在異質感測網路上建立配對金鑰的方法

Abstract

在感測網路上所有感測器之間建立配對金鑰是個重要的課題以及嚴峻的挑戰，因為公開金鑰加密法不適用在資源有限的感測節點上。為了提升效能，一些已經提出來的機制多半會採用搭配感測節點的佈置資訊來做配對金鑰的分配。然而，實際的應用上，感測節點的佈置資訊是不容易取得的。在本篇論文裡，我們首先提出了一個建立在異質感測網路以及多項式金鑰基礎的機來建立配對金鑰，並說明此機制可適用在無任何感測節點的佈置資訊下。在我們的分析及模擬下，我們證明我們的機制，除了更有效率外，且在安全性上也有更好的提升。然後我們再把我們的機制延伸成跨叢集的分配配對金鑰機制。一樣地，在效能以及安全性上都比以往的方法好。

Pairwise key establishment in sensor networks is a challenging task because public key cryptography is not desirable on resource-limited sensor nodes. In order to improve performance, some of existing key management schemes proposed to cooperate with deployment information for key distribution. However, in some applications, deployment information of sensor nodes may not be available. In this thesis, we first propose a scheme which leverages heterogeneous sensor network and polynomial-based approach to do pairwise key establishment if there is no deployment information available. The analysis demonstrates that the proposed scheme is not only more efficient, but can also achieve better resilience against node compromises. We then extend our proposed scheme to a cluster-based key predistribution scheme. In addition to its efficiency, the extended scheme can offer perfect security for protecting sensor networks.