SDWSN 환경의 PUF 기반 그룹 키 분배 방법 개선
An Enhanced Scheme of PUF-Assisted Group Key Distribution in SDWSN
0
조회
0
다운로드
0
인용
0
참고문헌
키워드
초록
최근, IoT 무선 디바이스 등의 증가로 WSN(Wireless Sensor Network) 환경에서 네트워크 트래픽이 증가하면서 네트워크 자원을 안전하고 효율적으로 관리하는 SDN(Software-Defined Networking)을 WSN에 적용한 SDWSN(Software-Defined Wireless Sensor Networking)과 그에 대한 보안 기술에 대한 관심도가 증가하고 있다. 본 논문에서는 SDWSN 환경에서 PUF(Physical Unclonable Function) 기반 그룹 키 분배 방법을 안전하고 효율적으로 설계하는 방법을 서술한다. 최근에 Huang 등은 그룹 키 분배에 SDN의 장점과 PUF의물리적 보안 기능을 이용하여 그룹 키 분배 방법을 설계하였다. 하지만, 본 논문에서는 Huang 등의 프로토콜이 보조 제어부 미인증과 불필요한 동기화 정보를 유지하는 취약점이 존재함을 발견하였다. 본 논문에서는 보조 제어부에인증과정을 안전하게 설계하고, 불필요한 동기화 정보는 삭제하되 카운터 스트링과 랜덤 정보를 추가하여 Huang의취약점을 개선하였다.
Abstract
In recent years, as the network traffic in the WSN(Wireless Sensor Network) has been increased by the growing numberof IoT wireless devices, SDWSN(Software-Defined Wireless Sensor Network) and its security that aims a secureSDN(Software-Defined Networking) for efficiently managing network resources in WSN have received much attention. In thispaper, we study on how to efficiently and securely design a PUF(Physical Unclonable Function)-assisted group keydistribution scheme for the SDWSN environment. Recently, Huang et al. have designed a group key distribution schemeusing the strengths of SDN and the physical security features of PUF. However, we observe that Huang et al.'s scheme hasweak points that it does not only lack of authentication for the auxiliary controller but also it maintains the redundantsynchronization information. In this paper, we securely design an authentication process of the auxiliary controller andimprove the vulnerabilities of Huang et al.'s scheme by adding counter strings and random information but deleting theredundant synchronization information.
참고문헌 (15)
- S. Sezer, "Are we ready for SDN? Implementation challenges for software-defined networks", IEEE Communications Magazine, 51(7), pp.36~43 (2013)
- A. De Gante, "Smart wireless sensor network management based on software-defined networking", Communications (QBSC), pp.71~75 (2014)
- Z. Shu, "Security in software-defined networking : Threats and countermeasures", Mobile Networks and Applications, 21(5), pp.764~776 (2016)
- P. Porras, "A security enforcement kernel for OpenFlow networks", Proceedings of the first workshop on Hot topics in software defined networks, pp.121~126 (2012)
- X. Wen, "Towards a secure controller platform for OpenFlow applications", Proceedings of the second ACM SIGCOMM workshop on Hot topics in software defined networking, pp.171~172 (2013)
- T. Luo, "Sensor OpenFlow : Enabling software-defined wireless sensor networks", IEEE Communications letters, 16(11), pp.1896~1899 (2012)
- M. P. Fernandez, "Advanced Information Networking and Applications", pp.1009~1016 (2013)
- S. T. Ali, "A survey of securing networks using software defined networking", IEEE Transactions on Reliability, 64(3), pp.1086~1097 (2015)
- S. Shin, "FRESCO: Modular composable security services for software-defined networks", In 20th Annual Network & Distributed System Security Symposium (2013)
- J. R. Ballard, "Extensible and scalable network monitoring using OpenSAFE", Proceedings of USENIX Internet Network Management Workshop, 2010, 8~
- M. Huang, "Puf-assisted group key distribution scheme for software-defined wireless sensor networks", IEEE Communications Letters, 22(2), pp.404~407 (2018)
- J. Delvaux, "Key-recovery attacks on various RO-PUF constructions via helper data manipulation", Proceedings of the conference on Design, Automation &Test in Europe, pp.72~ (2014)
- Y. Dodis, "Fuzzy extractors : How to generate strong keys from biometrics and other noisy data", International conference on the theory and applications of cryptographic techniques, pp.523~540 (2004)
- Jung Hee Cheon, "A reusable fuzzy extractor with practical storage size: Modifying canetti et al.‘s construction", Australasian Conference on Information Security and Privacy, pp.28~44 (2018)
- M. Bellare, "Entity authentication and key distribution", Annual international cryptology conference, pp.232~249 (1993)