US 2011/0238997 A1 · EFFICIENT TECHNIQUE TO ACHIEVE NON-REPUDIATION AND RESILIENCE TO DoS ATTACKS IN WIRELESS NETWORKS

Abstract

A computationally efficient message verification strategy that achieves non-repudiation and resilience to computational denial of service attacks in conjunction with a broadcast authentication protocol that authenticates messages using a combination of a digital signature and a TESLA MAC. When messages are received at a receiver, the verification strategy separates the messages into messages with the same sender identification. The strategy then determines whether the TESLA MAC authenticator is valid for each message and discards those messages that do not have a valid TESLA MAC. The strategy collects the messages that have a valid TESLA MAC for each sender identification and performs a batch verification process on the group of messages to determine if the messages in the group have a valid digital signature. This strategy verifies each message in the group of messages if the batch verification process shows that the group of messages has a valid digital signature.

Claims20

Dependent claims

A method for authenticating messages received by a receiver in a wireless network transmitted by senders using a transmission protocol, said method comprising:

receiving the messages at the receiver where each message includes a lightweight computational authenticator and a heavyweight computational authenticator;
separating the received messages into messages with a same sender identification;
determining whether the lightweight authenticator of each message is valid;
discarding a message that does not have a valid lightweight authenticator;
separately collecting the messages that have a valid lightweight authenticator for each sender identification;
performing a batch verification process on the messages that have a valid lightweight authenticator for each sender identification to determine if a group of messages for each sender identification has a valid heavyweight authenticator;
and
verifying each message in the group of messages if the batch verification process shows that the group of messages has a valid heavyweight authenticator.

5 more elements

A method for authenticating messages received by a receiving vehicle in a wireless network that have been transmitted by sending vehicles using a public key infrastructure (PKI) based protocol, said method comprising:

receiving the messages at the receiving vehicle where each message includes message authentication code (MAC) for a timed efficient stream lost-tolerant authentication (TESLA) and a digital signature;
separating the received messages into messages with a same sender identification;
determining whether the MAC for the TESLA of each message is valid;
discarding a message that does not have a valid TESLA MAC;
separately collecting the messages that have a valid TESLA MAC for each sender identification;
performing a batch verification process on the messages that have a valid TESLA MAC to determine if a group of messages has a valid digital signature;
putting a sender identification in a local revocation list if a subset of messages with that sender identification fails the batch verification process;
and
verifying each message in the group of messages if the batch verification process succeeds for the group of messages with the same sender ID.

6 more elements

Dependencies are inferred from the claim text.

EFFICIENT TECHNIQUE TO ACHIEVE NON-REPUDIATION AND RESILIENCE TO DoS ATTACKS IN WIRELESS NETWORKS

Life of this patent

EFFICIENT TECHNIQUE TO ACHIEVE NON-REPUDIATION AND RESILIENCE TO DoS ATTACKS IN WIRELESS NETWORKS

Life of this patent

Abstract

Claims20