【作者】 姚兰；

【导师】 于戈； 高福祥；

【作者基本信息】 东北大学 ， 计算机软件与理论， 2008， 博士

【摘要】 随着微处理器、存储器和无线通信技术的发展,出现了体积更小、价格更低的具有感知、运算和通信能力的微型传感节点。由此类节点协同工作,构成的无线传感器网路(Wireless Sensor Networks, WSN),采用自组织的方式,获取、处理被监测区域的若干属性数据,为观察者提供数据查询、统计等服务。无线传感器网络被广泛应用在无人值守区域的数据监测(包括环境保护、森林防火、灾难预测、精细农业等),和军事作战,反恐安全,交通流量控制等领域,关系到人们生产、生活中的重大问题,因此得到学术界的广泛关注。由于无线传感器网络的节点能量不可再生,通信带宽有限,节点存储和运算能力有限,使得Internet中的网络技术不能被移植到无线传感器网络中；无线自组网在能量供给、节点运算能力等方面与WSN也有本质区别。因此必须为WSN建立新的网络体系结构。目前研究者的研究热点集中在通信协议、安全性与可靠性、测试平台与测试工具、数据管理技术、节点定位与拓扑发现和节点系统等。WSN体系结构中网络层的主要任务是实现路由技术。无线传感器网络采用多跳路由的数据传输机制。节点能量供应等方面的限制要求路由算法简便、存储信息量小、节点间通信量小等。平面路由协议中的节点地位平等,可以防止瓶颈的产生。分簇路由协议在能耗方面表现突出。由于WSN采用的开放式的无线通信信道和节点的无人监守,使WSN在安全性方面面临很大挑战。其中针对网络层的攻击可以造成信息中断,篡改,部分被隔离或全网死亡等。因此,在研究路由协议的基础上,设计和提出抵御入侵且提供节点认证的安全路由协议十分必要。本文在介绍了无线传感器网络的基本概念和典型应用的基础上,研究了WSN中的已有路由协议及其安全性,提出了路由协议设计原则,给出了在网络层进行安全性研究的框架。依据框架结构,提出了基于确定度的安全路由协议,它以确定度为依据,选取密钥,动态调整密钥长度和运算复杂度,解决了为不同应用需求提供不同等级安全路由的问题,并在MICAZ无线传感器网络套件上实现了该协议,进行了通信量和能耗分析。在带有入侵检测的安全路由协议中,提出了一个分簇的路由协议。在协议的认证阶段,发动簇内节点,对当选簇头进行分布式地身份验证,降低了对基站的依赖度。NS-2模拟结果表明,此协议在网络连通率,入侵容忍能力、能耗方面均表现良好。在考虑多个QoS指标的前提下,研究并提出了多媒体传感器网络中的安全路由协议。此协议为多媒体传感器节点提供低延迟、高效节能的数据投递服务。在多媒体数据包中加入了伪随机码,以很小的数据冗余和运算开销,保证了多媒体数据的安全性。最后对当前国内外进行无线传感器网络相关问题研究时涉及的仿真、测试手段进行了分析研究,并提出了适合于路由协议研究的测试平台的设计和实现。平台由硬件系统和软件系统两部分组成。自行开发的硬件节点处理器采用ATmega128L,无线收发芯片采用Chipcon公司生产的CC2420,并植入了TinyOS2.0操作系统。软件平台借鉴了中科院软件所的WTS2.0系统。测试平台解决了在模拟环境中因模型简化、缺少突发情况造成的数据偏差问题。为今后的路由协议研究工作提供了先进的测试环境。上述协议和算法以无线传感器网络中路由协议的节能性和安全性为出发点,结合了密码技术、路由发现技术和伪随机码技术等,在网络层的安全框架内占有重要地位。本文通过实验,对文中提出算法和协议的能耗、网络连通率、对入侵的抵御能力等指标进行了测试,并对实验结果进行了分析和评价。更多还原

【Abstract】 Technology advances in micro-processors, memories and wireless communications has led to the emergence of micro sensors which are small in size and low-cost. These wireless senor nodes have the capabilities of sensing, data processing and communication. They collaborate with each other and leverage the idea of Wireless Sensor Networks (WSN) in a self-organized way. Generally, a sensor node is responsible for sensing data from the monitored objects, doing some simple computation locally and sending the partially processed data back to the observers for the services such as data querying and statistic. WSN can be deployed into the unmanned area, and so it has a wide range of applications, such as environment preservation, disaster forecasting, precision agriculture, traffic control, and military. Nowadays, the academic community shows great interests in WSN because it has become a significant problem relating to our daily life and production.For the reasons that the sensor energy cannot be regenerated and the communication bandwidth, memory and computing powers are extremely limited, the traditional technologies for Internet cannot be migrated to WSN. Ad Hoc networks are also different essentially from WSN in the directions of energy supply, computing power on node. Therefore, a new architecture especially for WSN should be established. Most research work are concentrated on commutation protocols, security and reliability, testing platform and tools, data management, node location and topology discovery, hardware system and so on.The main task of the network layer in WSN architecture is to implement multi-hop routing for data transmission. The hard limitations of sensor energy and other resources require that the routing algorithms should be simple and need a low volume of information and communication. However. the open wireless channel and the unmanned working style make it a great challenge to the security of WSN. Attacks at the routing layer can result in information interruption and sophistication, node isolation, and even worse network paralysis. Therefore, it is quite necessary to presents the routing protocols with intrusion resistance and security guarantee.This dissertation introduces the basic concepts and typical applications of WSN first. Then, based on the deep analysis on the existing routing protocols and their security problems, it suggests the framework for security research in routing layer. According to the security framework in routing layer, a certainty-based secure routing protocol CBSR is proposed. CBSR takes the certainty as reference to choose keys, and adjusts the length of keys along with the computation complexity dynamically. CBSR solves the problem of providing different security levels for different applications. Based on the idea of clustered routing, the security protocol with intrusion detection named DID is proposed. It uses the hierarchical routing method. Non-Cluster Head nodes validate the Cluster Head nodes in a distributed way, which can reduce the dependency on the sink. The features of connectivity, intrusion tolerance and energy consumption in DID are also discussed intensively in this dissertation. DID is a good reference for the research of distributed node identification validation. Considering several QoS parameters, the dissertation presents a secure routing protocol REAR which is suitable for multimedia WSN. REAR can provide a kind of low-delay and energy-efficient data delivery service for multimedia sensor nodes. It adds pseudo-random codes into the multimedia messages so that data security can be guaranteed at the cost of few redundancy and computation. REAR is an explorer for the security routing method under multiple performance requirements and contributes to the future research on multimedia WSN with QoS. In the end of this dissertation, the related research methods for simulation and testing in WSN are analyzed. The design and implementation of a testing platform fitting for the routing protocol research is given. The self-developed sensor node uses ATmega128L as the micro-processor, CC2420 as the wireless transceiver, and TinyOS2.0 as the operation system. The testing platform solves the problem of result deviation that is derived from model simplification. It is an advanced testing environment for future research on routing protocols.The protocols and algorithms mentioned above are designed for routing security and energy-efficiency in WSN. The technologies of cryptography, routing discovery, pseudo-random codes are combined. The security mechanisms, such as identification authentication, information validation, intrusion detection, are all implemented. The solutions play an important role in the security framework of routing layer and must benefit the related research. Moreover, the performance of energy consumption, network connectivity and intrusion resistance are also tested by simulation experiments. The experiment results are analyzed and evaluated in this dissertation.更多还原