A Random Key Distribution Scheme Against The Node Replication Attack In Wireless Sensor Networks

With the maturity of wireless communication technology and embedded technology,wireless sensor network has developed rapidly and become one of core technologies of the Internet of Things technology.A large number of sensors,which are wireless communication,constitute a wireless sensor network with multi-hop and self-organization as its main characteristics.WSN are applied in many fields such as military affairs,medical treatment,intelligent manufacturing,smart grid and network of vehicles.The node replication attack is a common attack in WSN.In this attack,adversaries use the information of captured honest nodes to forge new nodes.After these forged malicious nodes are injected into the network,they can carry out many internal attacks such as transmitting false messages and changing routing information,which seriously threaten the security of wireless sensor networks.Random key distribution scheme is one of the most effective key management schemes to improve the security of wireless sensor networks,which can significantly enhance the security of network.However,those existing state-of-the-art random key distribution schemes have no ability to resist the node replication attack.By studying and analyzing the principle of node replication attack,we improve the random key distribution scheme q-s-Composite(QSC)on the basis of establishing the node replication attack defense model and propose a random key distribution scheme q-s-Composite Plus(QSCP)with the ability to resist node replication attack.In this paper,we implement the defense mechanism of node replication attack from three aspects: detection of node replication attack,cancellation of replication nodes and prevention of attack.In the detection phase of node replication attack,our scheme will detect those nodes that join in the network.Once a node has been regarded as a replica,it will be eliminated from the network by changing the pairwise keys of nodes that communicate with the replica in the cancellation phase of replication nodes.In this way,the replica can not establish communication with other nodes.As a result,the replica has been eliminated.The prevention phase of attack can screen nodes in the next deployment according to the data characteristic of the previous phase.At the same time,considering the balance between security and efficiency,the scheme adopts the message recovery mechanism and other method to optimize the efficiency of the scheme,so to reduce the cost of QSCP storage and communication while ensuring security.The experimental results demonstrate that the QSCP scheme has the security of state-of-the-art random key distribution scheme and can effectively resist the node replication attack.The detection rate of replication nodes improves with the increase of number of network nodes.When the number of network nodes reaches 200,the detection rate is as high as 96%.At the same time,the storage and communication costs are controlled in a reasonable range to meet the efficiency and availability requirements of the scheme.