Abstract: In order to add more nodes’ provenances to the data packet, but not increase additional storage and computation burden, based on orthogonal code and message authentication code chain, this paper proposes a secure and effective provenance scheme (orthogonal code-based provenance scheme, OP) for wireless sensor network. The OP scheme can recover the transmission path of the data packet only using one packet, and the size of the provenance is independent of the path length. The security analysis shows that the OP scheme not only can resist the forgery provenance attack launched by single malicious node, but also can resist the deleting and inserting provenance attacks launched by multiple malicious nodes collusion, and it can locate the position of the malicious nodes. The performance analysis and simulation results show that compared with the existing schemes, the OP scheme has obvious advantages in storage space and energy consumption with the increase of path length.

Key words: wireless sensor networks, provenance, orthogonal code, malicious nodes

摘要： 为了在不增加额外存储和计算负担的情况下，尽可能多地在一个数据包中嵌入更多节点的溯源数据，提出一种基于正交码和消息鉴别码链的安全溯源数据传输方案（orthogonal code-based provenance scheme, OP）。OP方案只需要一个数据包就能恢复出数据包的传输路径，并且溯源数据的大小与路径的长度无关。安全分析表明OP方案不仅能抵抗单个恶意节点修改或伪造溯源数据攻击，还能抵抗多个恶意节点合谋发起的删除、插入溯源数据等攻击，并能定位到发起攻击的恶意节点。性能分析及实验仿真表明，与现有的方案相比，随着路径长度的增加，方案在存储空间、能量消耗等方面具有明显优势。

关键词: 无线传感器网络, 溯源数据, 正交码, 恶意节点