Security of Infocommunication Systems and Internet of Things
Key Distribution in Wireless Sensor Networks Using Random Channel Selection
Sergiy Nichyi, Петро Шпатар, Bohdan Nichy
Abstract
The article considers the possibility of using a key distribution method in a wireless sensor network by analogy with the quantum key distribution method. It is assumed that the wireless sensor network is created using hardware that allows the use of a predetermined N communication channels in the key distribution session, out of all possible ones (Nmin ≤ N ≤ Nmax). The initialization of the key distribution procedure is initiated by the master device/central node. At a certain time, the initiator switches to the transmission mode, and the slave devices to the reception mode. The master device generates k binary code packets (half-bytes, bytes), the number of which is predetermined. Each packet is transmitted over a randomly selected channel nTX from the range N. Slave devices receive the packet data over a randomly selected channel nRX from the range N. Based on the received packets, the master and slave devices generate a key for data exchange in a pair. The key generation algorithm is as follows: the slave device randomly selects a reception channel from consecutive k packets, of which there is a number of channel matches q, with reliable data (nTX = nRX). The remaining (k – q) received packets are unreliable, because they contain random data (channel mismatch nTX ≠ nRX). The slave device transmits to the master device a binary packet with a sequence of its own reception channel numbers. The encryption-decryption key for the master-slave pair is formed on the basis of q reliable packets, which are also determined by the master device from the received packet of the sequence of reception channels. The cryptographic stability of the generated key depends on the number of received packets q containing reliable data, a given number of channels N of the slave device of the network, as well as on the number of channels identified by a potential attacker. Methods for software and hardware implementation of this algorithm are considered, and an analysis of experimental results of using the proposed algorithm is carried out.