广播认证是传感器网络中极具挑战性的安全问题之一.目前提出的解决方案均是针对单基站传感器网络设计的,如扯TESLA和分层扯TESLA,难以满足多基站网络的需求.在μTESLA协议的基础上,文章提出了适合于多基站传感器网络的广播认证协议MMuTESLA.此协议引入门限密码的思想,将认证密钥拆分成密钥影子,并分配给各个基站.传感器节点利用基站广播的密钥影子重构认证密钥,并认证广播信息.为了抵制DoS、DoM、认证延迟和虚假消息攻击,采用周期性透露密钥影子,SIS方式和在CSDM中嵌入密钥影子映射方法,对MMμTESLA协议进行扩展,提出RDS-μTESLA、RDM-μTESLA、RAD-μTESLA和RFM—μTESLA协议.分析和验证表明MMμTESLA协议及其扩展具有高认证率、高可靠性和容忍高信道错误率的特性.
Broadcast Authentication is one of the most challenging security problems in sensor networks. The current solutions are designed for single-base-station sensor networks, such as μTESLA and multilevel μTESLA which can not meet the requirements of multi-base-station networks. This paper presents a broadcast authentication protocol, MMμTESLA which applies to multiple-base-station sensor networks, based on μTESLA. With the thought of threshold cryptography, this protocol separates the authentication keys into key shares, and distributes them to each station. Sensor nodes reconstruct keys by using key shares broadcasted by base-stations and authenticate the broadcast messages. To resist the attacks from DoS, DoM, authentication delay and false messages, the method of disclosing key shares periodically, the thought of SIS scheme and embedding key share images in CSDM are adopted to extend MMμTESLA. RDS-μTESLA, RDM-μTESLA, RAD-μTESLA and RFM-μTESLA are proposed. The analysis and testing results show that MMμTESLA and its extensions have the characteristics of higher authentication rate, greater reliability and tolerance of high channel error rates.