Distributed Node Revocation based on Cooperative Security
Óscar García, Heribert Baldus · 2007
Compromised and misbehaving nodes in wireless sensor networks are a serious threat, as an attacker can use them to eavesdrop on communications, inject false data, or damage network protocols like routing or time synchronization. In this context, the distributed revocation of compromised nodes plays a crucial role as it enables to exclude such nodes in an efficient way without requiring the presence of a centralized security infrastructure. In this paper, we introduce a novel distributed node revocation protocol based on the disclosure of revocation information. As a prerequisite for joining the network, each node must distribute revocation votes to its neighbours. This concept allows enhancing the security level of the network in an efficient manner: if an intruder refuses to disclose its revocation information, it can neither join, and thus, nor damage the network. If the intruder collaborates by disclosing the revocation information, it can endanger the network neither, since the node's neighbours cooperate to monitor its correct operation, and would revoke it.