WO2011131085A1

WO2011131085A1 - Method, system, terminal, destination access node and access controller for low-overhead sensor network access control

Info

Publication number: WO2011131085A1
Application number: PCT/CN2011/072454
Authority: WO
Inventors: 宋起柱; 杜志强; 铁满霞; 李琴; 曹军; 王文俭; 陶洪波
Original assignee: 国家无线电监测中心检测中心; 西安西电捷通无线网络通信股份有限公司
Priority date: 2010-04-22
Filing date: 2011-04-06
Publication date: 2011-10-27
Also published as: CN101902462A; CN101902462B

Abstract

A method, system, terminal, destination access node and an access controller for low-overhead sensor network access control solves the problem of requiring online participation of the access controller and consuming network node resources in the prior art. The method includes the following steps that: 1) a Destination access Node (DN) in a sensor network receives a user authentication request message sent by a user; 2) the DN, according to the user authentication request message, sends a user authentication response message to the user; 3) an Access Controller (AC) receives a node authentication request message sent by the user, wherein the node authentication request message is constructed by the user according to the user authentication response message sent by the DN; 4) the AC, according to a authentication result, sends a node authentication response message to the user; 5) the DN receives an access request message sent by the user, wherein the access request message is constructed by the user according to the node authentication response message received from the AC; 6) the DN, according to the access request message, performs authorization management on the user and sends an access request response message to the user.

Description

一种低开销的传感器网络访问控制方法、 ***、终端、目的访问节点及访问控制器本申请要求在 201 0年 4月 22 日提交中国专利局、申请号为 201 01 0153096. 7 , 发明名称为 "一种低开销的传感器网络访问控制方法及系统" 的中国专利申请的优先权，其全部内容通过引用结合在本申请中。技术领域 Low-overhead sensor network access control method, system, terminal, destination access node and access controller The application is submitted to the Chinese Patent Office on April 22, 2010, and the application number is 201 01 0153096. The priority of a Chinese patent application for "a low-cost sensor network access control method and system" is incorporated herein by reference. Technical field

本发明属信息安全技术中的无线网络安全应用领域，尤其涉及一种低开销的传感器网络访问控制方法、 ***、终端、目的访问节点及访问控制器。背景技术 The invention belongs to the field of wireless network security application in information security technology, and in particular relates to a low-cost sensor network access control method, system, terminal, destination access node and access controller. Background technique

无线传感器网络由大量具有感知能力的节点构成，以 ad-hoc方式自组成网，为用户提供数据的收集、处理、传输等服务。访问控制机制用于保护传感器网络数据，禁止非法用户的访问，控制合法用户的访问权限，是传感器网络的基本安全服务之一。 The wireless sensor network consists of a large number of nodes with perceptual capabilities, and self-assembles the network in an ad-hoc manner to provide users with data collection, processing, and transmission services. The access control mechanism is used to protect the sensor network data, prohibit unauthorized users from accessing, and control the access rights of legitimate users. It is one of the basic security services of the sensor network.

现有的传感器网络访问控制方法中，对于要求有访问控制器在线参与的情形，在传感器网络中的目的访问节点收到用户的访问请求后，即展开对用户身份的认证，并且通常是通过传感器网络中其他的节点转发用户的认证信息至访问控制器，由访问控制器对用户的身份进行认证，并将认证结果以及相应的授权信息再经过中间节点转发至目的访问节点，以此实现对网络用户的访问控制。这种传感器网络访问控制方法，在有大量用户频繁访问网络时将造成网络中转发节点产生大量的通信开销，对于节点资源严格受限的传感器网络，这种方法将很快耗尽某些网络节点的资源，极大影响网络的使用成本和寿命。而传感器网络用户通常情况下是资源受限的，如笔记本电脑、 PDA 等。发明内容 In the existing sensor network access control method, for the case where the access controller is required to participate online, after the destination access node in the sensor network receives the user's access request, the user identity is authenticated, and usually through the sensor. The other nodes in the network forward the user's authentication information to the access controller, and the access controller authenticates the identity of the user, and forwards the authentication result and the corresponding authorization information to the destination access node through the intermediate node, thereby implementing the network. User access control. The sensor network access control method will cause a large amount of communication overhead for the forwarding node in the network when a large number of users frequently access the network. For a sensor network with strictly restricted node resources, this method will quickly exhaust some network nodes. Resources, greatly affect the cost of use and life of the network. Sensor network users are often resource-constrained, such as laptops, PDAs, and so on. Summary of the invention

为了解决背景技术中存在的上述技术问题，本发明提出一种不需要传感器网络中的其他节点参与认证过程的、低开销的传感器网络访问控制方法、 ***、终端、目的访问节点及访问控制器。 In order to solve the above technical problems existing in the background art, the present invention proposes that no sensing is required. Other nodes in the network participate in the authentication process, low-cost sensor network access control methods, systems, terminals, destination access nodes, and access controllers.

本发明的技术解决方案是： The technical solution of the present invention is:

本发明提供了一种低开销的传感器网络访问控制方法，包括以下步骤： The invention provides a low-cost sensor network access control method, which comprises the following steps:

1 )传感器网络中的目的访问节点匪接收用户 User发送的用户认证请求消息； 1) The destination access node in the sensor network receives the user authentication request message sent by the user User;

2 )所述目的访问节点 DN根据所述用户认证请求消息，向所述用户 User发送用户认证响应消息； 2) the destination access node DN sends a user authentication response message to the user User according to the user authentication request message;

3 )访问控制器 AC接收所述用户 User发送的节点认证请求消息，所述节点认证请求消息是所述用户 User结合所述目的访问节点 DN发送的用户认证响应消息构造的； The access controller AC receives the node authentication request message sent by the user user, and the node authentication request message is constructed by the user user in combination with the user authentication response message sent by the destination access node DN;

4 )所述访问控制器 AC根据认证结果向所述用户 User发送节点认证响应消息； 4) the access controller AC sends a node authentication response message to the user User according to the authentication result;

5 )所述目的访问节点 DN接收所述用户 Us er发送的访问请求消息，所述访问请求消息是所述用户 User根据从访问控制器 AC收到的节点认证响应消息构造的； 5) The destination access node DN receives an access request message sent by the user Us er, where the access request message is constructed by the user user according to a node authentication response message received from the access controller AC;

6 )所述目的访问节点匪根据所述访问请求消息对所述用户 User进行授权管理并发送访问请求响应消息给所述用户 User。 6) The destination access node performs authorization management on the user User according to the access request message and sends an access request response message to the user User.

本发明还提供了一种低开销的传感器网络访问控制***，包括目的访问节点和访问控制器，其中： The invention also provides a low-overhead sensor network access control system, including a destination access node and an access controller, wherein:

所述目的访问节点 DN , 用于接收用户 Us er发送的用户认证请求消息，并根据所述用户认证请求消息，向所述用户 User发送用户认证响应消息；所述访问控制器 AC , 用于接收所述用户 User发送的节点认证请求消息，所述节点认证请求消息是所述用户 User结合所述目的访问节点匪发送的用户认证响应消息构造的；并根据认证结果向所述用户 User发送节点认证响应消息； The destination access node DN is configured to receive a user authentication request message sent by the user ser, and send a user authentication response message to the user User according to the user authentication request message; the access controller AC is configured to receive a node authentication request message sent by the user User, where the node authentication request message is configured by the user user in combination with the user authentication response message sent by the destination access node, and sends a node authentication to the user User according to the authentication result. Response message

所述目的访问节点匪还用于接收所述用户 User发送的访问请求消息，所述访问请求消息是所述用户 Us er根据从访问控制器 AC收到的节点认证响应消息构造的；并根据所述访问请求消息对所述用户 User进行授权管理并发送访问请求响应消息给所述用户 U s e r。 The destination access node is further configured to receive an access request message sent by the user User, where the access request message is configured by the user User according to a node authentication response message received from the access controller AC; The access request message authorizes the user User and sends a visit A request response message is sent to the user User.

本发明还提供了一种低开销的传感器网络访问控制***，所述低开销的传感器网络访问控制***包括用户 User、目的访问节点 DN以及访问控制器 AC; 所述用户 User向目的访问节点匪发送用户认证请求消息；所述目的访问节点 DN收到用户认证请求消息后向用户 User发送用户认证响应消息；所述用户 User结合目的访问节点 DN的认证响应消息构造节点认证请求消息发送给访问控制器 AC; 所述访问控制器 AC根据认证结果向用户 User发送节点认证响应消息；所述用户 User根据从访问控制器 AC收到的节点认证响应消息构造访问请求消息发送给目的访问节点匪；所述目的访问节点匪对用户 User的访问请求进行授权管理并发送访问请求响应消息给用户 User。 The present invention also provides a low-overhead sensor network access control system, the low-overhead sensor network access control system including a user User, a destination access node DN, and an access controller AC; the user User sends to the destination access node a user authentication request message; the destination access node DN sends a user authentication response message to the user User after receiving the user authentication request message; and the user user sends a node authentication request message to the access controller according to the authentication response message of the destination access node DN. The access controller AC sends a node authentication response message to the user User according to the authentication result; the user user constructs an access request message according to the node authentication response message received from the access controller AC, and sends the message to the destination access node. The destination access node performs authorization management on the access request of the user User and sends an access request response message to the user User.

本发明还提供一种低开销的传感器网络访问终端，包括： The present invention also provides a low-overhead sensor network access terminal, including:

用户认证请求消息发送单元，用于向传感器网络中的目的访问节点 DN发送用户认证请求消息； a user authentication request message sending unit, configured to send a user authentication request message to the destination access node DN in the sensor network;

用户认证响应消息接收单元，用于接收所述目的访问节点匪根据所述用户认证请求消息，向所述用户 U s e r发送用户认证响应消息； a user authentication response message receiving unit, configured to receive the destination access node, and send a user authentication response message to the user U s e r according to the user authentication request message;

节点认证请求消息发送单元，用于向访问控制器 AC发送节点认证请求消息，所述节点认证请求消息是所述用户 User结合所述目的访问节点 DN发送的用户认证响应消息构造的； a node authentication request message sending unit, configured to send a node authentication request message to the access controller AC, where the node authentication request message is constructed by the user user in combination with the user authentication response message sent by the destination access node DN;

节点认证响应消息接收单元，用于接收所述访问控制器 AC根据认证结果向所述用户 User发送节点认证响应消息； a node authentication response message receiving unit, configured to receive, by the access controller, a node authentication response message to the user User according to the authentication result;

访问请求消息发送单元，用于向所述目的访问节点匪发送所访问请求消息，所述访问请求消息是所述用户 User根据从访问控制器 AC收到的节点认证响应消息构造的； An access request message sending unit, configured to send the accessed request message to the destination access node, where the access request message is constructed by the user user according to a node authentication response message received from the access controller AC;

访问请求响应消息接收单元，用于接收所述目的访问节点匪根据所述访问请求消息对所述用户 User进行授权管理并发送的访问请求响应消息。 The access request response message receiving unit is configured to receive an access request response message that is authorized and managed by the destination access node according to the access request message.

本发明还提供一种低开销的传感器网络访问控制***中的目的访问节点，用于： The present invention also provides a destination access node in a low overhead sensor network access control system for:

接收用户 Us er发送的用户认证请求消息，并根据所述用户认证请求消息，向所述用户 User发送用户认证响应消息；接收所述用户 User发送的访问请求消息，所述访问请求消息是所述用户 User根据从访问控制器 AC收到的节点认证响应消息构造的；并根据所述访问请求消息对所述用户 User进行授权管理并发送访问请求响应消息给所述用户 User ; Receiving a user authentication request message sent by the user ser, and sending a user authentication response message to the user User according to the user authentication request message; Receiving an access request message sent by the user User, where the access request message is configured by the user user according to a node authentication response message received from the access controller AC; and performing the user user according to the access request message. Authorizing management and sending an access request response message to the user User;

节点认证响应消息生成过程为：所述访问控制器 AC接收所述用户 User发送的节点认证请求消息，所述节点认证请求消息是所述用户 User结合所述目的访问节点匪发送的用户认证响应消息构造的；并根据认证结果向所述用户 User发送节点认证响应消息。 The node authentication response message generating process is: the access controller AC receives a node authentication request message sent by the user User, and the node authentication request message is a user authentication response message sent by the user user in conjunction with the destination access node Constructed; and sending a node authentication response message to the user User according to the authentication result.

