首页> 外文会议>IEEE Symposium on Reliable Distributed Systems >Secure Information Forwarding through Fragmentation in Delay-Tolerant Networks
【24h】

Secure Information Forwarding through Fragmentation in Delay-Tolerant Networks

机译:延迟容忍网络中的分段安全信息转发

获取原文

摘要

In application environments like international military coalitions or multi-party relief work in a disaster zone, passing secure messages using Delay Tolerant Networks (DTNs) is challenging because existing public-private key cryptographic approaches may not be always accessible across different groups due to the unavailability of Public Key Infrastructure (PKI). In addition, connectivity may be intermittent so finding the reliable route is also difficult. Thus, instead of sending the complete message in a single packet, fragmenting the messages and sending them via multiple nodes can help achieve better security and reliability when multiple groups are involved. Therefore, encrypting messages before fragmentation and then sending both the data fragments and the key fragments (needed for decryption) provide much higher security. Keys are also fragmented as sending the key in a single packet can hamper security if it is forwarded to some corrupted nodes who may try to tamper or drop it. Hence, in this paper, we develop a scheme to provide improved security by generating multiple key-shares and data fragments and disseminating them via some intermediate nodes. In this fragmentation process, we also create a few redundant blocks to guarantee higher data arrival rate at the destination when message drop rate is higher like in the DTN environment. Our performance evaluation when compared to the most closely related scheme like Multiparty Encryption shows the improvement on minimizing the number of compromised messages as well as reduced bandwidth consumption in the network.
机译:在诸如国际军事联盟或灾区多方救援工作之类的应用环境中,使用时延容忍网络(DTN)传递安全消息具有挑战性,因为由于不可用,可能无法始终在不同组之间访问现有的公私钥方法公钥基础结构(PKI)。另外,连通性可能是断断续续的,因此很难找到可靠的路由。因此,将消息分段并通过多个节点发送它们,而不是在单个数据包中发送完整的消息,可以在涉及多个组时帮助实现更好的安全性和可靠性。因此,在分段之前对消息进行加密,然后同时发送数据分段和密钥分段(需要解密),可以提供更高的安全性。密钥也被分段,因为如果将密钥转发到某些损坏的节点,这些节点可能试图篡改或丢弃密钥,则在单个数据包中发送密钥会影响安全性。因此,在本文中,我们开发了一种通过生成多个密钥共享和数据片段并通过一些中间节点分发它们来提供更高安全性的方案。在此分段过程中,我们还创建了一些冗余块,以确保在DTN环境中消息丢失率较高时,更高的数据到达率到达目的地。与最紧密相关的方案(如“多方加密”)相比,我们的性能评估显示出在减少泄露消息的数量以及减少网络带宽消耗方面的改进。

著录项

相似文献

  • 外文文献
  • 中文文献
  • 专利
获取原文

客服邮箱:kefu@zhangqiaokeyan.com

京公网安备:11010802029741号 ICP备案号:京ICP备15016152号-6 六维联合信息科技 (北京) 有限公司©版权所有
  • 客服微信

  • 服务号