面向多类型终端的天地一体化信息网络接入与切换认证机制研究

doi:10.11959/j.issn.2096-8930.2021026

Abstract

Abstract:

With the maturity of the key technologies of the new spectrum of the network, the network can accommodate users of various frequency bands.In order to make eff ective use of resources, diff erentiated terminals need targeted and customized security protection mechanisms.In the unifi ed network architecture, three access authentication mechanisms were proposed for common terminals, high-speed terminals and Ka terminals.At the same time, in order to ensured that diff erent types of terminals could still obtain continuous network services after accessing the network, a switching authentication mechanism based on pre-switching was proposed to provided unifi ed security switching services for the three types of terminals.Formal verifi cation tool named Scyther and informal security analysis results showed that the proposed scheme meet a variety of security requirements of the proposed scenario.At the same time, compared with the same type schemes, the proposed scheme can achieve the eff ective balance between security and performance, which can meet multidimensional integration of heaven and earth network of the scene terminal access switch and certifi cation requirements.

Key words: multi-type terminal, space-integrated-ground information network, access authentication, handover authentication

CLC Number:

TP393

Jin CAO, Lilan CHEN, Ruhui MA, Hui LI, Fenghua LI. Research on Access and Handover Authentication Mechanism of SpaceIntegrated-Ground Information Network for Multi-Type Terminals[J]. Space-Integrated-Ground Information Networks, 2021, 2(3): 2-14.

Figures/Tables 20

符号	含义
K	终端预置共享密钥
AMF	认证管理域标识
ID	终端身份标识
E	椭圆曲线
G	循环群
q	循环群的阶
sk	服务器私钥， $sk \in Z_{q}^{*}$
pk	服务器公钥，pk=sk*P
CRET	Ka终端证书，包含(ID‖pk_i‖pk)
R_*,a,b,c	随机数
h	单向哈希函数
K_Sat	基础密钥

类型	终端/卫星/μs	地面控制中心/μs
椭圆曲线点乘运算（T_pm）	$T_{{pm}_{1}} : 1.00 \times 10^{3}$	$T_{{pm}_{2}} : 0.52 \times 10^{3}$
签名运算（T_sign）	$T_{{sign}_{1}} : 1.20 \times 10^{3}$	$T_{{sign}_{2}} : 0.73 \times 10^{3}$
验签运算（T_ver）	$T_{{ver}_{1}} : 1.20 \times 10^{3}$	$T_{{ver}_{2}} : 0.44 \times 10^{3}$
密钥生成函数运算（T_KDF）	$T_{{KDF}_{1}} : 2.42$	$T_{{KDF}_{2}} : 0.23$
散列运算（T_H）	$T_{H_{1}} : 2.39$	$T_{H_{2}} : 1.21$
对称加解密运算（T_S）	$T_{S_{1}} : 2.26$	$T_{S_{2}} : 1.05$

方案	终端设备	卫星	地面控制中心
参考文献[7]	$4 T_{H_{1}}$	$T_{S_{1}}$	$6 T_{H_{2}} + T_{S_{2}}$
参考文献[12]	$2 T_{{pm}_{1}} + 6 T_{H_{1}}$	0	$T_{{pm}_{2}} + 4 T_{H_{2}}$
参考文献[13]	$3 T_{{pm}_{1}} + 6 T_{H_{1}}$	0	$3 T_{{pm}_{2}} + 5 T_{H_{2}}$
参考文献[16]	$2 T_{{pm}_{1}} + 7 T_{H_{1}}$	0	$3 T_{{pm}_{2}} + 4 T_{H_{2}}$
本文普通终端接入方案	$2 T_{{pm}_{1}} + 5 T_{H_{1}} + T_{S_{1}} + 4 T_{{KDF}_{1}}$	$T_{{KDF}_{1}}$	$3 T_{{pm}_{2}} + 5 T_{H_{2}} + T_{S_{2}} + 4 T_{{KDF}_{2}}$
本文Ka终端接入方案	$3 T_{{pm}_{1}} + 4 T_{H_{1}} + T_{S_{1}} + 4 T_{{KDF}_{1}} + T_{{sign}_{1}}$	$T_{{KDF}_{1}}$	$3 T_{{pm}_{2}} + 4 T_{H_{2}} + T_{S_{2}} + 4 T_{{ver}_{2}}$

