應用於遠程證實之資訊隱藏型亂數填充技術;Data-hiding based random padding in remote attestation

NCU Institutional Repository > 資訊電機學院 > 資訊工程研究所 > 博碩士論文 > Item 987654321/75938

請使用永久網址來引用或連結此文件: http://ir.lib.ncu.edu.tw/handle/987654321/75938

題名:	應用於遠程證實之資訊隱藏型亂數填充技術;Data-hiding based random padding in remote attestation
作者:	林政諭;Lin, Cheng-Yu
貢獻者:	資訊工程學系
關鍵詞:	無線感測網路;遠程證實;亂數填充技術;硬體安全模組;wireless sensor network;remote attestation;random padding;hardware security module
日期:	2018-01-26
上傳時間:	2018-04-13 11:23:03 (UTC+8)
出版者:	國立中央大學
摘要:	由基地台及感測節點所構成的無線感測網路已逐漸普及於我們的日常生活中。其中，於無線感測網路中擔任要角的感測節點在擁有諸多優點的同時，也受到不少限制，如計算能力的限制、記憶體空間限制及能源限制。也因以上限制，導致感測節點常為攻擊者攻擊的首要目標。　　有鑑於此，遠程證實被提出以檢查感測節點是否遭攻擊者入侵。其作法為透過挑戰/回應協定達成。驗證者可藉由遠程證實檢查證實者的記憶體完整性，以達到其目的。在遠程證實中，亂數填充及耗時驗證機制皆必須採用。然而，若耗時驗證機制被使用於一規模較大的無線感測網路時，會因網路延遲而無法發揮其功效。因而有了硬體基礎之遠程證實的誕生。該遠程證實利用鑲嵌於感測節點的防竄改晶片作為一遠端的代理人進行時間的測量，並驗證該主計算平台之完整性，因此挑戰值及回應值應先被預先計算好，並存放於防竄改晶片上。　　本提案將利用資訊隱藏的技術，將原先應儲存於防竄改晶片上的挑戰值及回應值改存放於主計算平台中的亂數填充區塊。藉此減少防竄改晶片的儲存負擔，並同時增加亂數填充區塊的使用率。 ;Wireless sensor network (WSN) composed of base station and sensor nodes has been widely applied in our daily lives, such as healthcare monitoring systems. The advantages of sensor nodes are optimized implementation and cost-efficient. However, these sensors have limited resources in computation, memory capacity, and energy. For the reasons given above, these sensors become attractive target for various security risks. A compromised sensor node will result in fake data delivery or private data disclosure. Therefore, a security mechanism used for detecting the trustworthiness of a sensor node is urgently desired. Remote attestation scheme, an effective protection mechanism, has been proposed for detecting the trustworthiness of a sensor node. The remote attestation is based on challenge-response protocol. A verifier can verify the trustworthiness of a sensor node by attesting it′s integrity of program memory. In remote attestation, both random padding and time-based detection approach are essential. However, in a large-scale WSN, time-based detection approach is susceptible to varying transmission delays. Therefore, many hardware-based remote attestation schemes depending on a tamper-proof chip have been proposed. The tamper-proof chip is employed to act as a remote agent, therefore, it must store challenge-response pairs for verifying the trustworthiness of the sensor node. In this thesis, we propose a remote attestation with lightweight tamper-proof chip. With stenography that we applied, the chip does not need to store challenge-response pairs. The challenge-response pairs are randomly stored in platform while only the lightweight tamper-proof chip is aware of the memory locations of these challenge-response pairs.
顯示於類別:	[資訊工程研究所] 博碩士論文

文件中的檔案:

檔案	描述	大小	格式	瀏覽次數
index.html		0Kb	HTML	214	檢視/開啟

在NCUIR中所有的資料項目都受到原著作權保護.

社群 sharing

資料載入中.....