Efficient technique to achieve non-repudiation and resilience to DoS attacks in wireless networks
A computationally efficient message verification strategy that achieves non-repudiation and resilience to computational denial of service attacks in conjunction with a broadcast authentication protocol that authenticates messages using a combination of a digital signature and a TESLA MAC. When messages are received at a receiver, the verification strategy separates the messages into messages with the same sender identification. The strategy then determines whether the TESLA MAC authenticator is valid for each message and discards those messages that do not have a valid TESLA MAC. The strategy collects the messages that have a valid TESLA MAC for each sender identification and performs a batch verification process on the group of messages to determine if the messages in the group have a valid digital signature. This strategy verifies each message in the group of messages if the batch verification process shows that the group of messages has a valid digital signature.
1. A method for authenticating messages received by a receiver in a wireless network transmitted by senders using a transmission protocol, said method comprising:
receiving the messages at the receiver where each message includes a lightweight computational authenticator and a heavyweight computational authenticator, wherein the lightweight authenticator is a message authentication code (MAC) for a timed efficient stream loss-tolerant authentication (TESLA) protocol and wherein the heavyweight authenticator is a digital signature;
separating the received messages into messages with a same sender identification;
determining whether the lightweight authenticator of each message is valid;
discarding a message that does not have a valid lightweight authenticator;
separately collecting the messages that have a valid lightweight authenticator for each sender identification;
performing, in a processor, a batch verification process on the messages that have a valid lightweight authenticator for each sender identification to determine if a group of messages for each sender identification has a valid heavyweight authenticator;
verifying each message in the group of messages if the batch verification process shows that the group of messages has a valid heavyweight authenticator; and
determining the distance between a sender and the receiver and determining the dynamic motion of the sender and the receiver, wherein if the distance between the sender and the receiver is below a threshold and the sender and receiver dynamic motions satisfy certain requirements, the message is verified using the heavyweight authenticator only, otherwise it is verified using the lightweight authenticator.
2. The method according to claim 1 wherein the transmission protocol is a public key infrastructure (PKI) based protocol.
3. The method according to claim 1 further comprising putting a sender identification in a local revocation list if a message with that sender identification fails the batch verification process.
4. The method according to claim 1 wherein the receiver is a vehicle.
5. The method according to claim 1 wherein determining the dynamic motion of the receiver and the sender includes using kinematic models of motion.
6. The method according to claim 5 wherein using kinematic models of motion includes considering the sender's speed, acceleration, and direction of travel, the receiver's speed, acceleration and direction of travel, and the distance between the receiver and the sender.
7. A method for authenticating messages received by a receiving vehicle in a wireless network that have been transmitted by sending vehicles using a public key infrastructure (PKI) based protocol, said method comprising:
receiving the messages at the receiving vehicle where each message includes message authentication code (MAC) for a timed efficient stream lost-tolerant authentication (TESLA) and a digital signature;
separating the received messages into messages with a same sender identification;
determining whether the MAC for the TESLA of each message is valid;
discarding a message that does not have a valid TESLA MAC;
separately collecting the messages that have a valid TESLA MAC for each sender identification;
performing, in a processor, a batch verification process on the messages that have a valid TESLA MAC to determine if a group of messages has a valid digital signature;
putting a sender identification in a local revocation list if a subset of messages with that sender identification fails the batch verification process;
verifying each message in the group of messages if the batch verification process succeeds for the group of messages with the same sender ID; and
determining the distance between a sender and the receiver and determining the dynamic motion of the sender and the receiver, wherein if the distance between the sender and the receiver is below a threshold and the sender and receiver dynamic motions satisfy certain requirements, the message is verified using the heavyweight authenticator only, otherwise it is verified using the lightweight authenticator.
8. The method according to claim 7 wherein determining the dynamic motion of the receiver and the sender includes using kinematic models of motion.
9. The method according to claim 8 wherein using kinematic models of motion includes considering the sender's speed, acceleration, and direction of travel, the receiver's speed, acceleration and direction of travel, and the distance between the receiver and the sender.
10. A method for authenticating messages received by a receiver in a wireless network transmitted by senders using a transmission protocol, said method comprising:
receiving the messages at the receiver where each message includes a lightweight computational authenticator and a heavyweight computational authenticator, wherein the lightweight authenticator is a message authentication code (MAC) for a timed efficient stream loss-tolerant authentication (TESLA) protocol and wherein the heavyweight authenticator is a digital signature;
separating the received messages into messages with a same sender identification; and
determining the distance between a sender and the receiver and determining the dynamic motion of the sender and the receiver, wherein if the distance between the sender and the receiver is below a threshold and the sender and receiver dynamic motions satisfy certain requirements, the message is verified using the heavyweight authenticator only, otherwise it is verified using the lightweight authenticator.
11. The method according to claim 10 wherein determining the dynamic motion of the receiver and the sender includes using kinematic models of motion.
12. The method according to claim 10 wherein using kinematic models of motion includes considering the sender's speed, acceleration, and direction of travel, the receiver's speed, acceleration and direction of travel, and the distance between the receiver and the sender.
13. The method according to claim 10 wherein the transmission protocol is a public key infrastructure (PKI) based protocol.
14. The method according to claim 10 wherein the receiver is a vehicle.