无线传感器网络是近几年出现的对目标信息进行采集和处理的监测技术,因其实现简单、成本较低,在各方面均有广泛应用。路由算法是信息传递路径选择的重要方法,一种高效、安全的路由算法将对能源受限的无线传感器网络起着至关重要的作用...无线传感器网络是近几年出现的对目标信息进行采集和处理的监测技术,因其实现简单、成本较低,在各方面均有广泛应用。路由算法是信息传递路径选择的重要方法,一种高效、安全的路由算法将对能源受限的无线传感器网络起着至关重要的作用。文章研究了层簇式路由协议中的一种典型路由算法LEACH(low energy adaptive clustering hierarchy),并在该协议的基础上,针对算法中存在的缺乏能量因素和安全问题考量等问题,提出了一种基于动态密钥管理的高效改进LEACH算法。该算法首先引入能耗均衡改进方法对簇头的选举算法进行优化,并让簇头节点以多跳的方式与基站进行数据传输;其次,在数据传输过程引入了动态密钥管理机制,利用哈希函数产生的链密钥作为各节点之间的会话密钥,在增加了网络数据传输安全性的同时,减少了节点之间因密钥协商而造成的过多通信交互次数;最后,模拟仿真了文章提出的安全、高效的路由算法,并与LEACH算法对比,得出该算法在高效性和安全性方面的优势。展开更多
在无线传感器网络安全体系中,密钥方案在解决面临内部攻击时抵抗能力较弱;作为密钥方案重要补充的信任管理机制,在识别被俘节点,解决内部攻击等方面有着优势;结合上述两者特点,提出了一种TDKM(Trust based Dynamic Key Management in wi...在无线传感器网络安全体系中,密钥方案在解决面临内部攻击时抵抗能力较弱;作为密钥方案重要补充的信任管理机制,在识别被俘节点,解决内部攻击等方面有着优势;结合上述两者特点,提出了一种TDKM(Trust based Dynamic Key Management in wire-less sensor networks)方案,它将信任机制引入传统的动态密钥管理方案中,以节点的信任值作为判断被俘节点的依据,主动监测被俘节点,再通过动态密钥管理方案更新系统管理密钥;仿真结果表明,采用此模型显著增强了网络对捕获节点的抵抗性,有效解决了网络节点的共谋问题。展开更多
In order to achieve fine-grained access control in cloud computing,existing digital rights management(DRM) schemes adopt attribute-based encryption as the main encryption primitive.However,these schemes suffer from in...In order to achieve fine-grained access control in cloud computing,existing digital rights management(DRM) schemes adopt attribute-based encryption as the main encryption primitive.However,these schemes suffer from inefficiency and cannot support dynamic updating of usage rights stored in the cloud.In this paper,we propose a novel DRM scheme with secure key management and dynamic usage control in cloud computing.We present a secure key management mechanism based on attribute-based encryption and proxy re-encryption.Only the users whose attributes satisfy the access policy of the encrypted content and who have effective usage rights can be able to recover the content encryption key and further decrypt the content.The attribute based mechanism allows the content provider to selectively provide fine-grained access control of contents among a set of users,and also enables the license server to implement immediate attribute and user revocation.Moreover,our scheme supports privacy-preserving dynamic usage control based on additive homomorphic encryption,which allows the license server in the cloud to update the users' usage rights dynamically without disclosing the plaintext.Extensive analytical results indicate that our proposed scheme is secure and efficient.展开更多
文摘无线传感器网络是近几年出现的对目标信息进行采集和处理的监测技术,因其实现简单、成本较低,在各方面均有广泛应用。路由算法是信息传递路径选择的重要方法,一种高效、安全的路由算法将对能源受限的无线传感器网络起着至关重要的作用。文章研究了层簇式路由协议中的一种典型路由算法LEACH(low energy adaptive clustering hierarchy),并在该协议的基础上,针对算法中存在的缺乏能量因素和安全问题考量等问题,提出了一种基于动态密钥管理的高效改进LEACH算法。该算法首先引入能耗均衡改进方法对簇头的选举算法进行优化,并让簇头节点以多跳的方式与基站进行数据传输;其次,在数据传输过程引入了动态密钥管理机制,利用哈希函数产生的链密钥作为各节点之间的会话密钥,在增加了网络数据传输安全性的同时,减少了节点之间因密钥协商而造成的过多通信交互次数;最后,模拟仿真了文章提出的安全、高效的路由算法,并与LEACH算法对比,得出该算法在高效性和安全性方面的优势。
文摘在无线传感器网络安全体系中,密钥方案在解决面临内部攻击时抵抗能力较弱;作为密钥方案重要补充的信任管理机制,在识别被俘节点,解决内部攻击等方面有着优势;结合上述两者特点,提出了一种TDKM(Trust based Dynamic Key Management in wire-less sensor networks)方案,它将信任机制引入传统的动态密钥管理方案中,以节点的信任值作为判断被俘节点的依据,主动监测被俘节点,再通过动态密钥管理方案更新系统管理密钥;仿真结果表明,采用此模型显著增强了网络对捕获节点的抵抗性,有效解决了网络节点的共谋问题。
基金ACKNOWLEDGEMENTS This work has been supported by the National Natural Science Foundation of China under Grant No. 61272519, 61121061.
文摘In order to achieve fine-grained access control in cloud computing,existing digital rights management(DRM) schemes adopt attribute-based encryption as the main encryption primitive.However,these schemes suffer from inefficiency and cannot support dynamic updating of usage rights stored in the cloud.In this paper,we propose a novel DRM scheme with secure key management and dynamic usage control in cloud computing.We present a secure key management mechanism based on attribute-based encryption and proxy re-encryption.Only the users whose attributes satisfy the access policy of the encrypted content and who have effective usage rights can be able to recover the content encryption key and further decrypt the content.The attribute based mechanism allows the content provider to selectively provide fine-grained access control of contents among a set of users,and also enables the license server to implement immediate attribute and user revocation.Moreover,our scheme supports privacy-preserving dynamic usage control based on additive homomorphic encryption,which allows the license server in the cloud to update the users' usage rights dynamically without disclosing the plaintext.Extensive analytical results indicate that our proposed scheme is secure and efficient.
