TinyPK: securing sensor networks with public key technology

ABSTRACT

Wireless networks of miniaturized, low-power sensor/actuator devices are poised to become widely used in commercial and military environments. The communication security problems for these networks are exacerbated by the limited power and energy of the sensor devices. In this paper, we describe the design and implementation of public-key-(PK)-based protocols that allow authentication and key agreement between a sensor network and a third party as well as between two sensor networks. Our work is novel in that PK technology was commonly believed to be too inefficient for use on low-power devices. As part of our solution, we exploit the efficiency of public operations in the RSA cryptosystem and design protocols that place the computationally expensive operations on the parties external to the sensor network, when possible. Our protocols have been implemented on UC Berkeley MICA2 motes using the TinyOS development environment.

REFERENCES

• 1: B. Atwood, B. Warneke, K.S.J. Pister, "Preliminary Circuits for Smart Dust," Proceedings of the 2000 Southwest Symposium on Mixed-Signal Design, San Diego, California, February 27-29, 2000, pp. 87--92.
• 2: Daniel V. Bailey , Daniel Coffin , Adam Elbirt , Joseph H. Silverman , Adam D. Woodbury, NTRU in Constrained Devices, Proceedings of the Third International Workshop on Cryptographic Hardware and Embedded Systems, p.262-272, May 14-16, 2001
• 3: D. Boneh, "Twenty years of attacks on the RSA cryptosystem," Notices of the American Mathematical Society (AMS), Vol. 46, No. 2, pp. 203--213, 1999.
• 4: D. Boneh and H. Shacham, "Fast variants of RSA," in RSA Laboratories' Cryptobytes, vol 5 no. 1, pages 1--8, Winter/Spring 2002.
• 5: D. Carman, P. Kruus, and B. Matt, "Constraints and Approaches for Distributed Sensor Network Security," NAI Labs, NAI Labs Technical Report #00-010, 1 September 2001.
• 6: Crossbow Technology, Inc., "Mote In-Network Programming User Reference," http://www.xbow.com/Support/Support_pdf_files/Xnp.pdf.
• 7: J. Deng, R. Han, and S. Mishra, "A Performance Evaluation of Intrusion-Tolerant Routing in Wireless Sensor Networks," in F. Zhao and L. Guibas (Eds.), IPSN 2003, LNCS 2634, Springer-Verlag, pp.349--364, 2003.
• 8: W. Diffie and M.E. Hellman, "New Directions in Cryptography," IEEE Transactions on Information Theory, vol. IT-22, no. 6, pp. 644--654", 1976.
• 9: Nils Gura , Sheueling Chang Shantz , Hans Eberle , Sumit Gupta , Vipul Gupta , Daniel Finchelstein , Edouard Goupy , Douglas Stebila, An End-to-End Systems Approach to Elliptic Curve Cryptography, Revised Papers from the 4th International Workshop on Cryptographic Hardware and Embedded Systems, p.349-365, August 13-15, 2002
• 10: Jason Hill , Robert Szewczyk , Alec Woo , Seth Hollar , David Culler , Kristofer Pister, System architecture directions for networked sensors, Proceedings of the ninth international conference on Architectural support for programming languages and operating systems, p.93-104, November 2000, Cambridge, Massachusetts, United States
• 11: M. Horton, D. Culler, K.S.J. Pister, J. Hill, R. Szewczyk, and A. Woo, "MICA: The Commercialization of Microsensor Motes," Sensor, April 2002.
• 12: Chris Karlof , Naveen Sastry , David Wagner, TinySec: a link layer security architecture for wireless sensor networks, Proceedings of the 2nd international conference on Embedded networked sensor systems, November 03-05, 2004, Baltimore, MD, USA [doi>10.1145/1031495.1031515]
• 13: Providing Robust and Ubiquitous Security Support for Mobile Ad Hoc Networks, Proceedings of the Ninth International Conference on Network Protocols, p.251, November 11-14, 2001
• 14: Arjen K. Lenstra , Eric R. Verheul, The XTR Public Key System, Proceedings of the 20th Annual International Cryptology Conference on Advances in Cryptology, p.1-19, August 20-24, 2000
• 15: D. Malan, Crypto for Tiny Objects, TR-04-04, Computer Science Group, Harvard University, 2004.
• 16: Adrian Perrig , Robert Szewczyk , Victor Wen , David Culler , J. D. Tygar, SPINS: security protocols for sensor netowrks, Proceedings of the 7th annual international conference on Mobile computing and networking, p.189-199, July 2001, Rome, Italy [doi>10.1145/381677.381696]
• 17: R. L. Rivest , A. Shamir , L. Adleman, A method for obtaining digital signatures and public-key cryptosystems, Communications of the ACM, v.21 n.2, p.120-126, Feb. 1978 [doi>10.1145/359340.359342]
• 18: Anthony D. Wood , John A. Stankovic, Denial of Service in Sensor Networks, Computer, v.35 n.10, p.54-62, October 2002 [doi>10.1109/MC.2002.1039518]

INDEX TERMS

Primary Classification:
  C. Computer Systems Organization
  C.2 COMPUTER-COMMUNICATION NETWORKS
      C.2.0 General
          Subjects: Security and protection (e.g., firewalls)

General Terms:
Algorithms, Performance, Security

Keywords:
TinyOS, authentication, cryptography, diffie-hellman, encryption, key management, public key (PK), rivest shamir adelman (RSA), sensor networks