안전한 6LoWPAN Neighbor Discovery 주소 등록 프로토콜
Secure 6LoWPAN Neighbor Discovery Address Registration Protocol
1
조회
0
다운로드
0
인용
0
참고문헌
키워드
초록
IEEE 802.15.4 기반의 6LoWPAN은 다양한 IoT (Internet of Things) 응용 프로그램을 위한 사실상의 표준 플랫폼이다. LoWPAN (Low-power Wireless Personal Area Network)을 부트 스트랩 하려면 각 디바이스는 고유한 IPv6 주소를 할당하기 위해 6LoWPAN-ND 주소 등록을 수행해야 한다. 적절한 보안 메커니즘이 없다면, 6LoWPAN-ND는 손상된 노드 공격을 포함한 다양한 보안 공격에 취약하다. 취약점에 대한 보완으로 몇 가지 보안 메커니즘이 제안되었지만 IEEE 802.15.4 hop-by-hop 보안에만 의존하기 때문에 취약점이 존재한다. 본논문에서는 6LoWPAN-ND 주소 등록의 취약점 및 손상된 노드 공격 방지에 적합한 새로운 보안 메커니즘을 제안하고 분석한다. 또한 제안된 보안 메커니즘이 IETF (Internet Engineering Task Force) 표준과 호환되며IETF 6lo WG에서 제안 된 메커니즘 보다 효율적임을 보인다.
Abstract
6LoWPAN based on IEEE 802.15.4 is a realistic standard platform for various Internet of Things (IoT) applications. Tobootstrap the LoWPAN (Low-power Wireless Personal Area Network), each device must perform 6LoWPAN-ND addressregistration to assign a unique IPv6 address. Without adequate security mechanisms, 6LoWPAN-ND is vulnerable to a varietyof security attacks including corrupted node attacks. Several security mechanisms have been proposed as a supplement to thevulnerability, but the vulnerability exists because it relies solely on IEEE 802.15.4 hop-by-hop security. In this paper, we proposeand analyze a vulnerability of 6LoWPAN-ND address registration and a new security mechanism suitable for preventing theattack of damaged node. It also shows that the proposed security mechanism is compatible with the Internet Engineering TaskForce (IETF) standard and is more efficient than the mechanism proposed in the IETF 6 lo WG.
참고문헌 (18)
- G. Montenegro, "Transmission of IPv6 Packets over IEEE 802.15.4Networks", IETF RFC 4944, ~ (2007)
- J. Hui, "Compression Format for IPv6 Datagrams over IEEE 802.15.4-based Networks", IETF RFC 6282, ~ (2011)
- S. Misra, "A PKI Adapted Model for Secure Information Dissemination in Industrial Control and Automation 6LoWPANs", IEEE Access, 3, pp.875~889 (2015)
- Y. Qiu, "A Mutual Authentication and Key Establishment Scheme for M2M Communication in 6LoWPAN Networks", IEEE Trans. on Industrial Informatics, 12(6), pp.2074~2085 (2016)
- Certicom Research, "SEC 4 : Elliptic Curve Qu-Vanstone Implicit Certificate Scheme(ECQV)", Standard for Efficient Cryptography, ~ (2013)
- P. Porambage, "PAuthKey: A Pervasive Authentication Protocol and Key Establishment Scheme for Wireless Sensor Networks in Distributed IoT Applications", International Journal of Distributed Sensor Networks, 2014
- C. S. Park, "A Secure and Efficient ECQV Implicit Certificate Issuance Protocol for the Internet of Things Applications", IEEE Sensors Journal, 17(7), pp.2215~2223 (2017)
- L. Eschenauer, "A Key Management Scheme for Distributed Sensor Networks", Proc. of 9th ACM conference on Computer and Communications Security (ACM-CCS), pp.41~47 (2002)
- H. Chan, "Random Key Pre-distribution Schemes for Sensor Networks", Proc. of the IEEE Symposium on Security and Privacy, pp.197~213 (2003)
- L. Oliveira, "Network Admission Control Solution for 6LoWPAN Networks Based on Symmetric Key Mechanisms", IEEE Trans. on Industrial Informatics, 12(6), pp.2186~2195 (2016)
- A. Esfahani, "A Lightweight Authentication Mechanism for M2M Communications in Industrial IoT Environment", IEEE Internet of Things Journal (2017)
- Z. Shelby, "Neighbor Discovery Optimization for IPv6over Low-Power Wireless Personal Area Networks(6LoWPANs)", IETF RFC 6775, ~ (2012)
- J. Nieminen, "IPv6 over Bluetooth Low Energy", IETF RFC 7668, ~ (2015)
- L. Seitz, "Use Cases for Authentication and Authorization in Constrained Environments", IETF RFC 7744, ~ (2016)
- M. A. M. Seliem, "Optimized Neighbor Discovery for 6LoWPANs : Implementation and Performance Evaluation", Computer Communications, 112, pp.73~92 (2017)
- C. S. Park, "Security Bootstrapping for Secure Join and Binding on the IEEE 802. 15. 4-Based LoWPAN", IEEE Internet of Things Journal, 4(4), pp.996~1005 (2017)
- J. Arkko, "Secure Neighbor Discovery", IETF RFC 3971, ~ (2005)
- P. Thubert, "Address Protected Neighbor Discovery for Low-power and Lossy Networks", IETF 6lo WG Internet-Draft, draft-ietf-6lo-ap-nd-06, ~ (2018)