本发明还提供一种低开销的传感器网络访问控制***的访问控制器，用于： The present invention also provides an access controller for a low overhead sensor network access control system for:

接收用户 User发送的节点认证请求消息，所述节点认证请求消息是所述用户 User结合所述目的访问节点匪发送的用户认证响应消息构造的；并根据认证结果向所述用户 Us er发送节点认证响应消息，以供用户 Us er根据所述节点认证响应消息构造向访问目的节点发送的访问请求消息，并由目的访问节点根据所述访问请求消息对所述用户 User进行授权管理。 Receiving a node authentication request message sent by the user User, where the node authentication request message is constructed by the user user in combination with the user authentication response message sent by the destination access node, and sending the node authentication to the user User according to the authentication result. Responding to the message, for the user User to construct an access request message sent to the access destination node according to the node authentication response message, and the destination access node performs authorization management on the user User according to the access request message.

本发明的优点是：本发明提出一种低开销的传感器网络访问控制方法、 ***、终端、目的访问节点及访问控制器，在传感器网络中的目的访问节点认证用户的过程中，由用户转发目的访问节点和访问控制器之间的认证信息，然后由目的访问节点对用户进行授权管理，不需要传感器网络中的其他节点参与认证过程，从而避免网络中的节点因转发用户和目的访问节点间的认证信息而产生通信开销，有效节约了节点的资源，实现一种轻量级和高效的访问控制，尤其对于存在大量用户频繁访问的传感器网络，能够增加网络的寿命，降低使用成本。附图说明 The advantages of the present invention are as follows: The present invention provides a low-overhead sensor network access control method, system, terminal, destination access node, and access controller, which are forwarded by the user in the process of authenticating the user in the sensor network in the sensor network. Accessing the authentication information between the node and the access controller, and then authorizing the user by the destination access node, does not require other nodes in the sensor network to participate in the authentication process, thereby avoiding nodes in the network from forwarding between the user and the destination access node. The communication overhead is generated by the authentication information, which effectively saves the resources of the node and realizes a lightweight and efficient access control. Especially for a sensor network with frequent access by a large number of users, the lifetime of the network can be increased and the use cost can be reduced. DRAWINGS

图 1为本发明所提供的低开销的传感器网络访问控制方法的流程图。具体实施方式 FIG. 1 is a flowchart of a low-overhead sensor network access control method provided by the present invention. Detailed ways

参见图 1 , 本发明提供了一种低开销的传感器网络访问控制方法，在协议运行前，用户 User和访问控制器 AC之间、目的访问节点 DN和访问控制器 AC之间均已共享密钥，根据本发明的优选实施例，该方法包括以下步骤： Referring to FIG. 1, the present invention provides a low-overhead sensor network access control method, in a protocol. Before the operation, a key is shared between the user User and the access controller AC, between the destination access node DN and the access controller AC. According to a preferred embodiment of the present invention, the method comprises the following steps:

1 )用户 User向传感器网络中的目的访问节点 DN发送用户认证请求消息； 1) The user User sends a user authentication request message to the destination access node DN in the sensor network;

2 ) 目的访问节点匪向用户 User发送用户认证响应消息； 2) The destination access node sends a user authentication response message to the user User;

3 )用户 User结合目的访问节点匪的用户认证响应消息构造节点认证请求消息发送给访问控制器 AC; 3) the user user combined with the user authentication response message of the destination access node to construct a node authentication request message is sent to the access controller AC;

4 )访问控制器 AC根据认证结果向用户 User发送节点认证响应消息； 4) The access controller AC sends a node authentication response message to the user User according to the authentication result;

5 )用户 User根据从访问控制器 AC收到的节点认证响应消息构造访问请求消息发送给目的访问节点匪； 5) The user User constructs an access request message according to the node authentication response message received from the access controller AC, and sends the message to the destination access node.

6) 目的访问节点匪根据所述访问请求消息对用户 User进行授权管理，若合法则发送访问请求响应消息给用户 U s e r。 6) The destination access node performs authorization management on the user User according to the access request message, and sends an access request response message to the user U s e r if it is legal.

上述步骤 1 ) 的具体实现方式是： The specific implementation of the above step 1) is:

用户 User首先向传感器网络中的目的访问节点 DN发送用户认证请求消息，其中包含用户 User产生的询问。该询问可以有多种形式，比如可以是 ***产生的一个随机数。 The user User first sends a user authentication request message to the destination access node DN in the sensor network, which contains the query generated by the user User. The query can take many forms, such as a random number generated by the system.

上述步骤 2 ) 的具体实现方式是： The specific implementation of step 2) above is:

目的访问节点匪收到用户 User的认证请求后，产生询问 N₂, 并利用与访问控制器 AC之间的共享密钥 K_AC,_DN计算 ETfEQ^DN, NJ ,然后将 NJ |N₂| |ET^为认证响应消息发送给用户 User。其中 E为一种对称加密算法， "| |" 表示为串联设置，下同。 After receiving the authentication request of the user User, the destination access node generates an inquiry N ₂ and calculates ETfEQ^DN, NJ by using the shared key K _AC , _DN with the access controller AC, and then NJ |N ₂ | ET^ is sent to the user User for the authentication response message. Where E is a symmetric encryption algorithm, "| |" is expressed as a concatenation setting, the same below.

上述步骤 3 ) 的具体实现方式是： The specific implementation of step 3 above is:

用户 User收到目的访问节点 DN的用户认证响应消息后，首先判断消息中的询问是否是自己选择的询问，若不是，直接丟弃该响应消息；若是，则利用与访问控制器 AC之间的共享密钥 K_{A ser}计算 ET₂=E (K_AC,u_ser, NJ , 计算消息完整性鉴别码 MId=H (K_{A ser}, I I ID_DN I I EL I I ET₂) , 构造节点认证请求消息 NJ |ID_DN| IETJ |ET₂| IMIC^发送给访问控制器 AC。其中 ID_DN是目的访问节点匪的身份标识， H为一种单向哈希函数，下同。 After receiving the user authentication response message of the destination access node DN, the user User first determines whether the inquiry in the message is an inquiry selected by the user, and if not, directly discards the response message; if yes, using the access controller AC The shared key K _{A ser} calculates ET ₂ =E (K _AC , u _ser , NJ , calculates the message integrity authentication code MId=H (K _{A ser} , II ID _DN II EL II ET ₂ ), constructs a node authentication request message NJ |ID _DN | IETJ |ET ₂ | IMIC^ is sent to the access controller AC. ID _DN is the identity of the destination access node, and H is a one-way hash function, the same below.

上述步骤 4 ) 的具体实现方式是： The specific implementation of step 4) above is:

访问控制器 AC收到用户 U s e r的节点认证请求消息后，首先根据 Ml 判断消息的完整性，若不完整，丟弃该消息；若完整，利用与目的访问节点匪之间的共享密钥 K_AC,_DN解密 ET₁ 若解密后得到的与用户 User在步骤 3) 中发送的^ 不相等，访问控制器 AC构造节点认证响应消息^| I ID_DN| |Res (DN) I |MIC₂发送给用户 User, 其中， Res (DN)=Fai lure, 表示访问控制器 AC对目的访问节点匪鉴别失败，其中 MICHUKAOr, |ID_DN| |Res(DN));若解密后得到的^与用户 User 在步骤 3) 中发送的相等，访问控制器 AC利用与用户 User共享的密钥 K_AC,_User解密 ET₂, 若解密后得到的与用户 User在步骤 3)中发送的不相等，终止鉴别；若解密后得到的与用户 User在步骤 3) 中发送的相等，访问控制器 AC生成用户 User和目的访问节点 DN间的会话密钥 K_{D s}„, 并根据用户 User的身份标识查询访问控制列表 ACL, 获得用户 User的访问控制信息 ACL_US„, 连同 User的访问期限 T_V, 利用 K_AC,_DN计算 ET₃=E(K_AC,_DN, IDJ |K_DN, J ITVI |ACL_USER) , 并利用 K_AC,_USER 计算 ET₄=E(K_AC,_Us„,K_{D ser}) , 计算消息鉴别码 MIC₂=H (K_AC,_User, N! I I ID_DN I I Res (DN) I |ET₃| I ET₄) , 构造节点认证响应消息 NJ I ID_DN| I Res (DN) I |ET₃| |ET₄| |MIC₂发送给用户 User , 其中 Res (DN)=True表示访问控制器 AC对目的访问节点 DN鉴别成功。 After receiving the node authentication request message of the user U ser, the access controller AC first determines the cancellation according to M1. The integrity of the message, if not complete, discard the message; if complete, use the shared key K _AC between the destination access node and the _{DN to} decrypt the ET ₁ if decrypted and sent by the user User in step 3) ^ is not equal, access controller AC construction node authentication response message ^| I ID _DN | | Res (DN) I | MIC _{2 is} sent to user User, where Res (DN) = Fai lure, indicating access controller AC pair The destination access node 匪 authentication fails, where MICHUKAOr, |ID _DN | |Res(DN)); if the decrypted ^ is equal to the user User sent in step 3), the access controller AC utilizes the secret shared with the user User. The key K _AC , _User decrypts ET ₂ , and if the decryption is not equal to the one sent by the user User in step 3), the authentication is terminated; if the decrypted result is equal to that sent by the user User in step 3), the controller is accessed. The AC generates a session key K _{D s} „ between the user User and the destination access node DN, and queries the access control list ACL according to the identity of the user User, and obtains the access control information ACL _US „ of the user User, together with the access period T _{V of the user.} , using K _AC , _{DN to} calculate ET ₃ =E(K _AC , _DN , IDJ | K _DN , J ITVI | ACL _USER ) , and use K _AC , _{USER to} calculate ET ₄ = E (K _AC , _Us „, K _{D ser} ), calculate the message authentication code MIC ₂ =H (K _AC , _User , N! II ID _DN II Res (DN) I |ET ₃ | I ET ₄ ) , Construct Node Authentication Response Message NJ I ID _DN | I Res (DN) I |ET ₃ | |ET ₄ | |MIC ₂ Send to User User, where Res (DN)=True indicates that the access controller AC successfully authenticates the destination access node DN.

上述步骤 5 ) 的具体实现方式是： The specific implementation of the above step 5) is:

用户 User收到访问控制器 AC发送的节点认证响应消息后，首先判断询问是否是自己选择的询问，若不是，丟弃该响应消息；若是，根据 MIC₂判断消息的完整性，若不完整，丟弃该消息；若完整，用户 User才艮据 Res (DN)的取值判断目的访问节点匪的合法性，若 Res (DN)=Failure, 表示目的访问节点匪非法，用户 User终止访问；若 Res (DN)=True, 表示目的访问节点 DN合法，用户 User解密消息中的 ET₄, 产生询问 N₃, 连同目的访问节点 DN的询问 N₂以及用户 User自己的访问请求 Q_us„利用刚才解密后获得的、与目的访问节点间的会话密钥 K_DMser 计算 ET₅=E(K_DMser,N₂| |N₃| |Q_User) , 计算消息鉴别码 MIC₃=H (K_{D ser},ET₃| |ET₅) , 构造访问请求消息 ΕΤ₃| |ET₅| |MIC₃发送给目的访问节点匪。 After receiving the node authentication response message sent by the controller AC, the user first determines whether the inquiry is an inquiry selected by itself, and if not, discards the response message; if yes, determines the integrity of the message according to the MIC ₂ , if not, Discard the message; if complete, the user User judges the validity of the destination access node according to the value of Res (DN). If Res (DN)=Failure, the destination access node is illegal, and the user User terminates the access; Res (DN)=True, indicating that the destination access node DN is legal, the user User decrypts the ET ₄ in the message, generates the query N ₃ , together with the query N _{2 of the} destination access node DN and the user User's own access request Q _us „ The obtained session key K _DMser with the destination access node calculates ET ₅ =E(K _DMser , N ₂ | |N ₃ | |Q _User ), and calculates the message authentication code MIC ₃ =H (K _{D ser} ,ET ₃ | | ET ₅ ) , Construct an access request message ΕΤ ₃ | |ET ₅ | |MIC _{3 is} sent to the destination access node匪.

