臺灣博碩士論文加值系統

近年來無線感測網路技術的發展，使得無線感測網路在各項應用已越來越廣泛。尤其透過無線醫療感測網路，醫療院所可以針對病人提供醫療照護及生理狀況的監測。然而，由於無線感測網路的開放特性，使得如何有效的保護病患資料的隱私，及防範網路的惡意攻擊，並且提供各項裝置間的雙向認證，成為無線醫療感測網路的重要議題。在網路中，需要提供一個良好的認證機制，以確保合法的使用者透過登入遠端伺服器確認身份後，才可以取得服務與資源。在本研究所提供的機制，特別針對使用者不同的存取權限提供了使用者存取控制清單機制，此機制包含了使用者識別碼、使用者存取群組識別碼及使用者權限。而在使用者認證機制上，主要透過智慧卡系統來儲存認證用資訊，並採用橢圓曲線密碼系統、雜湊函數及對稱金鑰密碼系統來進行網路認證。除此之外，本研究更滿足了前推與後推安全的需求，以保護病患資料的安全。本研究透過與之前其他研究者所提出的認證機制做比較，顯示本研究所提出的認證機制在不提高通訊成本與運算量上，可以提供較多的功能及較高的安全性，以適用於無線醫療感測網路。

In recent years, the development of wireless sensor networks (WSN) makes the applications become more widely. Especially, wireless medical sensor networks can be applied to provide healthcare and patient monitoring. However, due to the open environment of characteristics of WSN, how to protect the patient privacy, defend various kinds of network attack methods and provide mutual authentication have become one of the most important issues in wireless medical sensor networks. Within the network, it requires a valid mechanism that can be used to verify the legal users who attempt to access the services and resources from a remote server. In our research, we propose a user access control scheme for different permission of users. It makes use of user access identity, group-based access identity and an access privilege mask. The proposed authentication scheme store the information of authentications by smart card. It uses elliptic curve cryptosystem (ECC), hashing function and symmetric key cryptosystem. In addition, our research also satisfies the security of perfect forward and backward secrecy to protect the security of data. Finally, our scheme doesn’t need more communication cost and the computational effort to gain more function and security as compared to previous researches, so they are quite suitable to be used for wireless medical sensor networks.

目錄
誌謝 I
摘要 II
Abstract III
目錄 IV
圖目錄 VI
表目錄 VIII
第一章 緒論 1
1.1 研究背景與動機 1
1.2 研究目的 3
1.3 研究範圍 3
1.4 研究程序 4
1.5 論文架構 4
第二章 文獻探討 6
2.1 無線感測網路 6
2.2 無線醫療感測網路 8
2.3 密碼學 10
2.4 橢圓曲線密碼系統 17
2.5 相關研究 19
第三章 研究方法 37
3.1 系統簡介 37
3.2 系統架構 38
3.3 系統假設 39
3.4 存取控制清單及機制符號表 40
3.5 機制流程介紹 42
第四章 分析與討論 58
4.1 功能性分析 58
4.2 安全性分析 60
4.3 效能分析 65
4.4 小結 66
第五章 結論與未來研究 68
5.1 結論 68
5.2 未來研究 71
參考文獻 72

[1] 方翠鶯，「可支援隨意網路醫療照護之安全機制」，東海大學資訊管理學系碩士論文，2011年。
[2] 中華民國內政部統計網，http://www.moi.gov.tw/stat/ (最後存取時間：2014/06/03)。
[3] 中華民國全國法規資料庫，http://law.moj.gov.tw/ (最後存取時間：2014/06/03)。
[4] 中華民國國家教育研究院，http://terms.naer.edu.tw/detail/1285648/ (最後存取時間：2014/06/03)。
[5] 吳伶言，「在臺大醫院無線感測網路中跨層設計之資料傳輸機制的實作與研究」，台灣大學電信工程學系碩士論文，2011年。
[6] 楊松諺、上官飛鳳，「Java Security全方位解決方案」，碁峰資訊股份有限公司，2004年。
[7] 賴溪松、韓亮、張真誠，「近代密碼學及其應用」，旗標出版股份有限公司，2003年。
[8] 盧佩君，「雲端運算安全且有效率之資料與隱私保護機制之研究」，高雄第一科技大學資訊管理學系碩士論文，2013年。
[9] A (Relatively Easy to Understand) Primer on Elliptic Curve Cryptography, http://arstechnica.com/security/2013/10/a-relatively-easy-to-understand-primer-on-elliptic-curve-cryptography/ (Final Access Date:2014/06/03).
[10] Abdullah AI-Mahmud, and Matei Ciobanu Morogan, “Identity-Based Authentication and Access Control in Wireless Sensor Networks,” International Journal of Computer Applications, Vol. 41, No. 13, pp. 18-24, 2012.
[11] Akyildiz I. F., Weilian Su, Sankarasubramaniam. Y., and Cayirci E., “A Survey on Sensor Networks,” IEEE Communications Magazine, Vol. 40, No. 8, pp. 102-114, 2002.
