METHOD AND SYSTEM FOR PERFORMING DISTRIBUTED VERIFICATION WITH RESPECT TO MEASUREMENT DATA IN SENSOR NETWORK

• US 20080262798A1
• Filed: 10/03/2007
• Published: 10/23/2008
• Est. Priority Date: 01/31/2007
• Status: Active Grant

• Current Assignee: Samsung Electronics Co. Ltd.
• Original Assignee: Samsung Electronics Co. Ltd.
• Inventors: Bezzateev, Sergey, Yi, Jeong Hyun, Fomin, Alexey, Afanasyeva, Alexandria, KIM, Eun Ah
• Granted Patent: US 8,255,689 B2
• Time in Patent Office: Days
• US Class Current: 702/189
• CPC Class Codes: H04L 63/123 received data contents, e.g. message integrity
• CPC Class Codes: H04L 67/12 specially adapted for proprietary or special-purpose networking environments, e.g. medical networks, sensor networks, networks in vehicles or remote metering networks

Abstract

A method and system for performing a distributed verification with respect to measurement data in a sensor network. The method of performing the distributed verification with respect to measurement data in a sensor network includes: verifying, by an aggregator, the measurement data received from each of a plurality of sensors; generating, by the aggregator, verification request data by using the verified measurement data; transmitting the verification request data to a verifier; and verifying, by the verifier, the aggregator via a predetermined number of sensors of the plurality of sensors and the verification request data. The method of performing a distributed verification with respect to measurement data in a sensor network further includes transmitting, by the aggregator, an aggregation result with respect to the measurement data to a base station when the aggregator is verified; and verifying, by the base station, the aggregation result.

Claims

1. A method of performing a distributed verification with respect to measurement data in a sensor network, the method comprising:

verifying, by an aggregator, the measurement data received from each of a plurality of sensors;

generating, by the aggregator, verification request data using the verified measurement data;

transmitting the verification request data to a verifier; and

verifying, by the verifier, the aggregator via a predetermined number of sensors out of the plurality of sensors and the verification request data.

2. The method of claim 1, further comprising:

receiving, by the aggregator, a first message authentication code (MAC) associated with the measurement data from the plurality of sensors;

wherein the verifying of the measurement data comprises calculating a second MAC with respect to the measurement data using a plurality of keys shared between each of the plurality of sensors and the aggregator, and verifying the measurement data if the first MAC and the second MAC are identical.

3. The method of claim 1, wherein the generating comprises:

calculating a MAC with respect to the measurement data using a key shared between the verifier and the aggregator; and

generating the verification request data including the measurement data and the MAC.

4. The method of claim 1, wherein the verifying of the aggregator via the predetermined number of sensors and the verification request data comprises:

verifying the verification request data received from the aggregator;

randomly choosing the predetermined number of sensors;

requesting measurement data from each of the predetermined number of sensors; and

verifying the aggregator based on measurement data received according to the request.

5. The method of claim 4, wherein:

the verification request data includes the measurement data and a first MAC associated with the measurement data; and

the verifying of the verification request data comprises calculating a second MAC with respect to the measurement data included in the verification request data, and verifying the verification request data when the first MAC and the second MAC are identical.

6. The method of claim 4, wherein the verifying of the aggregator via the predetermined number of sensors and the verification request data further comprises:

calculating a signature with respect to the verifying and a MAC with respect to the signature, and transmitting the signature and the MAC to the aggregator.

7. The method of claim 1, further comprising:

transmitting, by the aggregator, an aggregation result with respect to the measurement data to a base station when the aggregator is verified; and

verifying, by the base station, the aggregation result.

8. The method of claim 7, wherein the transmitting of the aggregation result comprises:

generating a MAC with respect to the measurement data using a key shared between the aggregator and the base station;

calculating a verification value using a signature received from the verifier and a predetermined calculation method with respect to the MAC;

generating the aggregation result including the measurement data and the verification value; and

transmitting the aggregation result to the base station.