上述步骤 6 ) 的具体实现方式是： The specific implementation of the above step 6) is:

目的访问节点匪收到用户 User的访问请求后，首先解密 ET₃, 获得会话密钥 K_{D s}„,才艮据 MIC₃判断消息完整性，若不完整，终止访问；若完整，利用 K_{D s}„ 解密 ET₅ , 判断解密后得到的询问 N₂是否是目的访问节点 DN自己选择的询问 N₂ , 若不是，终止访问；若是，再确认解密 ET₅后获得的 ID_US„是否请求访问的用户 User的身份标识，若不是，终止访问；若是，记录当前时刻 T_c, 从 T_c到（Tc+Tv) 这段时间即为用户 User的访问有效期，用户只能在此有效期内访问网络数据。然后，目的访问节点匪根据 ACL_US„判断用户 User的访问请求 Q_us„是否合法，若不合法，终止访问；若合法，生成应答数据 R_DN , 连同 N₃利用 K_{D s}„计算 ET₆=E (K_{D ser}, N₃ | I R丄计算消息鉴别码 MIC₄=H (K_{D ser}, ET₆) , 构造访问请求响应消息 ET₆ | | MIC₄发送给用户 User。用户 User收到请求响应消息后，首先根据 MIC₄ 判断消息完整性，若不完整，丟弃该消息；若完整，利用 K_{D s}„解密 ET₆ , 判断解密得到的询问^是否自己选择的询问 N₃ , 若不是，丟弃该消息；若是，用户 User保存应答数据 R_DN。后续用户 User与目的访问节点匪之间的访问请求和应答数据均利用 K_DN, _us„加以保护。 After receiving the access request of the user User, the destination access node first decrypts the ET ₃ and obtains the session key K _{D s} „, and judges the message integrity according to the MIC ₃ ; if not, terminates the access; if complete, uses the K _{D s} „ Decryption ET _5, after determining the decrypted inquiry N ₂ whether the object of access node DN their choice inquiry N _2, if not, terminate the access; After if reconfirmed decryption ET ₅ obtained ID _US "whether to request access to a user User The identity, if not, terminates the access; if yes, records the current time T _c , the time from T _c to (Tc + Tv) is the user user's access validity period, the user can only access the network data during this validity period. The destination access node determines whether the user user's access request Q _us is legal according to the ACL _US „, if it is not legal, terminates the access; if it is legal, generates the response data R _DN , together with N ₃ uses K _{D s} „ calculates ET ₆ =E (K _{D ser} , N ₃ | IR丄 calculates the message authentication code MIC ₄ = H (K _{D ser} , ET ₆ ), constructs the access request response message ET ₆ | | MIC _{4 is} sent to the user User. User User receives the request response message After that, firstly, according to the MIC _{4, the} message integrity is judged. If it is not complete, the message is discarded; if it is complete, use K _{D s} „ decrypt ET ₆ to judge whether the decrypted query ^ is the one selected by the user N ₃ , if not, lost The message is discarded; if so, the user User saves the response data R _DN . The access request and response data between the subsequent user User and the destination access node are protected by K _DN , _us „.

本发明还提供了一种低开销的传感器网络访问控制***，该***包括用户 User、目的访问节点匪以及访问控制器 AC; 用户 User向目的访问节点匪发送用户认证请求消息；目的访问节点 DN收到用户认证请求消息后向用户 User 发送用户认证响应消息；用户 Us er结合目的访问节点匪的认证响应消息构造节点认证请求消息发送给访问控制器 AC；访问控制器 AC根据认证结果向用户 User发送节点认证响应消息；用户 User根据从访问控制器 AC收到的节点认证响应消息构造访问请求消息发送给目的访问节点 DN; 目的访问节点 DN对用户 U s e r的访问请求进行授权管理并发送访问请求响应消息给用户 U s e r。 The present invention also provides a low-overhead sensor network access control system, which includes a user User, a destination access node, and an access controller AC; the user User sends a user authentication request message to the destination access node, and the destination access node DN receives After the user authentication request message is sent, the user authentication response message is sent to the user User; the user response is combined with the authentication response message of the destination access node to construct the node authentication request message to the access controller AC; the access controller AC sends the user authentication message according to the authentication result. a node authentication response message; the user User constructs an access request message according to the node authentication response message received from the access controller AC, and sends the access request message to the destination access node DN; the destination access node DN authorizes the access request of the user U ser and sends an access request response. The message is given to the user U ser.

所述目的访问节点 DN , 用于接收用户 Us er发送的用户认证请求消息，并根据所述用户认证请求消息，向所述用户 User发送用户认证响应消息； The destination access node DN is configured to receive a user authentication request message sent by the user Us er, and send a user authentication response message to the user user according to the user authentication request message;

所述访问控制器 AC , 用于接收所述用户 User发送的节点认证请求消息，所述节点认证请求消息是所述用户 User结合所述目的访问节点匪发送的用户认证响应消息构造的；并根据认证结果向所述用户 User发送节点认证响应消息； The access controller AC is configured to receive a node authentication request message sent by the user User, where the node authentication request message is constructed by the user user in combination with the user authentication response message sent by the destination access node; The authentication result sends a node authentication response message to the user User;

所述目的访问节点匪还用于接收所述用户 User发送的访问请求消息，所述访问请求消息是所述用户 Us er根据从访问控制器 AC收到的节点认证响应消息构造的；并根据所述访问请求消息对所述用户 User进行授权管理并发送访问请求响应消息给所述用户 U s e r。 The destination access node 匪 is further configured to receive an access request message sent by the user User, where The access request message is constructed by the user User according to the node authentication response message received from the access controller AC; and authorizing the user User according to the access request message and sending an access request response message to the User U ser.

所述目的访问节点匪，向所述用户 Us er发送的用户认证响应消息，按照以下方式形成： The destination access node 匪, the user authentication response message sent to the user Us er is formed as follows:

所述目的访问节点匪收到用户 User发送的用户认证请求后，产生询问 N₂, 并利用与所述访问控制器 AC之间的共享密钥 K_AC,_DN计算

, 将 | |N₂| IEL作为用户认证响应消息发送给用户 User, 其中， E为对称加密算法，所述是所述用户认证请求消息中携带的用户 U s e r产生的询问 ^。 After receiving the user authentication request sent by the user User, the destination access node generates an inquiry N ₂ and calculates using the shared key K _AC , _DN with the access controller AC.

And sending the | |N ₂ | IEL as a user authentication response message to the user User, where E is a symmetric encryption algorithm, and the inquiry is generated by the user U ser carried in the user authentication request message.

所述访问控制器 AC, 接收的所述用户 User发送的节点认证请求消息，按照以下方式形成： The access controller AC receives the node authentication request message sent by the user User, and is formed as follows:

所述用户 User收到所述目的访问节点匪发送的用户认证响应消息后，判断消息中携带的询问是用户 User选择的询问后，利用与所述访问控制器 AC 之间的共享密钥 K_{A ser}计算 ET₂=E (K_AC,u_ser, NJ , 并计算消息鉴别码

|ID_DN| I EL I |ET₂) , 构造节点认证请求消息 | |ID_DN| |ET₂| |MICi并发送给所述访问控制器 AC的, 其中， 1 是目的访问节点匪的身份标识， H为单向哈希函数。 After receiving the user authentication response message sent by the destination access node, the user User determines that the inquiry carried in the message is an inquiry selected by the user, and uses the shared key K _A with the access controller AC. _Ser calculates ET ₂ =E (K _AC , u _ser , NJ , and calculates the message authentication code

所述访问控制器 AC, 根据认证结果向所述用户 User发送的节点认证响应消息，按照以下方式形成： The access controller AC sends a node authentication response message to the user User according to the authentication result, which is formed as follows:

所述访问控制器 AC收到所述用户 User发送的节点认证请求消息后，在根据消息中携带的 MlC it息判断消息完整后，利用与所述目的访问节点 DN之间的共享密钥 K_Ae,_DN解密 ET₁ 在解密后得到的结果与用户 User发送的相等时，由所述访问控制器 AC利用与所述用户 User共享的密钥 K_Ae,_Us„解密 ET₂, 若解密后得到的结果与所述用户 User发送的相等，则由访问控制器 AC生成用户 User和目的访问节点匪间的会话密钥 K_{D ser}, 并根据所述用户 User的身份标识查询访问控制列表 ACL, 获得所述用户 User的访问控制信息 ACL_US„, 连同 User的访问期限 T" 利用 K_AC,_DN计算 ET₃=E (K_AC,_DN, ID_USER| |K_{D SER}| ITVI |ACL_USER) , 并利用 K_AC,_USER计算 ET₄=E (K_AC,u_SER, K_{D SER}) , 计算消息鉴别码 MIC₂=H (K_AC,_User, I I ID_DN I I Res (DN) I |ET₃| I ET₄) , 构造节点认证响应消息 | I ID_DN| |Res (DN) I |ET₃| |ET₄| |MIC₂发送给所述用户 User, 其中， 1 是所述目的访问节点匪的身份标识， Res (DN)=True表示所述访问控制器 AC对所述目的访问节点 DN鉴别成功，所述 H为单向哈希函数。 After receiving the node authentication request message sent by the user User, the access controller AC uses the shared key K _Ae with the destination access node DN after determining that the message is complete according to the MlC it message carried in the message. When the result obtained by the _DN decryption ET ₁ is equal to that sent by the user User, the access controller AC uses the key K _Ae , _Us „ shared with the user User to decrypt the ET ₂ , if obtained after decryption The result is equal to that sent by the user User, and the access controller AC generates a session key K _{D ser} between the user User and the destination access node, and queries the access control list ACL according to the identity of the user User. The access control information ACL _US „ of the user User, together with the access period T of the user, is calculated using K _AC , _DN ET ₃ = E (K _AC , _DN , ID _USER | | K _{D SER} | ITVI | ACL _USER ) and utilized K _AC , _USER calculates ET ₄ =E (K _AC , u _SER , K _{D SER} ) , calculates the message authentication code MIC ₂ =H (K _AC , _User , II ID _DN II Res (DN) I |ET ₃ | I ET ₄ ), construct node authentication response message | I ID _DN | |Res (DN) I |ET ₃ | |ET ₄ | |MIC _{2 is} sent to the user User, where 1 is the identity of the destination access node, Res (DN)=True The access controller AC successfully authenticates the destination access node DN, and the H is a one-way hash function.

