入,为节点更新每个融合周期的密钥;其次,采用同态加密技术,使中间节点能够对密文直接执行融合操作;然后,采用同态消息认证码,使基站能够验证融合数据在传输过程中是否被篡改;进一步,对明文信息采用编码机制,以满足多应用场景下异构数据聚集的使用需求。理论分析和仿真结果表明,该算法具有较好的安全性、较低的通信开销和更高的融合精确度。
To solve the issues of security of multi-source heterogeneous data during data aggregation in wireless sensor networks(WSNs), this paper proposed a lightweight secure data aggregation scheme which can guarantee data confiden- tiality, integrity and freshness. HASH function is used to update the key of each time slot by using present aggregation round and preset key as an input. The application of homomorphic encryption makes intermediate node perform aggrega- tion operation on ciphertext directly. Homomorphic message authentication code (HMAC) enables base station to verify whether the aggregation data have been modified during transportation. Moreover, plaintext is coded before being en crypted so as to satisfy multiple applications. Theoretical analysis and simulation verify that the proposed algorithm can preserve data privacy with lower communication assumption and higher data aggregation accuracy.