Method and system for performing distributed verification with respect to measurement data in sensor network

• US 8,255,689 B2
• Filed: 10/03/2007
• Issued: 08/28/2012
• Est. Priority Date: 01/31/2007
• Status: Active Grant

• Current Assignee: Samsung Electronics Co. Ltd.
• Original Assignee: Samsung Electronics Co. Ltd.
• Inventors: Kim, Eun Ah, Yi, Jeong Hyun, Fomin, Alexey, Afanasyeva, Alexandria, Bezzateev, Sergey
• Primary Examiner(s): Shiferaw, Eleni
• Assistant Examiner(s): WILLIAMS, JEFFERY L
• Application Number:
  US11/866,494
• Publication Number:
  US 20080262798A1
• Time in Patent Office: 1,791 Days
• Field of Search: None
• US Class Current: 713/170
• CPC Class Codes: H04L 63/123 received data contents, e.g. message integrity
• CPC Class Codes: H04L 67/12 specially adapted for proprietary or special-purpose networking environments, e.g. medical networks, sensor networks, networks in vehicles or remote metering networks

Abstract

A method and system for performing a distributed verification with respect to measurement data in a sensor network. The method of performing the distributed verification with respect to measurement data in a sensor network includes: verifying, by an aggregator, the measurement data received from each of a plurality of sensors; generating, by the aggregator, verification request data by using the verified measurement data; transmitting the verification request data to a verifier; and verifying, by the verifier, the aggregator via a predetermined number of sensors of the plurality of sensors and the verification request data. The method of performing a distributed verification with respect to measurement data in a sensor network further includes transmitting, by the aggregator, an aggregation result with respect to the measurement data to a base station when the aggregator is verified; and verifying, by the base station, the aggregation result.

Claims

1. A method of performing a distributed verification with respect to measurement data in a sensor network as embodied by a computer, the method comprising:

verifying, by an aggregator, the measurement data received from each of a plurality of sensors;

generating, by the aggregator, verification request data using the verified measurement data;

transmitting the verification request data to a verifier;

verifying, by the verifier, the aggregator via a predetermined number of sensors out of the plurality of sensors and the verification request data;

transmitting, by the aggregator, an aggregation result with respect to the measurement data to a base station when the aggregator is verified; and

verifying, by the base station, the aggregation result,

wherein the transmitting of the aggregation result comprises;

generating a MAC with respect to the measurement data using a key shared between the aggregator and the base station;

calculating a verification value using a signature received from the verifier and a predetermined calculation method with respect to the MAC;

generating the aggregation result including the measurement data and the verification value; and

transmitting the aggregation result to the base station.

2. The method of claim 1, further comprising:

receiving, by the aggregator, a plurality of first message authentication codes (MACs) associated with the measurement data from the plurality of sensors;

wherein the verifying of the measurement data comprises calculating a plurality of second MACs with respect to the measurement data using a plurality of keys shared between each of the plurality of sensors and the aggregator, and verifying the measurement data if the plurality of first MACs and the plurality of second MACs are identical.

3. The method of claim 1, wherein the generating comprises:

calculating a MAC with respect to the measurement data using a key shared between the verifier and the aggregator; and

generating the verification request data including the measurement data and the MAC.

4. The method of claim 1, wherein the verifying of the aggregator via the predetermined number of sensors and the verification request data comprises:

verifying the verification request data received from the aggregator;

randomly choosing the predetermined number of sensors;

requesting measurement data from each of the predetermined number of sensors; and

verifying the aggregator based on measurement data received according to the request.

5. The method of claim 4, wherein:

the verification request data includes the measurement data and a first MAC associated with the measurement data; and

the verifying of the verification request data comprises calculating a second MAC with respect to the measurement data included in the verification request data, and verifying the verification request data when the first MAC and the second MAC are identical.

6. The method of claim 4, wherein the verifying of the aggregator via the predetermined number of sensors and the verification request data further comprises:

calculating a signature with respect to the verifying and a MAC with respect to the signature, and transmitting the signature and the MAC to the aggregator.

7. The method of claim 1, wherein the verifying of the aggregation result comprises:

calculating a first verification value using the signature received from the verifier and the measurement data included in the aggregation result; and

verifying the aggregation result when the first verification value and a second verification value are identical, the second verification value being further included in the aggregation result.

8. The method of claim 1, wherein the aggregator, the verifier, and the plurality of sensors of the sensor network are classified into a plurality of clusters, and are included in a same cluster.

19. The method according to claim 2, wherein the calculating of the plurality of second MACs comprises calculating the plurality of second MACs using a one-way hash function.