所述目的访问节点 DN接收到的所述访问请求消息，按照以下方式形成：所述用户 User收到所述访问控制器 AC的节点认证响应消息后，在判断询问^是用户 User选择的询问后，根据 MIC₂判断消息的完整性；在消息完整时，用户 User根据 Res (DN)判断目的访问节点匪的合法性，在 Res (DN) =True时，用户 User解密消息中的 ET₄, 产生询问 N₃, 连同目的访问节点 DN的询问 N₂以及用户 User的访问请求 Q_us„利用所述解密后获得的、与目的访问节点间的会话密钥 K_DMser计算 ET₅=E(K_{D ser},N₂| |N₃| IQJ ,计算消息鉴别码 MIC₃=H (K_{D ser}, ΕΤ₃1 |ΕΤ₅) , 构造访问请求消息 ΕΤ₃| |ET₅| |MIC₃发送给目的访问节点匪。 The access request message received by the destination access node DN is formed as follows: after the user User receives the node authentication response message of the access controller AC, after determining that the query ^ is the query selected by the user User According to the MIC ₂ , the integrity of the message is judged; when the message is complete, the user User judges the validity of the destination access node according to Res (DN). When Res (DN) = True, the user User decrypts the ET ₄ in the message, and generates inquiry N _3, together with the query object access node DN N ₂ and access the user's request user Q _us "session key _K DMser between the decryption using the acquired, and the destination access node calculation ET ₅ = E (K _{D ser} , N ₂ | | N ₃ | IQJ , calculate the message authentication code MIC ₃ = H (K _{D ser} , ΕΤ ₃ 1 | ΕΤ ₅ ) , construct the access request message ΕΤ ₃ | | ET ₅ | | MIC _{3 is} sent to the destination access node bandit.

所述目的访问节点匪进一步用于： The destination access node is further used to:

收到用户 User的访问请求后，解密 ET₃, 获得会话密钥 K_{D s}„, 在根据 MIC₃ 判断消息完整后，利用 K_{D s}„解密 ET₅, 在判断解密后得到的询问 N₂是目的访问节点 DN选择的询问 N₂后，再确认解密 ET₅后获得的 ID_US„是否是请求访问的用户 U s e r的身份标识，在是请求访问的用户 U s e r的身份标识时，记录当前时刻 T_c , 确认从 T_c到（Tc+Tv)这段时间即为用户 User的访问有效期，用户只能在此有效期内访问网络数据，所述目的访问节点匪根据 ACL_US„判断所述用户 User的访问请求 Q_us„是否合法，在合法情况，生成应答数据 R_DN, 连同 N₃利用 K_{D s}„计算 ET₆=E(K_{D ser},N₃| IR丄计算消息鉴别码 MIC₄=H(K_{D ser},ET₆) , 构造访问请求响应消息 ET₆| |MIC₄发送给用户 User。 After receiving the access request of the user User, decrypting the ET ₃ and obtaining the session key K _{D s} „, after determining that the message is complete according to the MIC ₃ , using K _{D s} „ decrypt ET ₅ , the query N ₂ obtained after determining the decryption is After accessing the query N ₂ selected by the node DN, it is confirmed that the ID _US obtained after decrypting the ET ₅ is the identity of the user U ser requesting access, and when the identity of the user U ser requesting access is recorded, the current time is recorded. T _c , confirming that the time from T _c to (Tc+Tv) is the access period of the user User, the user can only access the network data during the validity period, and the destination access node determines the user User according to the ACL _US The access request Q _us is legal, in the legal case, the response data R _{DN is} generated, together with N ₃ using K _{D s} „calculate ET ₆ =E(K _{D ser} , N ₃ | IR丄 calculation message authentication code MIC ₄ =H (K _{D ser} , ET ₆ ) , constructing the access request response message ET ₆ | | MIC _{4 is} sent to the user User.

节点认证请求消息发送单元，用于向访问控制器 AC发送节点认证请求消息，所述节点认证请求消息是所述用户 User结合所述目的访问节点 DN发送的用户认证响应消息构造的；节点认证响应消息接收单元，用于接收所述访问控制器 AC根据认证结果向所述用户 User发送节点认证响应消息； a node authentication request message sending unit, configured to send a node authentication request message to the access controller AC, where the node authentication request message is constructed by the user user in combination with the user authentication response message sent by the destination access node DN; a node authentication response message receiving unit, configured to receive, by the access controller AC, a node authentication response message to the user User according to the authentication result;

所述用户认证请求消息发送单元，向传感器网络中的目的访问节点匪发送用户认证请求消息中，包含用户 U s e r产生的询问 ^。 The user authentication request message sending unit sends a user authentication request message to the destination access node in the sensor network, and includes an inquiry ^ generated by the user U s e r .

所述用户认证响应消息接收单元，接收所述目的访问节点匪根据所述用户认证请求消息，向所述用户 User发送的用户认证响应消息，按照以下方式形成： The user authentication response message receiving unit receives the user authentication response message sent by the destination access node to the user User according to the user authentication request message, and is formed as follows:

目的访问节点匪收到用户 User发送的用户认证请求后，产生询问 N₂, 并利用与所述访问控制器 AC之间的共享密钥 K_AC,_DN计算 EL=E (K_{AC; DN}, NJ ,侧 | Ν₂ | I EL 作为用户认证响应消息发送给用户 User , 其中， E为对称加密算法。 After receiving the user authentication request sent by the user User, the destination access node generates an inquiry N ₂ and calculates EL=E (K _{AC; DN} , NJ by using the shared key K _AC , _DN with the access controller _AC; , side | Ν ₂ | I EL is sent to the user User as a user authentication response message, where E is a symmetric encryption algorithm.

所述节点认证请求消息发送单元，向访问控制器 AC发送的节点认证请求消息，按照以下方式形成： The node authentication request message sending unit, the node authentication request message sent to the access controller AC, is formed as follows:

所述用户 User收到所述目的访问节点匪发送的用户认证响应消息后，判断消息中携带的询问是用户 User选择的询问后，利用与所述访问控制器 AC 之间的共享密钥 K_{A ser}计算 ET₂=E (K_AC, u_ser, NJ , 并计算消息鉴别码 MId=H (ΚΛο, υ^, Μ | ID_DN | I EL I | ET₂) , 构造节点认证请求消息 | | ID_DN | I EL I | ET₂ | ^1 发送给所述访问控制器 AC , 其中， ID_DN是目的访问节点匪的身份标识， H为单向哈希函数。 After receiving the user authentication response message sent by the destination access node, the user User determines that the inquiry carried in the message is an inquiry selected by the user, and uses the shared key K _A with the access controller AC. _Ser calculates ET ₂ =E (K _AC , u _ser , NJ , and calculates the message authentication code MId=H (ΚΛο, υ^, Μ | ID _DN | I EL I | ET ₂ ), constructs the node authentication request message | | ID _DN | I EL I | ET ₂ | ^1 is sent to the access controller AC, where ID _DN is the identity of the destination access node, and H is a one-way hash function.

所述节点认证响应消息接收单元，接收的所述访问控制器 AC根据认证结果向所述用户 User发送节点认证响应消息，按照以下方式形成： The node authentication response message receiving unit, the received access controller AC sends a node authentication response message to the user User according to the authentication result, and is formed as follows:

所述访问控制器 AC收到所述用户 User发送的节点认证请求消息，在根据消息中携带的 MlC it息判断消息完整后，利用与所述目的访问节点 DN之间的共享密钥 K_AC,_DN解密 ET₁ 在解密后得到的结果与用户 User在步骤 3 ) 中发送的 ^相等时，由所述访问控制器 AC利用与所述用户 User共享的密钥 K_Ae,_User解密 ET₂, 若解密后得到的结果与所述用户 User在步骤 3)中发送的相等，则由访问控制器 AC生成用户 User和目的访问节点匪间的会话密钥 K_{D ser}, 并根据所述用户 User的身份标识查询访问控制列表 ACL, 获得所述用户 User的访问控制信息 ACL_User , 连同 User 的访问期限 Τ_ν , 利用 K_AC,_DN 计算 ET₃=E (KAC,DN, IDu_Ser I I K_DN,user I I T_V I I ACL_USER) , 并利用 K_AC, 11₈„计算 ET₄=E (K_AC, _USER , K_DN,_USER) , 计算消

| ID_DN| I Res (DN) I I ET₃1 |ET₄) ,构造节点认证响应消息 | |ID_DN| |Res (DN) I |ET₃| |ET₄| |MIC₂发送给所述用户 User, 其中， 1 是所述目的访问节点匪的身份标识， Res (DN) =True表示所述访问控制器 AC对所述目的访问节点 DN鉴别成功，所述 H为单向哈希函数。 The access controller AC receives the node authentication request message sent by the user User, and uses the shared key K _AC between the destination access node DN and the destination access node DN after determining that the message is complete according to the MlC it message carried in the message. when decrypting ^ _DN equal ET ₁ results in the decrypted user user transmitted in step 3), the access controller AC by the user using the user shared key K _Ae, _user decryption ET _2, if The result obtained after decryption is equal to that sent by the user User in step 3), and the session controller K _{D ser} between the user User and the destination access node is generated by the access controller AC, and according to the identity of the user User Identifying the ACL of the query access control list, obtaining the access control information ACL _{User of the user User} , together with the access period Τ _{ν of the} User, calculating ET ₃ =E (KAC, DN, IDu _S er IIK _D N, user with K _AC , _DN IIT _V II ACL _USER ) , and use K _AC , 11 ₈ „calculate ET ₄ =E (K _AC , _USER , K _DN , _USER )

ID _DN | I Res (DN) II ET ₃ 1 | ET ₄ ) , Construct Node Authentication Response Message | |ID _DN | |Res (DN) I |ET ₃ | |ET ₄ | |MIC _{2 is} sent to the user User, where 1 is the identity of the destination access node, and Res (DN) = True indicates that the access controller AC successfully authenticates the destination access node DN, and the H is a one-way hash function.

所述访问请求消息发送单元，向所述目的访问节点匪发送的所访问请求消息，按照以下方式形成： The access request message sending unit, the accessed request message sent to the destination access node, is formed as follows:

所述用户 User收到所述访问控制器 AC的节点认证响应消息后，在判断询问^是用户 User选择的询问后，根据 MIC₂判断消息的完整性；在消息完整时，用户 User根据 Res (DN)判断目的访问节点匪的合法性，在 Res (DN) =True时，用户 User解密消息中的 ET₄, 产生询问 N₃, 连同目的访问节点 DN的询问 N₂以及用户 User的访问请求 Q_us„利用所述解密后获得的、与目的访问节点间的会话密钥 K_DMser计算 ET₅=E (K_{D ser},N₂| |N₃| IQ_User) ,计算消息鉴别码 MIC₃=H (K_{D ser},ET₃| |ET₅) , 构造访问请求消息 ΕΤ₃| |ET₅| |MIC₃发送给目的访问节点匪。 After receiving the node authentication response message of the access controller AC, the user User determines the integrity of the message according to the MIC ₂ after determining that the inquiry is the inquiry selected by the user User; when the message is complete, the user User is according to Res ( DN) judges the validity of the destination access node ,, when Res (DN) = True, the user User decrypts the ET ₄ in the message, generates the query N ₃ , together with the query N _{2 of the} destination access node DN and the access request Q of the user User _us "after the decryption obtained by using, with the session key _K DMser between the access node calculation purposes _{_{ET 5 = E (K D ser}} , N 2 | | N 3 | IQ User), calculating the message authentication code MIC ₃ = H (K _{D ser} , ET ₃ | | ET ₅ ) , constructs an access request message ΕΤ ₃ | | ET ₅ | | MIC _{3 is} sent to the destination access node 匪.