方案	终端设备	卫星	地面控制中心
参考文献[11]	$T_{{pm}_{1}} + T_{H_{1}} + T_{S_{1}}$	$4 T_{{pm}_{1}} + T_{H_{1}} + T_{S_{1}}$	$T_{{pm}_{2}}$
参考文献[14]	$6 T_{{pm}_{1}} + 4 T_{H_{1}} + T_{{sign}_{1}}$	$6 T_{{pm}_{1}} + 4 T_{H_{1}} + T_{{ver}_{1}}$	0
本文关键终端接入方案	$2 T_{{pm}_{1}} + T_{H_{1}} + T_{S_{1}} + 2 T_{{KDF}_{1}}$	$2 T_{{pm}_{1}} + T_{H_{1}} + T_{S_{1}} + 2 T_{{KDF}_{1}}$	0

方案	终端设备	卫星	地面控制中心
参考文献[7]	$2 T_{H_{1}}$	$T_{H_{1}} + T_{S_{1}}$	$T_{H_{2}}$
参考文献[14]	$2 T_{{pm}_{1}} + T_{{sign}_{1}}$	$T_{{pm}_{1}} + 3 T_{H_{1}} + T_{{ver}_{1}}$	0
参考文献[25]	$3 T_{H_{1}}$	$3 T_{H_{1}} + T_{S_{1}}$	0
本文切换认证方案	$T_{{pm}_{1}} + T_{H_{1}}$	$T_{H_{1}}$	0

