SLGP Header

Secure Authentication of Multicast protocol for Ad-Hoc Networks

IJEECC Front Page

Abstract
multicast stream authentication and signing is an important and challenging problem.applications such astroop coordination in a combat field, situational awareness, etc.the main challenges are fourfold.first,authenticity must be guaranteed even when only the sender of the data is trusted. Second, unguaranteed connectivity to trusted authorities make known solutions for wired and single hop wireless network inappropriate.we propose an efficient Scheme, Tiered Authentication scheme for Multicast traffic (TAM) for large scale dense ad-hoc networks. TAM combines the advantages of the time asymmetry and the secret information asymmetry paradigms and exploits network clustering to reduce overhead and ensure scalability. Multicast traffic within a cluster employs a one-way hash function chain in order to authenticate the message source. Cross-cluster multicast traffic includes message authentication codes (MACs) that are based on a set of keys. Each cluster uses a unique subset of keys to look for its distinct combination of valid MACs in the message in order to authenticate the source. The simulation and analytical results demonstrate the performance advantage of TAM in terms of bandwidth overhead and delivery delay.
Index Terms—Multicast communications, message authentication, ad-hoc networks.
INTRODUCTION
THE continual advancement in wireless technologies has enabled networked-solutions for many nonconventional civil and military applications. In recent years ad-hoc networks have been attracting increased attention from the research and engineering community, motivated by applications like digital battlefield, asset tracking, air-borne safety, situational awareness, and border protection. In these network applications, it is important to devise efficient network management solutions suitable for nodes that are constrained in onboard energy and in their computation and communication capacities. In addition, the solutions must be scalable to support networks covering vast areas with a large set of nodes that communicate over many hops. These characteristics make the design and management of ad-hoc networks significantly challenging in comparison to contemporary networks. In addition, the great flexibility of ad-hoc networking comes at the price of an increased vulnerability to security attacks and trade-off would be unavoidable at the level of network management and services
Multiple factors make multicast authentication in ad-hoc networks very challenging. The issues are fundamentally due to the resource constraints and the wireless links. First, nodes have limited computing, bandwidth, and energy resources which make the overhead of basic asymmetric key-pair cryptography methods very expensive. In addition, the unstable wireless links due to radio interference cause frequent packet loss errors and require a security solution that can tolerate missed packets, as well as differentiate between packet retransmission and replay. Furthermore, the instability of the wireless links makes it unwise to rely on the continual involvement of a trusted authority in the generation and sharing of session keys since a stable connection cannot be guaranteed. On the other hand, while basic symmetric key cryptography methods are efficient, they are ineffective for multicast traffic patterns; since using a common key for all receivers will make it relatively easy to impersonate a sender by any of the receiving nodes.

References:

  1. C. E. Perkins, Ad Hoc Networking. Addison-Wesley, 2001.
  2. H. Yang, et al., “Security in mobile ad-hoc wireless networks: challenges and solutions,” IEEE Wireless Commun. Mag., vol. 11, no. 1, pp. 1536–1284, Feb. 2004.
  3. Y. Challal, H. Bettahar, and A. Bouabdallah, “A taxonomy of multicast data origin authentication, issues and solutions,” IEEE Commun. Surveys & Tutorials, vol. 6, no. 3, pp. 34–57, 2004.
  4. A. Perrig, R. Canetti, D. Song, and D. Tygar, “Efficient authentication and signing of multicast streams over lossy channels,” in Proc. 2000 IEEE Symposium Security Privacy.
  5. R. Canetti et al., “Multicast security: a taxonomy and efficient constructions,”in Proc. 1999 IEEE INFOCOM.
  6. R. Safavi-Naini and H. Wang, “Multi-receiver authentication codes: models, bounds, constructions, and extensions,” Inf. Computation, vol.no. 1–2, pp. 148–172, May 1999.
  7. Perrig, et al., “Efficient and secure source authentication for multicast,”in Proc. 2001 Network Distributed System Security Symposium.
  8. A. Perrig, “The BiBa one-time signature and broadcast authentication protocol,” in Proc. 2001 ACM Conf. Computer Commun. sSecurity.
  9. L. Reyzin and N. Reyzin, “Better than BiBa: short one-time signatures with fast signing and verifying,” in Proc. 2002 Australian Conf. Info.Security Privacy, pp. 144–153
  10. A. M. Hegland, E. Winjum, S. F. Mjolsnes, C. Rong, O. Kure, and P. Spilling, “A survey of key management in ad hoc networks,” IEEE Commun. Surveys & Tutorials, vol. 8, no. 3, pp. 48–66, Dec. 2006.
  11. F. R. Yu, H. Tang, P. Mason, and F. Wang, “A hierarchical identity based key management scheme in tactical mobile ad hoc networks,”IEEE Trans. Netw. Service Management, vol. 7, no. 4, pp. 258–267,Dec. 2010.
  12. R. Gennaro, et al., “Strongly-resilient and non-interactive hierarchical key-agreement in MANETs,” in Proc. 2008 European Symp. Research Computer Security. 293–303, 2002.