所述访问请求响应消息接收单元，接收的所述目的访问节点匪根据所述访问请求消息对所述用户 User进行授权管理并发送的访问请求响应消息，按照以下方式形成： The access request response message receiving unit, the received access request response message that the destination access node receives and manages the user User according to the access request message, is formed as follows:

目的访问节点 DN收到用户 User的访问请求后，解密 ET₃, 获得会话密钥 K_DN;USER, 在根据 MIC₃判断消息完整后，利用 K_{D S}„解密 ET₅, 在判断解密后得到的询问 N₂是目的访问节点 DN选择的询问 N₂后，再确认解密 ET₅后获得的 ID_US„是否是请求访问的用户 User的身份标识，在是请求访问的用户 User的身份标识时，记录当前时刻 T_c, 确认从 T_c到（Tc+Tv)这段时间即为用户 User的访问有效期，用户只能在此有效期内访问网络数据，所述目的访问节点 DN根据 ACL^^'j断所述用户 User的访问请求 Q_us„是否合法，在合法情况，生成应答数据 R_DN, 连同 N₃利用 K_{D ser}计算 ET₆=E(K_{D ser},N₃| |R丄计算消息鉴别码 MIC₄=H(K_{D ser},ET₆) , 构造访问请求响应消息 ET₆ | | MIC₄发送给用户 User。 After receiving the access request of the user User, the destination access node DN decrypts the ET ₃ and obtains the session key K _{DN; USER} . After determining the complete message according to the MIC ₃ , the K _DS „ decrypt ET _{5 is} used to determine the decryption. N ₂ is the query N ₂ selected by the destination access node DN, and then confirms the ID _US obtained after decrypting the ET ₅ „ is the identity of the user User requesting access, and when the identity of the user User requesting access is recorded, the current record is recorded. time T _c, T _c to confirm from (Tc + Tv) during this time period is the user access to the user, a user can only access the network data within this period, access to the destination node DN the ACL ^^ 'j are oFF accessing said user user requests Q _us "is legitimate, in legal cases, generates a response data R _DN, calculated ET ₆ = E (K _{D ser} together with N ₃ using the _{_{K D ser, N 3 | |}} R Shang calculate the message authentication code MIC ₄ =H(K _{D ser} , ET ₆ ) , construction visit The request request response message ET ₆ | | MIC _{4 is} sent to the user User.

本发明提供的一种低开销的传感器网络访问终端还包括： The low-cost sensor network access terminal provided by the present invention further includes:

请求响应消息处理单元，用于在用户 Us er收到请求响应消息后，根据 MIC₄ 判断消息完整性，在所述请求相应消息完整时，利用 K_{D s}„解密 ET₆ , 判断解密得到的询问 ^是否是用户 User选择的询问 N₃ , 在是用户 User选择的询问 N₃时，用户 User保存应答数据 R_DN , 后续用户 User与目的访问节点匪之间的访问请求和应答数据均利用 K_DN, _us„加以保护。 The request response message processing unit is configured to judge the message integrity according to the MIC ₄ after the user User receives the request response message, and use the K _{D s} „ decrypt ET ₆ to determine the decrypted query when the request corresponding message is complete. ^ Whether it is the query N ₃ selected by the user User. When it is the query N ₃ selected by the user User, the user User saves the response data R _DN , and the access request and response data between the subsequent user User and the destination access node 利用 utilize the K _DN , _us „protected.

本发明提供的一种低开销的传感器网络访问控制***中的目的访问节点 (也可以称为传感器），用于： The invention provides a destination access node (also referred to as a sensor) in a low-cost sensor network access control system for:

接收用户 Us er发送的用户认证请求消息，并根据所述用户认证请求消息，向所述用户 User发送用户认证响应消息； Receiving a user authentication request message sent by the user Us er, and sending a user authentication response message to the user User according to the user authentication request message;

接收所述用户 User发送的访问请求消息，所述访问请求消息是所述用户 User根据从访问控制器 AC收到的节点认证响应消息构造的；并根据所述访问请求消息对所述用户 User进行授权管理并发送访问请求响应消息给所述用户 User ; Receiving an access request message sent by the user User, where the access request message is configured by the user user according to a node authentication response message received from the access controller AC; and performing the user user according to the access request message. Authorizing management and sending an access request response message to the user User;

所述目的访问节点匪收到用户 User发送的用户认证请求后，产生询问 N₂ , 并利用与所述访问控制器 AC之间的共享密钥 K_AC,_DN计算 ETfE G^^ Nj , 将 | N₂ | I EL作为用户认证响应消息发送给用户 User , 其中， E为对称加密算法, 所述是所述用户认证请求消息中携带的用户 U s e r产生的询问。 After receiving the user authentication request sent by the user User, the destination access node generates an inquiry N ₂ and calculates ETfE G^^ Nj using the shared key K _AC , _DN with the access controller AC, The N ₂ | I EL is sent to the user User as a user authentication response message, where E is a symmetric encryption algorithm, and the identifier is generated by the user U ser carried in the user authentication request message.

本发明提供的一种低开销的传感器网络访问控制***的访问控制器，用于： The invention provides an access controller of a low overhead sensor network access control system, which is used for:

接收用户 User发送的节点认证请求消息，所述节点认证请求消息是所述用户 User结合所述目的访问节点匪发送的用户认证响应消息构造的；并根据认证结果向所述用户 User发送节点认证响应消息，以供用户 User根据所述节点认证响应消息构造向目的访问节点发送的访问请求消息，并由目的访问节点根据所述访问请求消息对所述用户 User进行授权管理。 Receiving a node authentication request message sent by the user User, where the node authentication request message is constructed by the user user in combination with the user authentication response message sent by the destination access node; The authentication result sends a node authentication response message to the user User, so that the user user constructs an access request message sent to the destination access node according to the node authentication response message, and the destination access node refers to the user according to the access request message. User performs authorization management.

所述访问控制器接收的所述用户 User发送的节点认证请求消息，按照以下方式形成： The node authentication request message sent by the user user received by the access controller is formed as follows:

|ID_DN| I EL I |ET₂) , 构造节点认证请求消息 | |ID_DN| |ET₂| |MICi并发送给所述访问控制器 AC的, 其中， 1 是目的访问节点匪的身份标识， H为单向哈希函数， "I I" 表示为串联设置； After receiving the user authentication response message sent by the destination access node, the user User determines that the inquiry carried in the message is an inquiry selected by the user, and uses the shared key K _A with the access controller AC. _Ser calculates ET ₂ =E (K _AC , u _ser , NJ , and calculates the message authentication code

|ID _DN | I EL I |ET ₂ ) , constructing a node authentication request message | |ID _DN | |ET ₂ | |MICi and sending it to the access controller AC, where 1 is the identity of the destination access node , H is a one-way hash function, and "II" is a tandem setting;

所述访问控制器根据认证结果向所述用户 User发送的节点认证响应消息，按照以下方式形成： The node authentication response message sent by the access controller to the user User according to the authentication result is formed as follows:

所述访问控制器 AC收到所述用户 User发送的节点认证请求消息后，在根据消息中携带的 MlC it息判断消息完整后，利用与所述目的访问节点 DN之间的共享密钥 K_Ae,_DN解密 ET₁ 在解密后得到的结果与用户 User发送的相等时，由所述访问控制器 AC利用与所述用户 User共享的密钥 K_Ae,_Us„解密 ET₂, 若解密后得到的结果与所述用户 User发送的相等，则由访问控制器 AC生成用户 User和目的访问节点 DN间的会话密钥 K_{D ser}, 并根据所述用户 User的身份标识查询访问控制列表 ACL, 获得所述用户 User的访问控制信息 ACL_US„, 连同 User的访问期限 T" 利用 K_AC,_DN计算 ET₃=E(K_AC,_DN, ID_USER| |K_{D SER}| ITVI |ACL_USER) , 并利用 K_AC,_USER计算 ET₄=E (K_AC,u_ser,K_{D ser}) , 计算消息鉴别码 MIC₂=H (K_AC,_User, I I ID_DN I I Res (DN) I |ET₃| I ET₄) , 构造节点认证响应消息 | I ID_DN| |Res (DN) I |ET₃| |ET₄| |MIC₂发送给所述用户 User, 其中， 1 是所述目的访问节点匪的身份标识， Res (匪） =True表示所述访问控制器 AC对所述目的访问节点 DN鉴别成功，所述 H为单向哈希函数， Ί ，表示为串联设置。 After receiving the node authentication request message sent by the user User, the access controller AC uses the shared key K _Ae with the destination access node DN after determining that the message is complete according to the MlC it message carried in the message. When the result obtained by the _DN decryption ET ₁ is equal to that sent by the user User, the access controller AC uses the key K _Ae , _Us „ shared with the user User to decrypt the ET ₂ , if obtained after decryption The result is equal to that sent by the user User, and the session controller K _{D ser} between the user User and the destination access node DN is generated by the access controller AC, and the access control list ACL is queried according to the identity of the user User. accessing said user user control information ACL _US ", together with the duration of the visit of user T" using K _AC, _DN calculated _{_{ET 3 = E (K AC,}} DN, ID uSER | | K D SER | ITVI | ACL uSER), and using K _AC , _USER calculates ET ₄ =E (K _AC , u _ser , K _{D ser} ), calculates the message authentication code MIC ₂ =H (K _AC , _User , II ID _DN II Res (DN) I |ET ₃ | I ET _4), the configuration of the node authentication response message _{| I ID DN | | Res (} DN) I | ET 3 | | ET 4 | | MIC 2 to send the User User, where 1 is the identity of the destination access node, Res (匪) = True indicates that the access controller AC successfully authenticates the destination access node DN, and the H is a one-way hash function. Ί , expressed as a series setting.

Claims

权利要求书 Claim

1、一种低开销的传感器网络访问控制方法，其特征在于，包括以下步骤： A low-overhead sensor network access control method, comprising the steps of:

2 )所述目的访问节点匪根据所述用户认证请求消息，向所述用户 Us er发送用户认证响应消息； 2) the destination access node sends a user authentication response message to the user Us er according to the user authentication request message;

4 ) 所述访问控制器 AC根据认证结果向所述用户 User发送节点认证响应消息； 4) the access controller AC sends a node authentication response message to the user User according to the authentication result;

6 )所述目的访问节点 DN根据所述访问请求消息对所述用户 User的访问请求进行授权管理并发送访问请求响应消息给所述用户 User。 6) The destination access node DN performs authorization management on the access request of the user User according to the access request message, and sends an access request response message to the user User.

2、根据权利要求 1所述的低开销的传感器网络访问控制方法，其特征在于：所述步骤 1 ) 的具体实现方式是： 2. The low-cost sensor network access control method according to claim 1, wherein: the specific implementation manner of the step 1) is:

所述目的访问节点匪接收所述用户 Us er发送的用户认证请求消息，所述用户认证请求消息包含用户 User产生的询问 The destination access node receives a user authentication request message sent by the user Us er, where the user authentication request message includes an inquiry generated by the user User

所述步骤 2 ) 的具体实现方式是： The specific implementation of the step 2) is:

目的访问节点匪收到用户 User发送的用户认证请求后，产生询问 N₂ , 并利用与所述访问控制器 AC之间的共享密钥 K_AC,_D †算密文 EL=E (K_{AC; DN}, NJ ,侧 | Ν₂ | I EL 作为用户认证响应消息发送给用户 User , 其中， E为对称加密算法，所述 " | | " 表示为串联设置。 After receiving the user authentication request sent by the user User, the destination access node generates an inquiry N ₂ and uses the shared key K _AC , _D with the access controller AC to calculate the ciphertext EL=E (K _{AC; DN} , NJ , side | Ν ₂ | I EL is sent to the user User as a user authentication response message, where E is a symmetric encryption algorithm, and the "| | " is represented as a serial setting.

