| The wireless sensor networks are mostly used to collect the data of environment and provide the environment information service. There are a lot of sensitive and privacy data up as the in-depth application and sense type varied. How to keep the illegal user from accessing these data, controlling the access behaviours of user and providing a limited service is one of the most important problems that the wireless sensor networks must solve.Most research of access control are concentrate on the relationship between user and resource, however, the disperse and dynamic of resource administrated by the nowaday access control system is far from the wireless sensor networks, further more, the computes, communication, the mode of the net and system deploy is very different from traditional computer system. Therefore, it is difficult to direct administrating the node resource. According to the correlation between the security of data collected by the wireless sensor networks and the data of environment, we import the environment map information into the access control model and propose a map-based access control mechanism for wireless sensor networks. The main works are several points followed:First, according to the properties of wireless sensor networks, we constructed a logical resource based on the environment information, and proposed a map-based access control model for the wireless sensor networks. This will make the control strategy , which is based upon the logical resource, mapped the control strategy from logical resource to physical resource by using GPS position information. Therefore, we can construct a stable and convenient access control model for wireless sensor networks.Second, we designed the prototype system framework for the access control system of wireless sensor networks based on the model we proposed. The system is divided into 3 sub-systems according to the deploy environment: Access control manage system, Access control execute system and User terminate System. After that, we discuss the process and algorithm of the prototype system.Third, The Distribute Authentication Central in Access control execute system is the core point for implementing the access control system of wireless sensor networks. According to the properties of the wireless sensor networks and the requirement of the map-based access control model, we designed a Distribute Authentication protocol for the access control system based on Elliptic Curve Digital Signature Algorithm.Finally, giving the simulation results on a prototype system to validate the feasibility, usability, security and other aspects of the structure of the access control system. |
