Design And Implementation Of Key Distribution Scheme For ZigBee

With the extensive application of ZigBee technology, ZigBee security issues have graduallybecome the focus of attention. On the basis of analyzing and summarizing up security flaws inthe original key distribution scheme of ZigBee specification, ZigBee key distribution model andZigBee security enhanced architecture are proposed. And then, a safe ZigBee master keypre-distribution scheme and a safe ZigBee link key distribution scheme with authentification aredesigned, and, ultimately, a ZigBee key distribution prototype system is implemented.Through in-depth study of ZigBee security architecture, aiming at solving the securityissues of lack of identity authentication, poor network scalability and low immunity to securityflaws in the original key distribution scheme of ZigBee specification, the ZigBee key distributionmodel is designed. By improving the function of the application layer and the security servicesprovider of ZigBee protocol stack, the ZigBee security enhanced architecture is proposed, whichcan provide guidance for design of ZigBee key distribution scheme and implementation ofZigBee key distribution prototype system.According to the ZigBee key distribution model, aiming at the problem of lack of securityin ZigBee master key pre-distribution process, based on the multi-key space scheme of Blom keypre-distribution model, combined with the depth of ZigBee node deployed in network, the masterkey pre-distribution scheme for ZigBee network is designed to enhance the security of theZigBee master key pre-distribution process. ZigBee master key pre-distribution scheme is asecurity improvement to the original program of ZigBee specification.Aiming at the problem of lack of identity authentication when ZigBee nodes compose anetwork, based on the idea of identity-based cryptography, the ZigBee link key distributionscheme with authentification is proposed by using additive group on elliptic curve without weilpairing operator. According to this new security link key distribution scheme for ZigBee network,the completion of ZigBee link key distribution process can be simultaneous with identityauthentication, and the proposed scheme has advantages of high security and extensibility.On the basis of the above work, ZigBee key distribution prototype system is implementedby the idea of combination of hardware and software. And then, the function and performance ofthe prototype system are tested. The results show that the prototype system works properly, andthe indicators of the prototype system achieve the desired design goals. The contents of thispaper will help enhance the security level of ZigBee technology and lay the theoretical andtechnical foundation for the application of ZigBee technology in the field of high security.