References 25

[8]	GUO Y B , WANG C , WANG L M . Universally composable authentication and key exchange protocol for access control in spatial information networks[J]. Acta Electronica Sinica, 2010,38(10): 2358-2364.
[9]	任方, 马建峰, 郝选文 . 空间信息网基于证书的混合式公钥基础设施[J]. 吉林大学学报(工学版), 2012,42(2): 440-445.
	REN F , MA J F , HAO X W . Certificate-based hybrid public key infrastructure for space information networks[J]. Journal of Jilin University (Engineering and Technology Edition), 2012,42(2): 440-445.
[10]	IBRAHIM M H , KUMARI S , DAS A K ,et al. Jamming resistant non-interactive anonymous and unlinkable authentication scheme for mobile satellite networks[J]. Security and Communication Networks, 2016,9(18): 5563-5580.
[11]	MENG W , XUE K P , XU J ,et al. Low-latency authentication against satellite compromising for space information network[C]// Proceedings of 2018 IEEE 15th International Conference on Mobile Ad Hoc and Sensor Systems (MASS). Piscataway:IEEE Press, 2018: 237-244.
[12]	QI M P , CHEN J H , CHEN Y T . A secure authentication with key agreement scheme using ECC for satellite communication systems[J]. International Journal of Satellite Communications and Networking, 2019,37(3): 234-244.
[13]	OSTAD-SHARIF A , ABBASINEZHAD-MOOD D , NIKOOGHADAM M . Efficient utilization of elliptic curve cryptography in design of a threefactor authentication protocol for satellite communications[J]. Computer Communications, 2019,147: 85-97.
[14]	XUE K P , MENG W , LI S H ,et al. A secure and efficient access and handover authentication protocol for Internet of Things in space information networks[J]. IEEE Internet of Things Journal, 2019,6(3): 5485-5499.
[1]	陈鲸 . 天地一体化空间信息安全面临的挑战和思考[J]. 高科技与产业化, 2020,26(12): 24-27.
	CHEN J . Challenges to and reflection on space information security under integration of space and earth[J]. High-Technology＆ Commercialization, 2020,26(12): 24-27.
[15]	MA R H , CAO J , FENG D G ,et al. LAA:lattice-based access authentication scheme for IoT in space information networks[J]. IEEE Internet of Things Journal, 2020,7(4): 2791-2805.
[16]	XU S S , LIU X D , MA M M ,et al. An improved mutual authentication protocol based on perfect forward secrecy for satellite communications[J]. International Journal of Satellite Communications and Networking, 2020,38(1): 62-73.
[2]	徐常志, 靳一, 李立 ,等. 面向6G的星地融合无线传输技术[J]. 电子与信息学报, 2021,43(1): 28-36.
	XU C Z , JIN Y , LI L ,et al. Wireless transmission technology of satellite-terrestrial integration for 6G mobile communication[J]. Journal of Electronics ＆ Information Technology, 2021,43(1): 28-36.
[17]	CHANG C C , CHENG T F , WU H L . An authentication and key agreement protocol for satellite communications[J]. International Journal of Communication Systems, 2014,27(10): 1994-2006.
[18]	ZHANG Y Y , CHEN J H , HUANG B J . Security analysis of an authentication and key agreement protocol for satellite communications[J]. International Journal of Communication Systems, 2014,27(12): 4300-4306.
[3]	曾勇, 王驭, 徐文斌 ,等. 天地一体化信息网络无线链路安全防护技术探讨[J]. 信息安全与通信保密, 2020,18(10): 100-106.
	ZENG Y , WANG Y , XU W B ,et al. Discussion on the wireless link security protection technology of the space-ground integrated information network[J]. Information Security and Communications Privacy, 2020,18(10): 100-106.
[19]	LEE C C , LI C T , CHANG R X . A simple and efficient authentication scheme for mobile satellite communication systems[J]. International Journal of Satellite Communications and Networking, 2012,30(1): 29-38.
[20]	ZHANG Y Y , CHEN J H , HUANG B J . An improved authentication scheme for mobile satellite communication systems[J]. International Journal of Satellite Communications and Networking, 2015,33(2): 135-146.
[4]	HWANG M S , YANG C C , SHIU C Y . An authentication scheme for mobile satellite communication systems[J]. ACM SIGOPS Operating Systems Review, 2003,37(4): 42-47.
[5]	LASC I , DOJEN R , COFFEY T . Countering jamming attacks against an authentication and key agreement protocol for mobile satellite communications[J]. Computers ＆ Electrical Engineering, 2011,37(2): 160-168.
[21]	QI M P , CHEN J H . An enhanced authentication with key agreement scheme for satellite communication systems[J]. International Journal of Satellite Communications and Networking, 2018,36(3): 296-304.
[22]	洪佳楠, 李少华, 薛开平 ,等. 天地一体化网络中基于预认证与群组管理的安全切换方案[J]. 网络与信息安全学报, 2016,2(7): 33-41.
	HONG J N , LI S H , XUE K P ,et al. Pre-authentication and group management based secure handover for space-earth integration network[J]. Chinese Journal of Network and Information Security, 2016,2(7): 33-41.
[23]	YI Z , DU X H , LIAO Y ,et al. A trust holding based secure seamless handover in space information network[M]// Communications in Computer and Information Science. Singapore: Springer Singapore, 2017: 137-150.
[24]	黎海燕, 王利明, 徐震 ,等. LEO卫星网络中星间切换的安全机制研究[J]. 智能计算机与应用, 2018,8(2): 7-13.
	LI H Y , WANG L M , XU Z ,et al. Research on security mechanism of inter-satellite handover in LEO satellite scenario[J]. Intelligent Computer and Applications, 2018,8(2): 7-13.
[6]	张子剑, 周琪, 张川 ,等. 新的低轨星座组网认证与群组密钥协商协议[J]. 通信学报, 2018,39(6): 146-154.
	ZHANG Z J , ZHOU Q , ZHANG C ,et al. New low-earth orbit satellites authentication and group key agreement protocol[J]. Journal on Communications, 2018,39(6): 146-154.
[7]	朱辉, 陈思宇, 李凤华 ,等. 面向低轨卫星网络的用户随遇接入认证协议[J]. 清华大学学报(自然科学版), 2019,59(1): 1-8.
	ZHU H , CHEN S Y , LI F H ,et al. User random access authentication protocol for low earth orbit satellite networks[J]. Journal of Tsinghua University (Science and Technology), 2019,59(1): 1-8.
[8]	郭渊博, 王超, 王良民 . UC安全的空间网络双向认证与密钥协商协议[J]. 电子学报, 2010,38(10): 2358-2364.
[25]	XUE K P , MENG W , ZHOU H C ,et al. A lightweight and secure group key based handover authentication protocol for the softwaredefined space information network[J]. IEEE Transactions on Wireless Communications, 2020,19(6): 3673-3684.

Metrics

Recommended 0

No Suggested Reading articles found!

参数类型	长度/bit
原始/匿名身份信息	128
对称密钥	128
随机数	128
标识符、SNID	16
时间戳、序列号、挑战值	48

方案	终端设备带宽开销/bit	卫星带宽开销/bit	地面控制中心带宽开销/bit	总开销/bit
参考文献[7]	1 072	1 968	640	3 936
参考文献[12]	1 072	560	688	3 520
参考文献[13]	816	1 456	768	3 040
参考文献[16]	1 200	560	688	3 776
本文普通终端接入方案	512	1 040	1 552	3 104
本文Ka终端接入方案	1 152	1 920	1 664	4 736

方案	终端设备带宽开销/bit	卫星带宽开销/bit	总开销/bit	信令开销/bit
参考文献[11]	1 840	1 888	3 728	3
参考文献[14]	1 880	1 648	3 572	3
本文关键终端接入方案	512	784	1 296	3

