A Group Key Distribution Scheme for Wireless Sensor Networks in the Internet of Things Scenario

Abstract

As an indispensable part of the Internet of Things (IoT), wireless sensor networks (WSNs) need to be completely integrated into the Internet. When an Internet user communicates with multiple sensor nodes in WSNs, secure group key management becomes necessary. However, most current group key management schemes developed for WSNs do not consider the Internet scenario while traditional group key management in the Internet is deemed to be not suitable for WSNs due to the resource constraint characteristics of WSNs. In this paper, we propose a group key distribution scheme for WSNs in the IoT scenario in which we organize sensor nodes into groups in a hierarchical structure. In the upper wired layer, an end-to-end secure communication protocol is used to distribute group keys for subgroups to the trusted head nodes and the head nodes then distribute the group keys through underlying tree-based topology and wireless multicast to minimize energy consumption. We also perform some quantitative analyses as well as experiments to show that our proposed scheme is secure and has t-revocation capability. The total cost of distributing and rekeying the group keys is also analyzed and compared to that in some other comparable schemes.

Security Issues with Iot and Survey of Protecting System for Authentication at Gateway

“…It prevents from man-in-the-middle, Dose, Node capture attack and replay attack [2].Implements authentication system which provides mutual authentication between the users, sensors and gateways with fulfillment of security characteristics of IoT [3].Implements verifiable secret sharing cryptography through signature in6LowPAN environment [8]. Implements object authentication framework to exploit device specification information with normal change in fingerprints for preventing from the different security attack [4].Implements modification in MQTT frame-work's services for reducing the authorization delay, message overhead, etc. But, security is no concerning [1].…”

DNACK: False Data Detection Based on Negative Acknowledgment and Digital Signature on Mobile Ad-hoc Network

“…En-route filtering, which is proposed in [2,24,25], is a well-known detection method against internal attack. This method can detect the internal attackers based on packet origin and abnormal patterns by replacing malicious nodes with legitimate nodes [26].…”

Resilient Multipath Routing Mechanism Based on Clustering with Intrusion Tolerance

“…How to take measures to simultaneously solve both internal and external attacks is a problem worthy of study. The literature [9] combines cryptography and proposes a secret sharing technology with intrusion tolerance capabilities clustering routing scheme to improve the data transmission network intrusion tolerance capabilities. In order to reduce energy consumption and improve the route network security, the literature [11] introduced a secure boot program and node two-way mechanism evaluation to detect malicious node is directly removed from the network to enhance the security of the entire network.…”