一种基于单向散列函数的WirelessHART网络密钥管理方案

摘要

A one-way hash function-based key management scheme for WirelessHART networks is proposed, which ensures forward and backward secrety and provides broadcast authentication and key renewal strategy after node being captured. Double hash key chains are used to realize broadcast authentication for key renewal and to solve the problem that the renewal times of the whole network share keys are limited. Broadcast and unicast communications are combined to enforce the reliability of key renewal in WirelessHART networks. Compared with the existing key management scheme for WirelessHART networks, the proposed scheme improves the network's security and reduces the network's communication energy consumption without increasing the computing energy consumption and memory overhead.%为保证WirelessHART网络的前向安全及后向安全,提供密钥更新的广播认证和节点被捕获后的密钥更新策略,提出了一种基于单向散列函数的WirelessHART网络密钥管理方案.引入双散列密钥链实现密钥更新的广播认证,解决了全网共享密钥更新次数受限的问题,结合广播和单播通信执行全网共享密钥更新,增强了密钥更新的可靠性.与现有的WirelessHART网络密钥管理方案相比,在不增加节点计算能耗和存储开销的情况下,提高了WirelessHART网络的安全性,并降低了网络的通信能耗.