무선 센서 네트워크 상에서 타원 곡선 암호를 이용한 안전한 보안 프로토콜
A New Security Protocol Based on Elliptic Curve Cryptosystems for Securing Wireless Sensor Networks
2
조회
0
다운로드
0
인용
0
참고문헌
키워드
초록
본 논문에서는 무선 센서네트워크(Wireless Sensor Networks)의 안전한 동작을 위하여 타원곡선 암호 시스템 (Elliptic Curve Cryptosystems)에 기반을 둔 새로운 보안 프로토콜의 설계 및 구현에 관하여 다룬다. 제안 프로토콜 의 목적은 센서 노드들 간의 공유키 설정(Pairwise Key Establishment)과 브로드캐스트 메시지 인증(Broadcast Message Authentication) 과정에서 충분한 효율성과 보안성을 달성하는 것이다. 현재 TinyPK와 EccM 2.0과 같은 공개키 기반의 프로토콜들이 제안되었으나 현저한 성능 저하와 man-in-the-middle 공격에 취약하다는 문제점들이 있다. 이러한 기존에 제안된 프로토콜들의 문제점들을 해결하기 위하여 본 논문에서는 클러스터 기반(Clusterbased) 의 Elliptic Curve Diffie-Hellman(ECDH) 키 교환 프로토콜과 Elliptic Curve Digital Signature Algorithm(ECDSA) 메시지 인증 프로토콜을 제안한다. 그리고 제안 프로토콜들을 8-bit, 7.3828-MHz의 MICAz 센서 모트에 직접 구현하여 그 결과를 기존의 프로토콜들과 비교함으로써 향상된 성능 및 센서네트워크 상에서의 실행 가능성을 검증한다.
Abstract
In this paper, we describe the design and implementation of a new security protocol based on Elliptic Curve Cryptosystems (ECC) for securing Wireless Sensor Networks (WSNs). The goal of our proposal is to achieve sufficient efficiency and security level in both pairwise key setup and broadcast authentication phases. Some public-key-based protocols such as TinyPK and EccM 2.0 have already been proposed in response. However, they exhibit poor performance. In addition, they are vulnerable to man-in-the-middle attacks. We propose a cluster-based Elliptic Curve Diffie-Hellman (ECDH) and Elliptic Curve Digital Signature Algorithm (ECDSA) in order to handle these problems of the existing protocols during the pairwise key setup and broadcast authentication phases, respectively. We have implemented our protocol on 8-bit, 7.3828-MHz MICAz mote. The experimental results indicate improved performance in comparison with that of existing protocols as well as the feasibility of our protocol for WSNs.
참고문헌 (22)
- A. Perrig, "Security in Wireless Sensor Networks", Comm. ACM, 47(6), pp.53~57 (2004)
- A. Perrig, "SPINS: security protocols for sensor networks", Wireless Networking, 8(5), pp.521~534 (2002)
- W. Du, "A Pairwise Key Pre-distribution Scheme for Wireless Sensor Networks", Proc. 10th ACM Conf. Comp. and Comm. Security, pp.42~51 (2002)
- H. Chan, "Random Key Pre-distribution Schemes for Sensor Networks", IEEE Symp. of Security and Privacy, pp.197~213 (2003)
- L. Eschenauer, "A Key-Management Scheme for Distributed Sensor networks", Proc. of 9th ACM Conf. of Computer and Communications Security, pp.41~47 (2002)
- E. O. Blaβ, "Towards Acceptable Public-Key Encryption in Sensor Networks", ACM 2nd International Workshop on Ubiquitous Computing, INSTICC Press, Miami, USA, pp.88~93 (2005)
- G. Gaubatz, "State of the Art in Ultra-Low Power Public Key Cryptography for Wireless Sensor Networks", Proc. of 3th IEEE Conf. on Pervasive Comp. and Comm., pp.146~150 (2005)
- S. Kumar, "Embedded End-To-End Wireless Security with ECDH Key Exchange", Proc. of IEEE Conf. On Circuit and Systems (2003)
- D. J. Malan, "A Public- Key Infrastructure for Key Distribution in TinyOS Based on Elliptic Curve Cryptography", Proc. of IEEE Conf. on Sensor and Ad Hoc Comm. and Networks (2004)
- R. Watro, "TinyPK: Securing Sensor Networks with Public Key Technology", Proc. of SASN'04 ACM Press, pp.59~64 (2004)
- C. Karlof, "TinySec: Link Layer Security Architecture for Wireless Sensor Networks", Proc. of SenSys'04, pp.162~175 (2004)
- "TinyOS forum"[URL]
- "MICAz Hardware Description"[URL]
- A. S. Wander, "Energy Analysis of Public-Key Cryptography for Wireless Sensor Networks", Proc. of IEEE Conf. on Pervasive Comp. and Comm (2005)
- D. Hankerson, "Software Implementation of Elliptic Curve Cryptography over Binary Fields", Proc. of CHES 2000, LNCS 1965, pp.1~24 (2000)
- K. Okeya, "Signed Binary Representation Revisited", Proc. of CRYPTO 2004, LNCS 3152, pp.123~139 (2004)
- "Certicom Research: SEC 2-Recommended Elliptic", ~
- J. Lopez, "Improved Algorithms for Elliptic Curve Arithmetic in GF(2n)", Proc. of SAC’98, LNCS 1556, pp.201~212 (1999)
- "Certicom ECC Challenge"[URL]
- C. Hartung, "Node Compromise in Sensor Networks - The Need for Secure Systems" (2005), Dept of Comp, Univ of Colorado
- V. S. Miller, "Use of Elliptic Curves in Cryptography", CRYPTO’85, LNCS 218, pp.417~426 (1985)
- B. Moller, "Improved Techniques for Fast Exponentiation", ICISC 2002, LNCS 2587, pp.298~312 (2003)