The characteristics of high loss rate, resource constraint, being eager for good security haven't been fully considered in the existing key establishment protocols of wireless sensor networks. Analyzing the key establishing problem from the MAC and physical layers, existing protocols are not practicable enough due to their overlong agreement packets and single round key establishment. To mitigate the impact of these problems, a group of design principles for secure sensor networks has been presented and TinyAKE, an authenticated key transport protocol based on lightweight certificate, is proposed in this paper. The security of TinyAKE are proved with the theory of indistinguishability, meanwhile, the correctness is also proved, the performance is analyzed and compared with the existing similar protocols. Finally TinyAKE is implemented in the TinyOS with TinyECC. Our evaluation shows that TinyAKE is a more practicable and trustable authenticated key establishment protocol than existing protocols. The experimental result shows that the key transport with certificate mechanism is feasible in WSNs. Moreover, the simulation results show that the optimal number of repeated negotiation is one when the secure connectivity rate of TinyAKE is improved by using the repeated key negotiation.
翻译:高损失率、资源制约、渴望良好的安全性等特征在无线传感器网络的现有关键建立协议协议中没有得到充分考虑。分析MAC和物理层造成问题的关键,现有协议因其超长的协议包和单圆键设置而不够实际。为了减轻这些问题的影响,提出了一组安全传感器网络的设计原则,本文件提出了基于轻量证书的认证关键运输协议Tinyake。Tinyake的安全性得到了证明,同时,不易分化的理论也证明了其正确性,对绩效进行了分析并与现有的类似协议进行比较。最后,Tinyyaake在TinyyOS与TyyyECC之间的协议中得到了实施。我们的评估表明,Tinyake是一种比现有协议更可行和可信赖的认证的关键建立协议。实验结果表明,在WSNS公司使用认证机制进行的关键运输是可行的。此外,模拟结果表明,在使用反复的关键谈判改进Tinyake的安全连接率时,重复谈判的最佳次数是一次。