3、根据权利要求 2所述的低开销的传感器网络访问控制方法，其特征在于：所述步骤 3 ) 的具体实现方式是： The low-cost sensor network access control method according to claim 2, wherein: the specific implementation manner of the step 3) is:

所述用户 User收到所述目的访问节点匪发送的用户认证响应消息后，判断消息中携带的询问是用户 U s e r选择的询问后，利用与所述访问控制器 AC之间的共享密钥 K_Ae,_Us„ 计算

, 并计算消息鉴别码

|ID_DN| I EL I |ET₂) , 构造节点认证请求消息 | |ID_DN| IELI |ET₂| ^1 发送给所述访问控制器 AC, 其中， ID_DN是目的访问节点 DN的身份标识， H为单向哈希函数。 After the user User receives the user authentication response message sent by the destination access node, the user determines The inquiry carried in the message is the shared key K _Ae , _Us „ calculated with the access controller AC after the inquiry selected by the user U ser

And calculate the message authentication code

4、根据权利要求 3所述的低开销的传感器网络访问控制方法，其特征在于：所述步骤 4 ) 的具体实现方式是： The low-cost sensor network access control method according to claim 3, wherein: the specific implementation manner of the step 4) is:

所述访问控制器 AC收到所述用户 User发送的节点认证请求消息，在根据消息中携带的 MlC it息判断消息完整后，利用与所述目的访问节点 DN之间的共享密钥 K_AC,_DN解密 ET₁ 在解密后得到的结果与用户 User在步骤 3) 中发送的相等时，由所述访问控制器 AC利用与所述用户 User共享的密钥 K_Ae,_Us„解密 ET₂, 若解密后得到的结果与所述用户 User在步骤 3) 中发送的相等，则由访问控制器 AC生成用户 User和目的访问节点 DN间的会话密钥 K_DMs„, 并根据所述用户 User的身份标识查询访问控制列表 ACL, 获得所述用户 User的访问控制信息 ACL_US„, 连同 User的访问期限 T_v, 利用 K_AC,_DN计算 ET₃=E(K_AC,_DN, IDJ |K_DN,J |T_V| |ACL_User) , 并利用 K_AC,_User 计算 ET₄=E(K_AC,_Us„,K_{D ser}) , 计算消息鉴别码 MICH1U I |ID_DN| |Res(DN) I |ET₃| |ET₄) , 构造节点认证响应消息 | I ID_DN| |Res (DN) I |ET₃| |ET₄| |MIC₂发送给所述用户 User, 其中， ID_DN是所述目的访问节点匪的身份标识， Res (匪） =True表示所述访问控制器 AC对所述目的访问节点匪鉴别成功。 The access controller AC receives the node authentication request message sent by the user User, and uses the shared key K _AC between the destination access node DN and the destination access node DN after determining that the message is complete according to the MlC it message carried in the message. When the result obtained by the _DN decryption ET ₁ after decryption is equal to that sent by the user User in step 3), the access controller AC uses the key K _Ae , _Us „ decrypted by the user User to decrypt the ET ₂ , if The result obtained after decryption is equal to that sent by the user User in step 3), and the session controller K _DMs between the user User and the destination access node DN is generated by the access controller AC, and according to the identity of the user User Identifying the ACL of the query access control list, obtaining the access control information ACL _US „ of the user User, together with the access period T _v of the user, calculating ET ₃ =E(K _AC , _DN , IDJ |K _DN , J by using K _AC , _DN |T _V | |ACL _User ) , and use K _AC , _{User to} calculate ET ₄ =E(K _AC , _Us „,K _{D ser} ), calculate the message authentication code MICH1U I |ID _DN | |Res(DN) I |ET ₃ | |ET ₄ ) , Construct Node Authentication Response Message | I ID _DN | |Res (DN) I |ET ₃ | |ET ₄ | |MIC ₂ Send to The user User, where ID _DN is the identity of the destination access node, and Res (匪) = True indicates that the access controller AC successfully authenticates the destination access node.

5、根据权利要求 4所述的低开销的传感器网络访问控制方法，其特征在于：所述步骤 5 ) 的具体实现方式是： The low-cost sensor network access control method according to claim 4, wherein: the specific implementation manner of the step 5) is:

所述用户 User收到所述访问控制器 AC发送的节点认证响应消息后，在判断询问是用户 User选择的询问后，根据 MIC₂判断消息的完整性；在消息完整时，用户 User根据 Res (DN)判断目的访问节点匪的合法性，在目的访问节点匪合法时，用户 User解密消息中的 ET₄, 产生询问 N₃, 连同目的访问节点 DN的询问 N₂以及用户 User的访问请求 Q_us„利用所述解密后获得的、与目的访问节点间的会话密钥 K_DMser计算 ET₅=E(K_{D ser},N₂| |N₃| IQJ , 计算消息鉴别码 MIC₃=H (K_{D ser}, ΕΤ₃1 |ΕΤ₅) , 构造访问请求消息 ET₃| |ET₅| |MIC₃发送给目的访问节点匪。 After receiving the node authentication response message sent by the access controller AC, the user User determines the integrity of the message according to the MIC ₂ after determining that the inquiry is the inquiry selected by the user User; when the message is complete, the user User is according to Res ( DN) judges the legitimacy of the destination access node, when the destination access node is legal, the user User decrypts the ET ₄ in the message, generates the query N ₃ , together with the query N _{2 of the} destination access node DN and the access request _{Qus of the} user User _计算 Calculate ET ₅ =E (K _{D ser} , N ₂ | |N ₃ | IQJ , calculate the message authentication code MIC ₃ =H (K _{D )} using the session key K _DMser obtained after decryption and the destination access node _Ser , ΕΤ ₃ 1 |ΕΤ ₅ ) , Constructing an access request message ET ₃ | |ET ₅ | |MIC _{3 is} sent to the destination access node.

6、根据权利要求 5所述的低开销的传感器网络访问控制方法，其特征在于：所述步骤 6 ) 的具体实现方式是： The low-cost sensor network access control method according to claim 5, wherein: the specific implementation manner of the step 6) is:

目的访问节点匪收到用户 User的访问请求后，解密 ET₃,获得会话密钥 K_{D ser}, 在根据 MIC₃判断消息完整后，利用 K_{D s}„解密 ET₅, 在判断解密后得到的询问 N₂是目的访问节点匪选择的询问 N₂后，再确认解密 ET₅后获得的 ID_US„是否是请求访问的用户 User的身份标识，在确认是请求访问的用户 User的身份标识时，记录当前时刻 T_c, 确认从 T_c到（Tc+Tv)这段时间即为用户 User的访问有效期，用户只能在此有效期内访问网络数据，所述目的访问节点匪才艮据 ACL_US„判断所述用户 User的访问请求 Q_us„是否合法，在合法情况，生成应答数据 R_DN, 连同 N₃利用 K_{D s}„计算 ET₆=E (K_{D ser},N₃| IR丄计算消息鉴别码 MIC₄=H(K_{D ser},ET₆) , 构造访问请求响应消息 ET₆| |MIC₄发送给用户 User。 After receiving the access request of the user User, the destination access node decrypts the ET ₃ and obtains the session key K _{D ser} . After the message is completed according to the MIC ₃ , the KD _s „ decrypt ET _{5 is} used to determine the decrypted query. N ₂ is the query N ₂ selected by the destination access node, and then confirms that the ID _US obtained after decrypting the ET ₅ is the identity of the user User requesting access, and when the identity of the user User requesting access is confirmed, the record is recorded. At the current time T _c , it is confirmed that the time from T _c to (Tc+Tv) is the access period of the user User, and the user can only access the network data during the validity period, and the destination access node is determined according to the ACL _US „ Whether the access request _{Qus of} the user User is legal, in the legal case, the response data R _{DN is} generated, and together with N _{3 ,} K _{D s is} used to calculate ET ₆ =E (K _{D ser} , N ₃ | IR丄 calculation message authentication code MIC ₄ = H (K _{D ser} , ET ₆ ), constructing an access request response message ET ₆ | | MIC _{4 is} sent to the user User.

7、根据权利要求 6所述的低开销的传感器网络访问控制方法，其特征在于：所述低开销的传感器网络访问控制方法还包括以下步骤： The low-overhead sensor network access control method according to claim 6, wherein the low-overhead sensor network access control method further comprises the following steps:

7) 所述用户 User收到请求响应消息后，根据 MIC₄判断消息完整性，在所述请求响应消息完整时，利用 K_{D s}„解密 ET₆,判断解密得到的询问 N₃是否是用户 User 选择的询问 N₃, 在是用户 User选择的询问 N₃时，用户 User保存应答数据 R_DN, 后续用户 User与目的访问节点 DN之间的访问请求和应答数据均利用 K_{D s}„加以保护。 7) After receiving the request response message, the user User judges the message integrity according to the MIC ₄ , and when the request response message is complete, uses K _{D s} „ decrypt ET ₆ to determine whether the decrypted query N ₃ is the user User. The selected query N ₃ , when it is the query N ₃ selected by the user User, the user User saves the response data R _DN , and the access request and response data between the subsequent user User and the destination access node DN are protected by K _{D s} „.

8、一种低开销的传感器网络访问控制***，其特征在于，包括目的访问节点和访问控制器，其中： 8. A low overhead sensor network access control system, comprising: a destination access node and an access controller, wherein:

所述目的访问节点 DN, 用于接收用户 User发送的用户认证请求消息，并根据所述用户认证请求消息，向所述用户 User发送用户认证响应消息； The destination access node DN is configured to receive a user authentication request message sent by the user, and send a user authentication response message to the user user according to the user authentication request message;

所述访问控制器 AC, 用于接收所述用户 User发送的节点认证请求消息，所述节点认证请求消息是所述用户 User结合所述目的访问节点匪发送的用户认证响应消息构造的；并根据认证结果向所述用户 User发送节点认证响应消息；所述目的访问节点匪还用于接收所述用户 User发送的访问请求消息，所述访问请求消息是所述用户 User根据从访问控制器 AC收到的节点认证响应消息构造的；并根据所述访问请求消息对所述用户 User进行授权管理并发送访问请求响应消息给所述用户 User。 The access controller AC is configured to receive a node authentication request message sent by the user User, where the node authentication request message is constructed by the user user in combination with the user authentication response message sent by the destination access node; The authentication result sends a node authentication response message to the user User. The destination access node is further configured to receive an access request message sent by the user User, where the access request message is received by the user User according to the access controller AC. And the node authentication response message is configured; and authorizing the user user according to the access request message and sending an access request A response message is sent to the user User.

9、根据权利要求 8所述的低开销的传感器网络访问控制***，其特征在于，所述目的访问节点匪，向所述用户 User发送的用户认证响应消息，按照以下方式形成： The low-overhead sensor network access control system according to claim 8, wherein the destination access node 匪, the user authentication response message sent to the user User, is formed as follows:

所述目的访问节点匪收到用户 User发送的用户认证请求后，产生询问 N₂, 并利用与所述访问控制器 AC之间的共享密钥 K_AC,_DN计算 EL=E (K_AC;DN, NJ ,侧 |Ν₂| I EL 作为用户认证响应消息发送给用户 User, 其中， E为对称加密算法，所述是所述用户认证请求消息中携带的用户 U s e r产生的询问 N i。 After receiving the user authentication request sent by the user User, the destination access node generates an inquiry N ₂ and calculates EL=E (K _{AC; DN} by using the shared key K _AC , _DN with the access controller _AC; , NJ, side | Ν ₂ | I EL is sent to the user User as a user authentication response message, where E is a symmetric encryption algorithm, and the query is N i generated by the user U ser carried in the user authentication request message.

10、根据权利要求 9所述的低开销的传感器网络访问控制***，其特征在于，所述访问控制器 AC, 接收的所述用户 User发送的节点认证请求消息，按照以下方式形成： The low-overhead sensor network access control system according to claim 9, wherein the access controller AC receives the node authentication request message sent by the user User, and is formed as follows:

, 并计算消息鉴别码

| ID_DN| I EL I |ET₂) , 构造节点认证请求消息 | | ID_DN| |ET₂| |MICi并发送给所述访问控制器 AC, 其中， ID_DN是目的访问节点匪的身份标识， H为单向哈希函数，所述 "I I" 表示为串联设置。 After receiving the user authentication response message sent by the destination access node, the user User determines that the inquiry carried in the message is the inquiry selected by the user U ser, and uses the shared key K with the access controller AC. _Ae , _Us „ Calculation

And calculate the message authentication code

ID _DN | I EL I | ET ₂ ) , constructing a node authentication request message | | ID _DN | |ET ₂ | |MICi and sending it to the access controller AC, where ID _DN is the identity of the destination access node , H is a one-way hash function, and the "II" is represented as a tandem setting.