9. A method of performing a distributed verification with respect to measurement data collected by an aggregator in a verifier as embodied by a computer, the method comprising:

choosing a predetermined number of sensors according to verification request data received from the aggregator;

verifying the aggregator using measurement data received from the predetermined number of sensors;

generating a signature using a key shared with the aggregator;

transmitting the signature to the aggregator;

transmitting, by the aggregator, an aggregation result with respect to the measurement data to a base station when the aggregator is verified; and

verifying, by the base station, the aggregation result,

wherein the transmitting of the aggregation result comprises;

generating a message authentication code (MAC) with respect to the measurement data using a key shared between the aggregator and the base station;

calculating a verification value using a signature received from the verifier and a predetermined calculation method with respect to the MAC;

generating the aggregation result including the measurement data and the verification value; and

transmitting the aggregation result to the base station.

10. The method of claim 9, further comprising:

receiving the measurement data from each of a plurality of sensors existing in a same cluster;

verifying the measurement data; and

transmitting verification request data with respect to the generated measurement data using a key shared with the verifier;

wherein the verification request data includes the measurement data and the MAC generated using a key shared between the aggregator and the verifier.

11. The method of claim 9, further comprising:

calculating the MAC with respect to the measurement data using the key shared with the base station;

generating an aggregation result including the measurement data, the MAC, and the signature; and

transmitting the aggregation result to the base station.

12. The method of claim 9, wherein the verifying of the aggregator comprises:

receiving the measurement data from the predetermined number of sensors;

extracting second measurement data included in the verification request data; and

verifying the aggregator if the measurement data and the second measurement data are identical.

13. A non-transitory computer-readable recording medium storing a program to implement a method of performing a distributed verification with respect to measurement data in a sensor network, the method comprising:

verifying, by an aggregator, the measurement data received from each of a plurality of sensors;

generating, by the aggregator, verification request data using the verified measurement data and transmitting the verification request data to a verifier;

verifying, by the verifier, the aggregator via a predetermined number of sensors of the plurality of sensors and the verification request data;

transmitting, by the aggregator, an aggregation result with respect to the measurement data to a base station when the aggregator is verified; and

verifying, by the base station, the aggregation result,

wherein the transmitting of the aggregation result comprises;

generating a MAC with respect to the measurement data using a key shared between the aggregator and the base station;

calculating a verification value using a signature received from the verifier and a predetermined calculation method with respect to the MAC;

generating the aggregation result including the measurement data and the verification value; and

transmitting the aggregation result to the base station.

14. A system to perform a distributed verification with respect to measurement data in a sensor network, the system comprising:

a plurality of sensors to generate measurement data;

an aggregator to receive the measurement data from the plurality of sensors and to generate verification request data based on the measurement data; and

a verifier to verify the aggregator via the verification request data and a predetermined number of sensors of the plurality of sensors,

wherein the aggregator transmits an aggregation result with respect to the measurement data to a base station when the aggregator is verified, and

wherein the transmitting of the aggregation result comprises;

generating a MAC with respect to the measurement data using a key shared between the aggregator and the base station;

calculating a verification value using a signature received from the verifier and a predetermined calculation method with respect to the MAC;

generating the aggregation result including the measurement data and the verification value; and

transmitting the aggregation result to the base station.

15. The system of claim 14, wherein the aggregator comprises:

a receiving unit to receive the measurement data and a plurality of first message authentication codes (MACs) associated with the measurement data from the plurality of sensors;

a MAC calculation unit to calculate a plurality of second MACs with respect to the measurement data using a plurality of keys shared between each of the plurality of sensors and the aggregator; and

a measurement data verification unit to verify the measurement data when the plurality of first MACs and the plurality of second MACs are identical.

16. The system of claim 15, wherein the aggregator further comprises:

another MAC calculation unit to calculate a third MAC with respect to the measurement data using a key shared between the verifier and the aggregator;

a verification request data generation unit to generate the verification request data including the measurement data and the third MAC; and

a transmission unit to transmit the verification request data to the verifier.

17. The system of claim 14, wherein the verifier comprises:

a verification request data verification unit to verify the verification request data received from the aggregator;

a measurement data request unit to request measurement data from each of the predetermined number of sensors, the predetermined number of sensors being randomly chosen;

an aggregator verification unit to verify the aggregator based on the measurement data received according to the request; and

a transmission unit to transmit a signature based on the verification and a MAC with respect to the signature to the aggregator.

18. The system of claim 14, wherein the aggregation result includes the signature generated by the verifier, the measurement data, and a MAC with respect to the measurement data.