9. The method of claim 7, wherein the verifying of the aggregation result comprises:

calculating a first verification value using the signature received from the verifier and the measurement data included in the aggregation result; and

verifying the aggregation result when the first verification value and a second verification value are identical, the second verification value being further included in the aggregation result.

10. The method of claim 1, wherein the aggregator, the verifier, and the plurality of sensors of the sensor network are classified into a plurality of clusters, and are included in a same cluster.

21. The method according to claim 2, wherein the calculating of the second MAC comprises calculating the second MAC using a one-way hash function.

11. A method of performing a distributed verification with respect to measurement data collected by an aggregator in a verifier, the method comprising:

choosing a predetermined number of sensors according to verification request data received from the aggregator;

verifying the aggregator using measurement data received from the predetermined number of sensors;

generating a signature using a key shared with the aggregator; and

transmitting the signature to the aggregator.

12. The method of claim 11, further comprising:

receiving the measurement data from each of a plurality of sensors existing in a same cluster;

verifying the measurement data; and

transmitting verification request data with respect to the generated measurement data using a key shared with the verifier;

wherein the verification request data includes the measurement data and a message authentication code (MAC) generated using a key shared between the aggregator and the verifier.

13. The method of claim 11, further comprising:

calculating a MAC with respect to the measurement data using a key shared with a base station;

generating an aggregation result including the measurement data, the MAC, and the signature; and

transmitting the aggregation result to a base station.

14. The method of claim 11, wherein the verifying of the aggregator comprises:

receiving the measurement data from the predetermined number of sensors;

extracting second measurement data included in the verification request data; and

verifying the aggregator if the measurement data and the second measurement data are identical.

15. A computer-readable recording medium storing a program to implement a method of performing a distributed verification with respect to measurement data in a sensor network, the method comprising:

verifying, by an aggregator, the measurement data received from each of a plurality of sensors;

generating, by the aggregator, verification request data using the verified measurement data and transmitting the verification request data to a verifier; and

verifying, by the verifier, the aggregator via a predetermined number of sensors of the plurality of sensors and the verification request data.

16. A system to perform a distributed verification with respect to measurement data in a sensor network, the system comprising:

a plurality of sensors to generate measurement data;

an aggregator to receive the measurement data from the plurality of sensors and to generate verification request data based on the measurement data; and

a verifier to verify the aggregator via the verification request data and a predetermined number of sensors of the plurality of sensors.

17. The system of claim 16, wherein the aggregator comprises:

a receiving unit to receive the measurement data and a first message authentication code (MAC) associated with the measurement data from the plurality of sensors;

a MAC calculation unit to calculate a second MAC with respect to the measurement data using a plurality of keys shared between each of the plurality of sensors and the aggregator; and

a measurement data verification unit to verify the measurement data when the first MAC and the second MAC are identical.

18. The system of claim 17, wherein the aggregator further comprises:

another MAC calculation unit to calculate a third MAC with respect to the measurement data using a key shared between the verifier and the aggregator;

a verification request data generation unit to generate the verification request data including the measurement data and the third MAC; and

a transmission unit to transmit the verification request data to the verifier.

19. The system of claim 16, wherein the verifier comprises:

a verification request data verification unit to verify the verification request data received from the aggregator;

a measurement data request unit to request measurement data from each of the predetermined number of sensors, the predetermined number of sensors being randomly chosen;

an aggregator verification unit to verify the aggregator based on the measurement data received according to the request; and

a transmission unit to transmit a signature based on the verification and a MAC with respect to the signature to the aggregator.

20. The system of claim 16, further comprising:

a base station to verify an aggregation result received from the aggregator,

wherein the aggregation result includes the signature generated by the verifier, the measurement data, and a MAC with respect to the measurement data.

41. The system of claim 20, wherein the verifier is randomly chosen by the base station from a plurality of verifiers.

22. A verifier to verify data in a distributed sensor network, the verifier comprising:

a verification request data verification unit to verify verification request data received from an aggregator;

a measurement data request unit to request measurement data from a predetermined number of sensors;

an aggregator verification unit to verify the aggregator based on the verification request data and the measurement data received from the predetermined number of sensors; and

a transmission unit to transmit a signature based on the verification and a message authentication code (MAC) to the aggregator.

