无线传感器网络安全数据融合协议研究

Traditional link encryption and authentication technology cannot directly ensure confidentiality and integrity for aggregation protocol because of in-network aggregation. Moreover, in wireless sensor networks, sensor nodes usually have limited energy, and both nodes and links are vulnerable to be compromised and controlled. Addressing these issues, this project aims to provide effective secure data aggregation protocols for wireless sensor networks. The project is valuable both theoretically and practically since it can guarantee data confidentiality and integrity with the prolonged network's life, which is achieved by reduced communication for energy saving of nodes. This research includes: (1) Studying trust-based integrity-preserving data aggregation protocol to actively prevent compromised node from affecting aggregation result; (2) Researching ID-list detecting algorithm and separable homomorphic algorithm for end-to-end confidentiality-preserving data aggregation protocol, to resolve the energy consumption problem in ID-list transmission and the security challenges in multi-dimension data aggregation; (3) Introducing confidentiality-preserving and integrity-preserving data aggregation protocol based on separable homomorphic encryption algorithm and aggregate message authentication code; (4) Implementing these protocols and establishing prototype systems. This project covers major aspects from theory to practice of secure data aggregation in wireless sensor networks. The project will publish 12 to 16 SCI/EI indexed papers, apply for 6 invention patents, and register for 2 software copyrights.

由于数据融合要求节点进行内网处理，传统链路加密和认证技术不能直接为数据融合协议提供机密性和完整性保护。本项目针对节点能量受限、节点容易被俘获、链路容易被控制等特点，研究无线传感器网络安全数据融合协议，在降低通信代价以节省节点能量和增加网络寿命同时，确保采集数据和融合数据的机密性和完整性，具有重要的理论意义和应用价值。本项目拟研究基于信任的完整性保护数据融合协议主动防范被俘获节点对最终融合结果的影响；研究面向端到端机密性保护数据融合协议的ID列表检测算法和可分离同态加密算法，解决ID列表传输能量消耗和多维数据安全融合问题；研究基于可分离同态加密算法和融合消息认证码的同时具有机密性保护和完整性保护的安全数据融合协议；实现本项目提出的各种协议，构建原型系统。本项目拟从理论到实践完整地研究无线传感器网络安全数据融合问题，可发表SCI/EI检索论文12~16 篇、申请发明专利6项、软件著作权2项。

本项目以无线传感器网络环境下为安全数据融合过程同时提供数据机密性与完整性为目标，在密码学与信息论框架下研究数据融合、端到端加密、同态加密、消息认证码、信任与声誉护等关键技术。通过项目的实施，本项目（1）提出了基于信任的完整性保护数据融合协议，主动防范被俘获节点对最终融合结果的影响；（2）提出了面向端到端机密性保护数据融合协议的ID列表检测算法和可分离同态加密算法，解决ID 列表传输能量消耗和多维数据安全融合问题；（3）提出了基于可分离同态加密算法和融合消息认证码的同时具有机密性保护和完整性保护的安全数据融合协议；（4）实现本项目提出的各种协议，并构建原型系统；（5）将本项目的研究成果扩展应用到物联网、云计算等领域。项目在各个方面取得了较大的研究成果。项目组发表15篇学术论文，其中包括SCI检索论文11篇，EI检索论文4篇；申请国家发明专利10项（已授权3项）；授权软件著作权2 项；培养博士生3名，硕士生18名。项目负责人被评为教授和博士生导师。