[12] Ar Milenkovic, Chris Otto, and Emil Jovanov, “Wireless Sensor Networks for Personal Health Monitoring: Issues and An Implementation,” Wirelsess Senson Networks and Wired/Wireless Internet Communications, Vol. 29, No. 13–14, pp. 2521-2533, 2006.
[13] Arikumar K. S., and Thirumoorthy K., “Improved User Authentication in Wireless Sensor Networks,” International Conference on Emerging Trends in Electrical and Computer Technology, pp. 1010-1015, 2011.
[14] Arjen K. Lenstra, Thorsten Kleinjung, and Emmanuel Thome, “Universal Security,” Springer, 2013.
[15] Chun-Ta Li, “A More Secure and Efficient Authentication Scheme with Roaming Service and User Anonymity for Mobile Communications,” Information Technology and Control, Vol. 41, No. 1, pp. 69-76, 2012.
[16] Chun-Ta Li, Cheng-Chi Lee, Lian-Jun Wang, and Chen-Ju Liu, “A Secure Billing Service with Two-Factor User Authentication in Wireless Sensor Networks,” International Journal of Innovative Computing, Information and Control, Vol. 7, No. 8, pp. 4821-4831, 2011.
[17] Chun-Ta Li, Chi-Yao Weng, and Cheng-Chi Lee, “An Advanced Temporal Credential-Based Security Scheme with Mutual Authentication and Key Agreement for Wireless Sensor Networks,” Sensors, Vol. 13, No. 8, pp. 9589-9603, 2013.
[18] Chun-Ta Li, Chi-Yao Weng, Cheng-Chi Lee, Chin-Wen Lee, Ping-Nan Chiu, and Cheng-Yi Wu, “Security Flaws of a Password Authentication Scheme for Hierarchical WSNs,” Journal of Advances in Computer Networks, Vol. 1, No. 2, pp. 121-124, 2013.
[19] CodeBlue, http://fiji.eecs.harvard.edu/CodeBlue (Final Access Date:2014/06/03).
[20] Daojing He, Jiajun Bu, Sencun Zhu, Chan Sammy, and Chun Chen, “Distributed Access Control with Privacy Support in Wireless Sensor Networks,” IEEE Transactions on Wireless Communications, Vol. 10, No. 10, pp. 3472-3481, 2011.
[21] David J. Malan, Matt Welsh, and Michael D. Smith, “A Public-Key Infrastructure for Key Distribution in TinyOS Based on Elliptic Curve Cryptography,” The First IEEE International Conference on Sensor and Ad Hoc Communications and Networks, pp. 71-80, 2004.
[22] Ding Wang, Chun-guang Ma, and Peng Wu, “Secure Password-Based Remote User Authentication Scheme with Non-Tamper Resistant Smart Cards,” Data and Applications Security and Privacy, Vol. 7371, pp. 114-121, 2012.
[23] Eun-Jun Yoon, Sung-Bae Choi, and Kee-Young Yoo, “A Secure and Efficiency ID-Based Authenticated Key Agreement Scheme Based on Elliptic Curve Cryptosystem for Mobile Devices,” International Journal of Innovative Computing, Information and Control, Vol. 8, No. 4, pp. 2637-2653, 2012.
[24] Garth V. Crosby, Tirthankar Ghosh, Renita Murimi, and Craig A. Chin, “Wireless Body Area Networks for Healthcare: A Survey,” International Journal of Ad hoc, Sensor & Ubiquitous Computing, Vol. 3, No. 3, pp. 1-26, 2012.
[25] Hafizul Islam SK, and Biswas G. P., “Design of Improved Password Authentication and Update Scheme Based on Elliptic Curve Cryptography,” Information System Security and Performance Modeling and Simulation for Future Mobile Networks, Vol. 57, No. 11-12, pp. 2703-2717, 2011.
[26] Hande Alemdar, and Cem Ersoy, “Wireless Sensor Networks for Healthcare: A Survey,” Computer Networks, Vol. 54, No. 15, pp. 2688-2710, 2010.
[27] Haodong Wang, Bo Sheng, and Qun Li, “Elliptic Curve Cryptography-Based Access Control in Sensor Networks,” International Journal of Security and Networks, Vol. 1, No. 3, pp. 127-137, 2006.
[28] Hsiu-Lien Yeh, Yien-Ho Chen, Pin-Chuan Liu, Tai-Hoo Kim, and Hsin-Wen Wei, “A Secured Authentication Protocol for Wireless Sensor Networks Using Elliptic Curves Cryptography,” Sensors 11, Vol. 5, pp. 4767-4779, 2011.
[29] Laurent Eschenauer, and Virgil D. Gligor, “A Key-Management Scheme for Distributed Sensor Networks,” Proceeding of the 9th ACM conference on Computer and Communications Security, pp. 41-47, 2002.