23. The verifier of claim 22, wherein the predetermined number of sensors are chosen randomly.

24. The verifier of claim 22, wherein the verification request data includes measurement data collected by the aggregator.

25. The verifier of claim 22, wherein:

the verification request data includes a first MAC; and

the verification request data verification unit verifies the verification request data by calculating a second MAC, comparing the first MAC and the second MAC, and verifying the verification request data if the first MAC is identical to the second MAC.

26. An aggregator to collect measurement data in a distributed sensor network, the aggregator comprising:

a receiving unit to receive measure data and a first message authentication code (MAC) from a plurality of sensors;

a MAC calculation unit to calculate a second MAC based on the measurement data and the first MAC; and

a measurement data verification unit to verify the measurement data using the first MAC and the second MAC.

27. The aggregator of claim 26, wherein the measurement data verification unit verifies the measurement data if the first MAC and the second MAC are identical.

28. The aggregator of claim 26, further comprising:

another MAC calculation unit to calculate a third MAC;

a verification request data generation unit to generate verification request data including the measurement data and the third MAC; and

a transmission unit to transmit the verification request data to a verifier.

29. The aggregator of claim 26, further comprising:

a transmission unit to transmit a signature and an aggregation result based on the measurement data to a base station;

wherein the aggregator receives the signature from a verifier.

30. A method of efficiently managing and verifying data in a sensor network, the method comprising:

verifying measurement data received from a plurality of sensors;

generating verification request data based on the verified measurement data; and

transmitting the verification request data destined for a verifier.

31. The method of claim 30, further comprising:

receiving a first message authentication code (MAC) related to the measurement data from the plurality of sensors;

wherein the verifying of the measurement data comprises calculating a second MAC based on the measurement data and the first MAC and verifying the measurement data if the first MAC and the second MAC are identical.

32. The method of claim 30, wherein the calculating of the second MAC comprises calculating the second MAC using a plurality of keys shared with the plurality of sensors.

33. The method of claim 30, wherein the generating of the verification request data comprises:

calculating a MAC based on the measurement data and a key shared with the verifier; and

generating the verification request data including the measurement data and the MAC.

34. The method of claim 30, further comprising:

receiving a signature from the verifier in response to the transmission of the measurement data; and

transmitting an aggregation result based on the measurement data and the signature received from the verifier to a base station.

35. The method of claim 34, wherein the transmitting of the aggregation result comprises:

generating a MAC based on the measurement data using a key shared with the base station;

calculating a verification value based on the signature and a predetermined calculation method, the predetermined method based on the MAC;

generating the aggregation result including the measurement data and the verification value; and

transmitting the aggregation result to the base station.

36. A method of securing a sensor network, the method comprising:

receiving verification request data from an aggregator;

verifying the aggregator using measurement data received from a randomly selected predetermined number of sensors;

generating a signature using a key shared with the aggregator; and

transmitting the signature to the aggregator if the aggregator is verified.

37. The method of claim 36, wherein the verifying of the aggregator comprises:

verifying the verification request data received from the aggregator;

requesting the measurement data from each of the randomly selected predetermined number of sensors; and

verifying the aggregator based on the received measurement data.

38. The method of claim 37, wherein:

the verification request data includes measurement data collected by the aggregator and a first message authentication code (MAC) related to the measurement data collected by the aggregator; and

verifying the verification request data comprises calculating a second MAC based on the measurement data collected by the aggregator and verifying the verification request data if the first MAC and the second MAC are identical.

39. The method of claim 36, wherein the verifying of the aggregator comprises:

receiving the measurement data from the randomly selected predetermined number of sensors;

extracting measurement data from the verification request data; and

verifying the aggregator if the measurement data from the randomly selected predetermined number of sensors is identical to the measurement data extracted from the verification request data.

40. The method of claim 36, wherein:

the generating of the signature comprises generating the signature using the key shared with the aggregator and generating a MAC based on the signature; and

the transmitting of the signature comprises transmitting the signature and the MAC to the aggregator.