29. The system of claim 18, wherein the verifier is randomly chosen by the base station from a plurality of verifiers.

20. An aggregator to collect measurement data in a distributed sensor network, the aggregator comprising:

a receiving unit to receive measure data and a first message authentication code (MAC) from a plurality of sensors;

a MAC calculation unit to calculate a second MAC based on the measurement data and the first MAC;

a measurement data verification unit to verify the measurement data using the first MAC and the second MAC;

an aggregator to transmit an aggregation result with respect to the measurement data to a base station when the aggregator is verified; and

a base station to verify the aggregation result,

wherein the transmitting of the aggregation result comprises;

generating a MAC with respect to the measurement data using a key shared between the aggregator and the base station;

calculating a verification value using a signature received from the verifier and a predetermined calculation method with respect to the MAC;

generating the aggregation result including the measurement data and the verification value; and

transmitting the aggregation result to the base station.

21. The aggregator of claim 20, wherein the measurement data verification unit verifies the measurement data if the first MAC and the second MAC are identical.

22. The aggregator of claim 20, further comprising:

another MAC calculation unit to calculate a third MAC;

a verification request data generation unit to generate verification request data including the measurement data and the third MAC; and

a transmission unit to transmit the verification request data to a verifier.

23. The aggregator of claim 20, further comprising:

a transmission unit to transmit a signature and an aggregation result based on the measurement data to a base station;

wherein the aggregator receives the signature from a verifier.

24. A method of securing a sensor network as embodied by a computer, the method comprising:

receiving verification request data from an aggregator;

verifying the aggregator using measurement data received from a randomly selected predetermined number of sensors;

generating a signature using a key shared with the aggregator;

transmitting the signature to the aggregator if the aggregator is verified;

transmitting, by the aggregator, an aggregation result with respect to the measurement data to a base station when the aggregator is verified; and

verifying, by the base station, the aggregation result,

wherein the transmitting of the aggregation result comprises;

generating a MAC with respect to the measurement data using a key shared between the aggregator and the base station;

calculating a verification value using a signature received from the verifier and a predetermined calculation method with respect to the MAC;

generating the aggregation result including the measurement data and the verification value; and

transmitting the aggregation result to the base station.

25. The method of claim 24, wherein the verifying of the aggregator comprises:

verifying the verification request data received from the aggregator;

requesting the measurement data from each of the randomly selected predetermined number of sensors; and

verifying the aggregator based on the received measurement data.

26. The method of claim 25, wherein:

the verification request data includes measurement data collected by the aggregator and a first message authentication code (MAC) related to the measurement data collected by the aggregator; and

verifying the verification request data comprises calculating a second MAC based on the measurement data collected by the aggregator and verifying the verification request data if the first MAC and the second MAC are identical.

27. The method of claim 24, wherein the verifying of the aggregator comprises:

receiving the measurement data from the randomly selected predetermined number of sensors;

extracting measurement data from the verification request data; and

verifying the aggregator if the measurement data from the randomly selected predetermined number of sensors is identical to the measurement data extracted from the verification request data.

28. The method of claim 24, wherein:

the generating of the signature comprises generating the signature using the key shared with the aggregator and generating a MAC based on the signature; and

the transmitting of the signature comprises transmitting the signature and the MAC to the aggregator.

30. A method of performing a distributed verification with respect to measurement data in a sensor network as embodied by a computer, the method comprising:

verifying, by an aggregator, the measurement data received from each of a plurality of sensors;

generating, by the aggregator, verification request data using the verified measurement data;

transmitting the verification request data to a verifier;

verifying, by the verifier, the aggregator via a predetermined number of sensors out of the plurality of sensors and the verification request data; and

transmitting, by the aggregator, an aggregation result with respect to the measurement data to a base station when the aggregator is verified,

wherein the transmitting of the aggregation result comprises;

generating a MAC with respect to the measurement data using a key shared between the aggregator and the base station;

calculating a verification value using a signature received from the verifier and a predetermined calculation method with respect to the MAC;

generating the aggregation result including the measurement data and the verification value;

transmitting the aggregation result to the base station; and

verifying, by the base station, the aggregation result,

wherein the verifying of the aggregation result comprises;

calculating a first verification value using the signature received from the verifier and the measurement data included in the aggregation result; and

verifying the aggregation result when the first verification value and a second verification value are identical, the second verification value being further included in the aggregation result.

31. A method of performing a distributed verification with respect to measurement data in a sensor network as embodied by a computer, the method comprising:

verifying, by an aggregator, the measurement data received from each of a plurality of sensors;

generating, by the aggregator, verification request data using the verified measurement data;

transmitting the verification request data to a verifier;

verifying, by the verifier, the aggregator via a predetermined number of sensors out of the plurality of sensors and the verification request data;

transmitting, by the aggregator, an aggregation result with respect to the measurement data to a base station when the aggregator is verified; and

verifying, by the base station, the aggregation result,

wherein the verifying of the aggregation result comprises;

calculating a first verification value using the signature received from the verifier and the measurement data included in the aggregation result; and

verifying the aggregation result when the first verification value and a second verification value are identical, the second verification value being further included in the aggregation result.