方案	终端设备带宽开销/bit	卫星带宽开销/bit	总开销/bit	信令开销/bit
参考文献[7]	128	1 024	1 152	3
参考文献[14]	1 504	128	1 632	3
参考文献[25]	841	458	1 299	3
本文切换认证方案	384	640	1 024	3

Research on Access and Handover Authentication Mechanism of SpaceIntegrated-Ground Information Network for Multi-Type Terminals

RichHTML

PDF下载

Knowledge

Abstract

Cite this article

share this article

Figures/Tables 20

References 25

Related Articles 15

Metrics

Recommended 0

[1]	Xinsheng JI, Kaizhi HUANG, Jiangxing WU, Yajun CHEN, Wei YOU. Endogenous Security for the Space-Integrated-Ground Information Network in 6G [J]. Space-Integrated-Ground Information Networks, 2023, 4(2): 2-12.
[2]	Qiuyu BU, Jin CAO, Lifu CHENG, Ruhui MA, Hui LI. Research on Access Authentication and Re-Authentication Mechanism of User Devices in Terrestrial Default Scenario in Satellite Internet [J]. Space-Integrated-Ground Information Networks, 2023, 4(2): 31-46.
[3]	Hui XU, Shaohui SUN. Research on Network Architecture for the Space-Integrated-Ground Information Network in 6G [J]. Space-Integrated-Ground Information Networks, 2021, 2(4): 2-9.
[4]	Yaming Ban, Hao Zheng, Zhe Liu, Siyang Dong. Research on Key Technologies and Design of High-peed Transmission Protocol in Space-Integrated-Ground Information Network [J]. Space-Integrated-Ground Information Networks, 2021, 2(4): 84-92.
[5]	Xiaoping SHI, Ruhui MA, Jin CAO, Hui LI, Lilan CHEN, Fenghua LI. Access and Handover Authentication in Intermittent Connection Scenario of Satellite Network [J]. Space-Integrated-Ground Information Networks, 2021, 2(3): 24-34.
[6]	Mengru LIU, Yulong FU, Jin CAO, Hui LI. A Non-interactive Key Exchange Scheme for Space-IntegratedGround Information Network Based on Blockchain [J]. Space-Integrated-Ground Information Networks, 2021, 2(3): 48-56.
[7]	Yulu QI, Rong JIANG, Xing RONG, Aiping LI. Attack Analysis Framework of Space-Integrated-Ground Information Network Based on Cybersecurity Knowledge Graph [J]. Space-Integrated-Ground Information Networks, 2021, 2(3): 57-65.
[8]	Qingsong XUE, Xiaofeng WANG. User Behavior Traffi c Replay Technology for Space-IntegratedGround Information Network Based on Profi le Analyzing [J]. Space-Integrated-Ground Information Networks, 2021, 2(3): 66-75.
[9]	Yazheng CHEN, Hewu LI. Research on Stateless Address Auto-Confi guration and Duplicate Address Detection in Space-Integrated-Ground Information Network [J]. Space-Integrated-Ground Information Networks, 2021, 2(2): 28-34.
[10]	Shanghong ZHAO, Cong PENG, Yongjun LI, Hai LI. Research on Optical/Electric Hybrid Switching Technique for Space-Integrated-Ground Information Network [J]. Space-Integrated-Ground Information Networks, 2021, 2(2): 46-52.
[11]	Mi LI, Qiang CHEN, Cheng ZENG, Xue WANG, Yisi WANG, Xiangfei CHEN. Effect of Optical Signal Beam Shift on the Performance of Satellite Chaos Laser Safety Communication System under Space-Integrated-Ground Information Network [J]. Space-Integrated-Ground Information Networks, 2021, 2(2): 53-61.
[12]	Kaifeng WANG, Xiangbao KAI, Ming LI, Yuan GAO, Yun LIU, Jinchuan CHAI. Application Prospect of Space-Integrated-Ground Information Network in Railway [J]. Space-Integrated-Ground Information Networks, 2021, 2(1): 93-98.
[13]	Xiaoning ZHANG, Lidong ZHU. Communication and Security Integrated Space-Earth Heterogeneous Network Architecture [J]. Space-Integrated-Ground Information Networks, 2020, 1(2): 11-16.
[14]	Gengxin ZHANG, Xiaojin DING, Zhicheng QU. Research on Space-Based Integrated Internet of Things Architecture and Interference Analysis [J]. Space-Integrated-Ground Information Networks, 2020, 1(2): 22-33.
[15]	Wenlan DIAO, Jianping AN, Yu ZHANG, Han HU. Multiple Addressing Coordination and Switching Technology in Space-Integrated-Ground Information Network [J]. Space-Integrated-Ground Information Networks, 2020, 1(2): 42-47.