Protocol for secure and energy-efficient reprogramming of wireless multi-hop sensor networks

• US 8,107,397 B1
• Filed: 06/05/2007
• Issued: 01/31/2012
• Est. Priority Date: 06/05/2006
• Status: Active Grant

• Current Assignee: Purdue Research Foundation (The Trustees of Purdue University (d/b/a Purdue University))
• Original Assignee: Purdue Research Foundation (The Trustees of Purdue University (d/b/a Purdue University))
• Inventors: Bagchi, Saurabh, Krogmeier, James V., Shroff, Ness B., Khalil, Issa M. I., Panta, Rajesh K., Krasniewski, Mark D.
• Primary Examiner(s): Harper, Kevin C
• Application Number:
  US11/758,636
• Time in Patent Office: 1,701 Days
• Field of Search: 370/254, 380/278, 717/177
• US Class Current: 370/254
• CPC Class Codes: G06F 8/65 Updates security arrangements therefor G06F21/57
• CPC Class Codes: H04L 2209/805 Lightweight hardware, e.g. radio-frequency identification [RFID] or sensor
• CPC Class Codes: H04L 45/02 Topology update or discovery
• CPC Class Codes: H04L 63/06 for supporting key management in a packet data network cryptographic mechanisms or cryptographic arrangements for key management H04L9/08
• CPC Class Codes: H04L 67/12 specially adapted for proprietary or special-purpose networking environments, e.g. medical networks, sensor networks, networks in vehicles or remote metering networks
• CPC Class Codes: H04L 67/34 involving the movement of software or configuration parameters network booting or remote initial program loading [RIPL] G06F9/4416
• CPC Class Codes: H04L 9/0822 using key encryption key
• CPC Class Codes: H04L 9/0833 involving conference or group key network architectures or network communication protocols for key management in group communication in a packet data network H04L63/065
• CPC Class Codes: H04L 9/0836 using tree structure or hierarchical structure
• CPC Class Codes: H04L 9/0891 Revocation or update of secret information, e.g. encryption key update or rekeying
• CPC Class Codes: H04W 24/02 Arrangements for optimising operational condition
• CPC Class Codes: H04W 4/38 for collecting sensor information
• CPC Class Codes: H04W 4/90 Services for handling of emergency or hazardous situations, e.g. earthquake and tsunami warning systems [ETWS]
• CPC Class Codes: H04W 52/02 Power saving arrangements in wired systems H04L12/12; signaling of mobile application services, e.g. low battery notifications H04W4/20
• CPC Class Codes: H04W 84/02 Hierarchically pre-organised networks, e.g. paging networks, cellular networks, WLAN [Wireless Local Area Network] or WLL [Wireless Local Loop]
• CPC Class Codes: H04W 84/18 Self-organising networks, e.g. ad-hoc networks or sensor networks
• CPC Class Codes: Y02D 30/70 in wireless communication networks

Abstract

A protocol for optimizing the energy for code upload to sensors in a wireless sensor network and speeding up the dissemination if multiple sources of code are available. Energy optimization is achieved by equipping each node with limited non-local topology information, which it uses to determine the time when it can go to sleep since code is not being distributed in its vicinity. Another aspect of the invention is a protocol that facilitates secure upload of code in the wireless sensor network. The secure communication protocol divides the sensor field into control groups each with a control node, and manages data exchange between nodes within a control group through the mediation of a control head which provides the common key. The keys are refreshed periodically and the control nodes are changed periodically to enhance security. The protocol facilitates secure communication between sensor nodes despite the compromise of any number of other nodes in the network.

Claims

1. A method of multi-hop reprogramming for a wireless sensor network using a three-way handshake protocol for transfer of new code, said handshake protocol including advertising, request and data transfer messages, said network having at least one originator and a plurality of sensor nodes, said method comprising:

propagating a warning message containing information about the nature of new code to be transmitted, said warning message including network topology information indicative of the routing of the warning message from the originator;

at each node which receives the warning message, estimating the propagation time from the originator based on the network topology information contained in said warning message and, based on the propagation time length, conditionally disabling RF circuitry to reduce power consumption during a corresponding sleep period;

each node updating the network topology information indicative of the routing of said warning message and forwarding the updated warning message to other nodes in the network; and

each node waking up at the end of said sleep period and initiating a three-way handshake protocol for transfer of code, said node receiving advertising messages from other nodes relating to new code, sending request messages for needed code, receiving needed code, and sending advertising messages to other nodes in the network relating to received code.

2. The method of claim 1, wherein each node cyclically turns its RF circuitry on and off during a quiescent phase between introductions of new code, the off time during each cycle based on the number of neighboring nodes in the network.

3. The method of claim 2, wherein each node is awake at least half the time.

4. The method of claim 3, further comprising a pull-based mechanism for servicing new nodes in the network, each new node alerting other nodes by advertising its current code, other nodes responding by advertising available new code.

5. The method of claim 1, wherein each sensor node is configured to store a cryptography key in a cache, further comprising:

distributing cryptography keys among said sensor nodes;

periodically refreshing the keys in said sensor nodes and purging the caches;

designating a control node in a group of said sensor nodes which may itself be compromised by an adversary; and

changing the control node in said group of nodes to enhance security.

6. The method of claim 5, further comprising performing local monitoring of sensor node behavior in order to detect compromised nodes.

7. A method of reprogramming for a wireless sensor network using a three-way handshake protocol for transfer of new code, said handshake protocol including advertising, request and data transfer messages, said network having at least one originator and a plurality of sensor nodes, said method comprising:

segmenting code into multiple pages each split into multiple packets;

performing a three-way handshake in units of a page, transmitting each page in units of a packet; and

enabling each node to receive pages out of order from multiple sources;

wherein each sensor node is configured to store a cryptography key in a cache, further comprising;

distributing cryptography keys among said sensor nodes;

periodically refreshing the keys in said sensor nodes and purging the caches;

designating a control node in a group of said sensor nodes which may itself be compromised by an adversary; and

changing the control node in said group of nodes to enhance security.

8. The method of claim 7, wherein a node is adapted to forward code to neighboring nodes once it has one page of a new version of code.

9. The method of claim 7, further comprising performing local monitoring of sensor node behavior in order to detect compromised nodes.