11、根据权利要求 10所述的低开销的传感器网络访问控制***，其特征在于，所述访问控制器 AC, 根据认证结果向所述用户 User发送的节点认证响应消息，按照以下方式形成： The low-overhead sensor network access control system according to claim 10, wherein the access controller AC sends a node authentication response message to the user User according to the authentication result, which is formed as follows:

所述访问控制器 AC收到所述用户 User发送的节点认证请求消息后，在根据消息中携带的 MlC it息判断消息完整后，利用与所述目的访问节点 DN之间的共享密钥 K_A ^解密 ET₁ 在解密后得到的结果与用户 User发送的相等时，由所述访问控制器 AC利用与所述用户 User共享的密钥 K_Ae,_Us„解密 ET₂, 若解密后得到的结果与所述用户 User发送的相等，则由访问控制器 AC生成用户 User和目的访问节点 DN 间的会话密钥 K_{D ser}, 并根据所述用户 User的身份标识查询访问控制列表 ACL, 获得所述用户 User的访问控制信息 ACL_US„, 连同 User的访问期限 T_v, 利用 K_AC,_DN计算 ET₃=E (KAC,DN, IDu_Ser I I K_DN,user I I T_V I I ACL_USER) , 并利用 K_AC, 11₈„计算 ET₄=E (K_AC, _USER , K_DN,_USER) , 计算消

| ID_DN| I Res (DN) I |ET₃| |ET₄) ,构造节点认证响应消息^| |ID_DN| |Res(DN) I |ET₃| |ET₄| |MIC₂发送给所述用户 User, 其中， ID_DN是所述目的访问节点匪的身份标识， Res (DN) =True表示所述访问控制器 AC对所述目的访问节点匪鉴别成功。 After receiving the node authentication request message sent by the user User, the access controller AC uses the shared key K _A with the destination access node DN after determining that the message is complete according to the MlC it message carried in the message. ^ When the decrypted ET ₁ obtains a result equal to that sent by the user User, the access controller AC uses the key K _Ae , _Us „ shared with the user User to decrypt the ET ₂ , if the result is obtained after decryption Having the same as that sent by the user User, the access controller AC generates a session key K _{D ser} between the user User and the destination access node DN, and queries the access control list ACL according to the identity of the user User to obtain the User User's access control information ACL _US „, along with User's access period T _v , using K _AC , _{DN to} calculate ET ₃ =E (KAC, DN, IDu _S er IIK _D N, user IIT _V II ACL _USER ), and use K _AC , 11 ₈ „Calculate ET ₄ =E (K _AC , _USER , K _DN , _USER ), Calculation

_{| ID DN | I Res (DN} ) it | ET 3 | | ET 4), configured node authentication response message _{^ | | ID DN | | Res} (DN) I | ET 3 | | ET 4 | | MIC 2 is sent to the User User, where ID _DN is the identity of the destination access node, and Res (DN) = True indicates that the access controller AC successfully authenticates the destination access node.

12、根据权利要求 11所述的低开销的传感器网络访问控制***，其特征在于，所述目的访问节点 DN接收到的所述访问请求消息，按照以下方式形成： The low-overhead sensor network access control system according to claim 11, wherein the access request message received by the destination access node DN is formed as follows:

所述用户 User收到所述访问控制器 AC的节点认证响应消息后，在判断询问是用户 User选择的询问后，根据 MIC₂判断消息的完整性；在消息完整时，用户 User根据 Res (DN)判断目的访问节点匪的合法性，在 Res (DN) =True时，用户 User 解密消息中的 ET₄, 产生询问 N₃, 连同目的访问节点 DN的询问 N₂以及用户 User的访问请求 Q_us„利用所述解密后获得的、与目的访问节点间的会话密钥 K_{D s}„计算 ET₅=E (K_{D ser},N₂| |N₃| IQJ , 计算消息鉴别码 MIC₃=H(K_{D ser},ET₃| |ΕΤ₅) , 构造访问请求消息 ET₃| |ET₅| |MIC₃发送给目的访问节点 DN。 After receiving the node authentication response message of the access controller AC, the user User determines the integrity of the message according to the MIC ₂ after determining that the inquiry is the inquiry selected by the user User; when the message is complete, the user User according to the Res (DN) Determining the legitimacy of the destination access node, when Res (DN) = True, the user User decrypts the ET ₄ in the message, generates the query N ₃ , together with the query N _{2 of the} destination access node DN and the access request _{Qus of the} user User „Using the session key K _{D s} obtained between the decrypted and the destination access node to calculate ET ₅ =E (K _{D ser} , N ₂ | |N ₃ | IQJ , calculating the message authentication code MIC ₃ =H ( K _{D ser} , ET ₃ | |ΕΤ ₅ ) , constructs an access request message ET ₃ | |ET ₅ | |MIC _{3 is} sent to the destination access node DN.

13、根据权利要求 12所述的低开销的传感器网络访问控制***，其特征在于，所述目的访问节点 DN进一步用于： 13. The low-overhead sensor network access control system according to claim 12, wherein the destination access node DN is further configured to:

收到用户 User的访问请求后，解密 ET₃, 获得会话密钥 K_{D s}„, 在根据 MIC₃判断消息完整后，利用 K_{D s}„解密 ET₅, 在判断解密后得到的询问 N₂是目的访问节点 DN选择的询问 N₂后，再确认解密 ET₅后获得的 ID_US„是否是请求访问的用户 User的身份标识，在是请求访问的用户 User的身份标识时，记录当前时刻 T_c, 确认从 T_c 到（Tc+Tv)这段时间即为用户 Us er的访问有效期，用户只能在此有效期内访问网络数据，所述目的访问节点匪根据 ACL_User判断所述用户 User的访问请求 Q_us„是否合法，在合法情况，生成应答数据 R_DN,连同 N₃利用 K_{D s}„计算 ET₆=E(K_DMs„,N₃| |R_DN) , 计算消息鉴别码 MIC₄=H (K_{D ser},ET₆) ,构造访问请求响应消息 ET₆| |MIC₄发送给用户After receiving the access request of the user User, decrypting the ET ₃ and obtaining the session key K _{D s} „, after determining that the message is complete according to the MIC ₃ , using K _{D s} „ decrypt ET ₅ , the query N ₂ obtained after determining the decryption is After accessing the query N ₂ selected by the node DN, it is confirmed that the ID _US obtained after decrypting the ET ₅ is the identity of the user User requesting access, and when the identity of the user User requesting the access is recorded, the current time T _{c is} recorded. , confirming that the time from T _c to (Tc+Tv) is the access validity period of the user Us, the user can only access the network data during the validity period, and the destination access node determines the access of the user User according to the ACL _User Request Q _us „ is legal, in the legal case, generate response data R _DN , together with N ₃ use K _{D s} „calculate ET ₆ =E(K _DMs „, N ₃ | |R _DN ), calculate message authentication code MIC ₄ = H (K _{D ser} , ET ₆ ), constructs an access request response message ET ₆ | | MIC _{4 is} sent to the user

Us6r。 Us6r.

14、一种低开销的传感器网络访问终端，其特征在于，包括： 14. A low-overhead sensor network access terminal, comprising:

用户认证响应消息接收单元，用于接收所述目的访问节点匪根据所述用户认证请求消息，向所述用户 U s e r发送用户认证响应消息； a user authentication response message receiving unit, configured to receive the destination access node, according to the user Sending a user authentication response message to the user U ser;

节点认证请求消息发送单元，用于向访问控制器 AC发送节点认证请求消息，所述节点认证请求消息是所述用户 User结合所述目的访问节点匪发送的用户认证响应消息构造的； a node authentication request message sending unit, configured to send a node authentication request message to the access controller AC, where the node authentication request message is constructed by the user user in combination with the user authentication response message sent by the destination access node;

节点认证响应消息接收单元，用于接收所述访问控制器 AC根据认证结果向所述用户 U s e r发送节点认证响应消息； a node authentication response message receiving unit, configured to receive, by the access controller, a node authentication response message to the user U s e r according to the authentication result;

访问请求消息发送单元，用于向所述目的访问节点匪发送所访问请求消息，所述访问请求消息是所述用户 Us er根据从访问控制器 AC收到的节点认证响应消息构造的； An access request message sending unit, configured to send the access request message to the destination access node, where the access request message is configured by the user Us er according to a node authentication response message received from the access controller AC;

15、根据权利要求 14所述的低开销的传感器网络访问终端，其特征在于，所述用户认证请求消息发送单元，向传感器网络中的目的访问节点匪发送用户认证请求消息中，包含用户 User产生的询问，所述用户认证响应消息接收单元，接收所述目的访问节点匪根据所述用户认证请求消息，向所述用户 User 发送的用户认证响应消息，按照以下方式形成： The low-overhead sensor network access terminal according to claim 14, wherein the user authentication request message sending unit sends a user authentication request message to the destination access node in the sensor network, including the user User generated. The user authentication response message receiving unit receives the user authentication response message sent by the destination access node to the user User according to the user authentication request message, and is formed as follows:

目的访问节点匪收到用户 User发送的用户认证请求后，产生询问 N₂, 并利用与所述访问控制器 AC之间的共享密钥 K_AC,_DN计算 EL=E (K_AC;DN, NJ ,侧 |Ν₂| 乍为用户认证响应消息发送给用户 User, 其中， E为对称加密算法； After receiving the user authentication request sent by the user User, the destination access node generates an inquiry N ₂ and calculates EL=E (K _{AC; DN} , NJ by using the shared key K _AC , _DN with the access controller _AC; , side | Ν ₂ | 发送 is sent to the user User response response message, where E is a symmetric encryption algorithm;

所述节点认证请求消息发送单元，向访问控制器 AC发送的节点认证请求消息，按照以下方式形成： The node authentication request message sending unit sends a node authentication request message to the access controller AC, which is formed as follows:

所述用户 User收到所述目的访问节点匪发送的用户认证响应消息后，判断消息中携带的询问是用户 U s e r选择的询问后，利用与所述访问控制器 AC之间的共享密钥 K_Ae,_Us„ 计算 ET^EG^u^Nj , 并计算消息鉴别码 MId=H (ΚΛο,υ^,Μ |ID_DN| I EL I |ET₂) , 构造节点认证请求消息 |ID_DN| IELI |ET₂| ^1 发送给所述访问控制器 AC, 其中， 1 是目的访问节点匪的身份标识， H为单向哈希函数，所述 "I I" 表示为串联设置； After receiving the user authentication response message sent by the destination access node, the user User determines that the inquiry carried in the message is the inquiry selected by the user U ser, and uses the shared key K with the access controller AC. _Ae , _Us „ Calculate ET^EG^u^Nj and calculate the message authentication code MId=H (ΚΛο,υ^,Μ |ID _DN | I EL I |ET ₂ ), construct node authentication request message|ID _DN | IELI |ET ₂ | ^1 is sent to the access controller AC, where 1 is the identity of the destination access node, H is a one-way hash function, and the "II" is represented as a serial setting;

所述节点认证响应消息接收单元，接收的所述访问控制器 AC根据认证结果向所述用户 User发送节点认证响应消息，按照以下方式形成： The node authentication response message receiving unit receives the access controller AC according to the authentication result. Sending a node authentication response message to the user User is formed as follows:

所述访问控制器 AC收到所述用户 User发送的节点认证请求消息，在根据消息中携带的 MlC it息判断消息完整后，利用与所述目的访问节点 DN之间的共享密钥 K_A ^解密 EL, 在解密后得到的结果与用户 User在步骤 3 ) 中发送的相等时，由所述访问控制器 AC利用与所述用户 User共享的密钥 K_Ae,_Us„解密 ET₂, 若解密后得到的结果与所述用户 User在步骤 3 )中发送的相等，则由访问控制器 AC生成用户 User和目的访问节点 DN间的会话密钥 K_DMs„, 并根据所述用户 User的身份标识查询访问控制列表 ACL, 获得所述用户 User的访问控制信息 ACL_US„, 连同 User的访问期限 T_V, 利用 K_AC,_DN计算 ET₃=E(K_AC,_DN, IDJ |K_DN,J ITVI |ACL_USER) , 并利用 K_AC,_USER 计算 ET₄=E(K_AC,_User,K_{D ser}) , 计算消息鉴别码 MICH1U I |ID_DN| |Res(DN) I |ET₃| |ET₄) , 构造节点认证响应消息 | I ID_DN| |Res (DN) I |ET₃| |ET₄| |MIC₂发送给所述用户 User, 其中， ID_DN是所述目的访问节点匪的身份标识， Res (匪） =True表示所述访问控制器 AC对所述目的访问节点匪鉴别成功； The access controller AC receives the node authentication request message sent by the user User, and uses the shared key K _A ^ between the destination access node DN and the MlC it message according to the message. Decrypting EL, when the result obtained after decryption is equal to that sent by user User in step 3), the access controller AC decrypts ET ₂ with the key K _Ae , _Us „ shared with the user User, if decrypted The result obtained after is equal to that sent by the user User in step 3), the session key K _DMs between the user User and the destination access node DN is generated by the access controller AC, and according to the identity of the user User query access control lists ACL, obtaining the user user access control information ACL _US ", along with the duration of the visit user of T _V, using the K _AC, _DN calculate _{_{ET 3 = E (K AC,}} DN, IDJ | K DN, J ITVI |ACL _USER ) , and calculate the ET ₄ =E(K _AC , _User ,K _{D ser} ) using K _AC , _USER , and calculate the message authentication code MICH1U I |ID _DN | |Res(DN) I |ET ₃ | |ET ₄ ), construct node authentication response message | I ID _DN | |Res (DN) I |ET ₃ | |ET ₄ | |MIC _{2 is} sent to the User User, where ID _DN is the identity of the destination access node, and Res (匪) = True indicates that the access controller AC successfully authenticates the destination access node;

所述访问请求消息发送单元，向所述目的访问节点 DN发送的所访问请求消息，按照以下方式形成： The access request message sending unit, the accessed request message sent to the destination access node DN, is formed as follows:

所述用户 User收到所述访问控制器 AC的节点认证响应消息后，在判断询问是用户 User选择的询问后，根据 MIC₂判断消息的完整性；在消息完整时，用户 User根据 Res (DN)判断目的访问节点匪的合法性，在 Res (DN) =True时，用户 User 解密消息中的 ET₄, 产生询问 N₃, 连同目的访问节点 DN的询问 N₂以及用户 User的访问请求 Q_us„利用所述解密后获得的、与目的访问节点间的会话密钥 K_{D s}„计算 ET₅=E (K_{D ser},N₂| |N₃| IQJ , 计算消息鉴别码 MIC₃=H(K_{D ser},ET₃| |ΕΤ₅) , 构造访问请求消息 ET₃| |ET₅| |MIC₃发送给目的访问节点 DN; After receiving the node authentication response message of the access controller AC, the user User determines the integrity of the message according to the MIC ₂ after determining that the inquiry is the inquiry selected by the user User; when the message is complete, the user User according to the Res (DN) Determining the legitimacy of the destination access node, when Res (DN) = True, the user User decrypts the ET ₄ in the message, generates the query N ₃ , together with the query N _{2 of the} destination access node DN and the access request _{Qus of the} user User „Using the session key K _{D s} obtained between the decrypted and the destination access node to calculate ET ₅ =E (K _{D ser} , N ₂ | |N ₃ | IQJ , calculating the message authentication code MIC ₃ =H ( K _{D ser} , ET ₃ | | ΕΤ ₅ ) , constructing an access request message ET ₃ | | ET ₅ | | MIC _{3 is} sent to the destination access node DN;

目的访问节点匪收到用户 User的访问请求后，解密 ET₃,获得会话密钥 K_{D ser}, 在根据 MIC₃判断消息完整后，利用 K_{D s}„解密 ET₅, 在判断解密后得到的询问 N₂是目的访问节点匪选择的询问 N₂后，再确认解密 ET₅后获得的 ID_US„是否是请求访问的用户 User的身份标识，在是请求访问的用户 User的身份标识时，记录当前时刻 T_c , 确认从 T_c到（Tc+Tv)这段时间即为用户 User的访问有效期，用户只能在此有效期内访问网络数据，所述目的访问节点匪才艮据 ACL_US„判断所述用户 Us er的访问请求 Q_us„是否合法，在合法情况，生成应答数据 R_DN , 连同 N₃利用 K_{D s}„计算 ET₆=E (K_{D ser}, N₃ | I R丄计算消息鉴别码 MIC₄=H (K_{D ser}, ET₆) , 构造访问请求响应消息 ET₆ | | MIC₄发送给用户 User。 After receiving the access request of the user User, the destination access node decrypts the ET ₃ and obtains the session key K _{D ser} . After the message is completed according to the MIC ₃ , the KD _s „ decrypt ET _{5 is} used to determine the decrypted query. N ₂ is After the destination access node selects the query N ₂ , it confirms the ID _US obtained after decrypting the ET ₅ „ is the identity of the user User requesting access, and records the current time T _c when it is the identity of the user User requesting access. , confirming that the period from T _c to (Tc+Tv) is the access period of the user User, the user can only access the network data during the validity period, and the destination access node determines the user Us according to the ACL _US Er access request Q _us „ is legal, in the legal case, generate response data R _DN , together with N ₃ use K _{D s} „calculate ET ₆ =E (K _{D ser} , N ₃ | IR丄 calculate message authentication code MIC ₄ = H (K _{D ser} , ET ₆ ), constructs an access request response message ET ₆ | | MIC _{4 is} sent to the user User.

16、根据权利要求 15所述的低开销的传感器网络访问终端，其特征在于，还包括： The low-overhead sensor network access terminal according to claim 15, further comprising:

请求响应消息处理单元，用于在用户 Us er收到请求响应消息后，根据 MIC₄ 判断消息完整性，在所述请求相应消息完整时，利用 K_{D s}„解密 ET₆ , 判断解密得到的询问^是否是用户 User选择的询问 N₃ , 在是用户 Us er选择的询问 N₃时，用户 User保存应答数据 R_DN , 后续用户 User与目的访问节点匪之间的访问请求和应答数据均利用 K_DN, _us„加以保护。 The request response message processing unit is configured to judge the message integrity according to the MIC ₄ after the user User receives the request response message, and use the K _{D s} „ decrypt ET ₆ to judge the decrypted query when the request corresponding message is complete. ^ Whether it is the query N ₃ selected by the user User, when the user N er selects the query N ₃ , the user User saves the response data R _DN , and the access request and response data between the subsequent user User and the destination access node 利用 utilize K _DN , _us „protected.

17、一种低开销的传感器网络访问控制***中的目的访问节点，用于：接收用户 User发送的用户认证请求消息，并根据所述用户认证请求消息，向所述用户 User发送用户认证响应消息； A destination access node in a low-cost sensor network access control system, configured to: receive a user authentication request message sent by a user, and send a user authentication response message to the user User according to the user authentication request message. ;

18、根据权利要求 17所述的低开销的传感器网络访问控制***中的目的访问节点，其特征在于， 18. The destination access node in a low overhead sensor network access control system according to claim 17, wherein:

所述目的访问节点匪，向所述用户 Us er发送的用户认证响应消息，按照以下方式形成： The destination access node 匪, the user authentication response message sent to the user Us er, according to The following way is formed:

所述目的访问节点 DN收到用户 User发送的用户认证请求后，产生询问 N₂, 并利用与所述访问控制器 AC之间的共享密钥 K_AC,_DN计算 EL=E (K_{AC; DN}, NJ ,侧 | Ν₂ | I EL 作为用户认证响应消息发送给用户 User , 其中， E为对称加密算法，所述是所述用户认证请求消息中携带的用户 User产生的询问， " I I " 表示为串联设置。 After receiving the user authentication request sent by the user User, the destination access node DN generates an inquiry N ₂ and calculates EL=E (K _{AC; DN} by using the shared key K _AC , _DN with the access controller _AC; , NJ, side | Ν ₂ | I EL is sent to the user User as a user authentication response message, where E is a symmetric encryption algorithm, and the inquiry is generated by the user User carried in the user authentication request message, and "II" indicates Set for the series.

19、一种低开销的传感器网络访问控制***的访问控制器，用于：接收用户 User发送的节点认证请求消息，所述节点认证请求消息是所述用户 User结合所述目的访问节点匪发送的用户认证响应消息构造的；并根据认证结果向所述用户 User发送节点认证响应消息，以供用户 User根据所述节点认证响应消息构造向目的访问节点发送的访问请求消息，并由目的访问节点根据所述访问请求消息对所述用户 User进行授权管理。 The access controller of the low-cost sensor network access control system is configured to: receive a node authentication request message sent by the user User, where the node authentication request message is sent by the user user in conjunction with the destination access node The user authentication response message is configured to send a node authentication response message to the user User according to the authentication result, so that the user user constructs an access request message sent to the destination access node according to the node authentication response message, and is configured by the destination access node according to the The access request message performs authorization management on the user User.

20、根据权利要求 19所述的低开销的传感器网络访问控制***的访问控制器，其特征在于： 20. The access controller of the low overhead sensor network access control system of claim 19, wherein:

, 并计算消息鉴别码

| ID_DN | I EL I | ET₂) , 构造节点认证请求消息 | | ID_DN | | ET₂ | | MICi并发送给所述访问控制器 AC的, 其中， ID_DN是目的访问节点匪的身份标识， H为单向哈希函数， " I I " 表示为串联设置； After receiving the user authentication response message sent by the destination access node, the user User determines that the inquiry carried in the message is the inquiry selected by the user U ser, and uses the shared key K with the access controller AC. _Ae , _Us „ Calculation

And calculate the message authentication code

ID _DN | I EL I | ET ₂ ) , constructing a node authentication request message | | ID _DN | | ET ₂ | | MICi and sending it to the access controller AC, where ID _DN is the identity of the destination access node Identification, H is a one-way hash function, and "II" is a tandem setting;

| ID_DN| I Res (DN) I |ET₃| |ET₄) ,构造节点认证响应消息^| |ID_DN| |Res (DN) I |ET₃| |ET₄| |MIC₂发送给所述用户 User, 其中， ID_DN是所述目的访问节点匪的身份标识， Res (DN) =True表示所述访问控制器 AC对所述目的访问节点匪鉴别成功。 After receiving the node authentication request message sent by the user User, the access controller AC uses the shared key K _A with the destination access node DN after determining that the message is complete according to the MlC it message carried in the message. ^ When the decrypted ET ₁ obtains a result equal to that sent by the user User, the access controller AC uses the key K _Ae , _Us „ shared with the user User to decrypt the ET ₂ , if the result is obtained after decryption Equivalent to the user User, the user controller and the destination access node DN are generated by the access controller AC. The session key K _{D ser} , and querying the access control list ACL according to the identity of the user User, obtaining the access control information ACL _US „ of the user User, together with the access period T _{v of the user} , using K _AC , _DN Calculate ET ₃ =E (KAC, DN, IDu _S er IIK _D N, user IIT _V II ACL _USER ) and use K _AC , 11 ₈ „ to calculate ET ₄ =E (K _AC , _USER , K _DN , _USER ), Calculation elimination