[30] Li Ming, Wenjing Lou, and Kui Ren, “Data Security and Privacy in Wireless Body Area Networks,” IEEE Wireless Communications, Vol. 17, No. 1, pp. 51-58, 2010.
[31] Martin Feldhofer, and Christian Rechberger, “A Case Against Currently Used Hash Functions in RFID Protocols,” Lecture Notes in Computer Science, Vol. 4277, pp. 372-381, 2006.
[32] Min Wei, Keecheon Kim, and Ping Wang, “Research on a Mutual Authentication Scheme for Wireless Sensor Networks,” International Conference on Information Networking, pp. 523-528, 2012.
[33] Pardeep Kumar, and Hoon-Jae Lee, “Security Issues in Healthcare Applications Using Wireless Medical Sensor Networks: A Survey,” Sensors 12, No. 1, pp. 55-91, 2012.
[34] Ping Guo, Jin Wang, Jiezhong Zhu, and Yaping Cheng, “Authentication Mechanism on Wireless Sensor Networks: A Survey,” The Second International Conference on Information Technology and Computer Science, Vol. 25, pp. 425-431, 2013.
[35] Poon, C. C. Y., Yuan-Ting Zhang, and Shu-Di Bao, “A Novel Biometrics Method to Secure Wireless Body Area Sensor Networks for Telemedicine and M-Health,” IEEE Communications Magazine, Vol. 44, No. 4, pp. 73-81, 2006.
[36] Rajaram Ramasamy, and Amutha Prabakar Muniyandi, “An Efficient Password Authentication Scheme for Smart Card,” International Journal of Network Security, Vol. 14, No. 3, pp. 180-186, 2012.
[37] Ramesh S., and Murali Bhaskaran V., “An Improved Remote User Authentication Scheme with Elliptic Curve Cryptography and Smart Card without using Bilinear Pairings,” International Journal of Engineering and Technology, Vol. 5, No. 6, pp. 5140-5154, 2013.
[38] Ronald Watro, Derrick Kong, Sue-Fen Cuti, Charles Gardiner, Charles Lynn, and Peter Kruus, “TinyPK: Securing Sensor Networks with Public Key Technology,” Proceedings of the 2nd ACM Workshop on Security of Ad Hoc and Sensor Networks, pp. 59-64, 2004.
[39] Ronggong Song, “Advanced Smart Card Based Password Authentication Protocol,” Computer Standards & Interfaces, Vol. 32, No. 5-6, pp. 321-325, 2010.
[40] Shannaz Saleem, Sana Ullah, and Kyung Sup Kwak, “A Study of IEEE 802.15.4 Security Framework for Wireless Body Area Networks,” Sensors 11, No. 2, pp. 1383-1395, 2011.
[41] Smart Dust, http://robotics.eecs.berkeley.edu/~pister/SmartDust/ (Final Access Date:2014/06/03).
[42] Tien-Ho Chen, and Wei-Kuan Shih, “A Robust Mutual Authentication Protocol for Wireless Sensor Networks,” Electronics and Telecommunications Research Institute Jourmal, Vol. 32, pp. 704-712, No. 5, 2010.
[43] Turkanovic M., and Holbl M., “An Improved Dynamic Password-Based User Authentication Scheme for Hierarchical Wireless Sensor Networks,” Electronics & Electrical Engineering, Vol. 19, No. 6, pp. 109-116, 2013.
[44] Vijay Garg, “Wireless Communications and Networking,” Morgan Kaufmann, 2010.
[45] Wenbo Shi, and Peng Gong, “A New User Authentication Protocol for Wireless Sensor Networks Using Elliptic Curves Cryptography,” International Journal of Distributed Sensor Networks, Vol. 2013, pp. 1-7, 2013.
[46] Xuefei Cao, Weidong Kou, Lanjun Dang, and Bin Zhao, “IMBAS: Identity-Based Multi-User Broadcast Authentication in Wireless Sensor Networks,” Computer Communications, Vol. 31, No. 4, pp. 659-667, 2008.
[47] Yanbin Chen, Jianni Xushuai, Qiongxi Jiang, and Lihua Gong, “Key Agreement Protocol Based on Chebyshev Polynomials for Wireless Sensor Network,” Journal of Computational Information Systems, Vol. 10, No. 2, pp. 589-594, 2014.
[48] Young Sil Lee, Hoon Jae Lee, and Esko Alasaarela, “Mutual Authentication in Wireless Body Sensor Network (WBSN) Based on Physical Unclonable Function (PUF),” International Wireless Communications and Mobile Computing Conference , pp. 1314-1318, 2013.
[49] Yung-Cheng Lee, “Weakness and Improvement of the Smart Card Based Remote User Authentication Scheme with Anonymity,” Journal of Information Science & Engineering, Vol. 29, No. 6, pp. 1121-1134, 2013.
[50] Zinaida Benenson, Nils Gedicke, and Ossi Raivio, “Realizing Robust User Authentication in Sensor Networks,” In Proceedings of Workshop on Real-World Wireless Sensor Networks, Vol. 14, 2005.