天地一体化网络中基于令牌的安全高效漫游认证方案

doi:10.11959/j.issn.1000-436x.2018076

Abstract

Abstract:

Aiming at the problem of prolongation and instability of satellite and terrestrial physical communication links in the space-earth integration network,a two-way token based roaming authentication scheme was proposed.The scheme used the characteristics of the computing capability of the satellite nodes in the network to advance the user authentication process from the network control center (NCC) to the access satellite.The satellite directly verified the token issued by the NCC to verify the user's identity.At the same time,the token mechanism based on the one-way accumulator achieved the user's dynamic join,lightweight user self-service customization and billing,and the introduction of Bloom Filter enabled effective user revocation and malicious access management.Compared with the existing scheme,the scheme can guarantee the security of roaming authentication and significantly reduce the calculation and communication overhead of the authentication and key negotiation process.

Key words: space-earth integration, roaming authentication, token, one-way accumulator

CLC Number:

TP302

Kaiping XUE,Yongjin MA,Jia’nan HONG,Jie XU,Qingyou YANG. Secure and efficient token based roaming authentication scheme for space-earth integration network[J]. Journal on Communications, 2018, 39(5): 48-58.

Figures/Tables 5

References 18

[1]	李凤华, 殷丽华, 吴巍 ,等. 天地一体化信息网络安全保障技术研究进展及发展趋势[J]. 通信学报, 2016,37(11): 156-168.
	LI F H , YIN L H , WU W ,et al. Research status and development trends of security assurance for space-ground integration information network[J]. Journal on Communications, 2016,37(11): 156-168.
[2]	CHEN C L , CHENG K W , CHEN Y L ,et al. An improvement on the self-verification authentication mechanism for a mobile satellite communication system[J]. Applied Mathematics ＆ Information Sciences, 2014,8(1L): 97-106.
[3]	ZHAO W , ZHANG A , LI J ,et al. Analysis and design of an authentication protocol for space information network[C]// IEEE Military Communications Conference on MILCOM. IEEE, 2016: 43-48.
[4]	LIU Y , ZHANG A , LI J ,et al. An anonymous distributed key management system based on CL-PKC for space information network[C]// IEEE International Conference on Communications (ICC). 2016: 1-7.
[5]	HE D , BU J , CHAN S ,et al. Privacy-preserving universal authentication protocol for wireless communications[J]. IEEE Transactions on Wireless Communications, 2011,10(2): 431-436.
[6]	LIU J K , CHU C K , CHOW S S M ,et al. Time-bound anonymous authentication for roaming networks[J]. IEEE Transactions on Information Forensics and Security, 2015,10(1): 178-189.
[7]	CRUICKSHANK H S , . A security system for satellite networks[C]// Fifth International Conference on Satellite Systems for Mobile Communications and Navigation,IET. 1996: 187-190.
[8]	HWANG M S , YANG C C , SHIU C Y . An authentication scheme for mobile satellite communication systems[J]. ACM SIGOPS Operating Systems Review, 2003,37(4): 42-47.
[9]	CHANG Y F , CHANG C C . An efficient authentication protocol for mobile satellite communication systems[J]. ACM SIGOPS Operating Systems Review, 2005,39(1): 70-84.
[10]	CHEN T H , LEE W B , CHEN H B . A self-verification authentication mechanism for mobile satellite communication systems[J]. Computers＆ Electrical Engineering, 2009,35(1): 41-48.
[11]	JIANG Y , LIN C , SHEN X ,et al. Mutual authentication and key exchange protocols for roaming services in wireless mobile networks[J]. IEEE Transactions on Wireless Communications, 2006,5(9): 2569-2577.
[12]	YANG G , WONG D S , DENG X . Anonymous and authenticated key exchange for roaming networks[J]. IEEE Transactions on Wireless Communications, 2007,6(9): 3461-3472.
[13]	YANG G , WONG D S , DENG X . Formal security definition and efficient construction for roaming with a privacy-preserving extension[J]. Journal of Universal Computer Science, 2008,14(3): 441-462.
[14]	BENALOH J C , MARE M D . One-way accumulators:a decentralized alternative to digital signatures[C]// Workshop on the Theory and Application of of Cryptographic Techniques. 1993: 274-285.
[15]	BLOOM B H . Space/time trade-offs in hash coding with allowable errors[J]. Communications of the ACM, 1970,13(7): 422-426.
[16]	MUKHERJEE J , RAMAMURTHY B . Communication technologies and architectures for space network and interplanetary internet[J]. IEEE Communications Surveys ＆ Tutorials, 2013,15(2): 881-897.
[17]	AKYILDIZ I F , UZUNALIO?LU H , BENDER M D . Handover management in low earth orbit (LEO) satellite networks[J]. Mobile Networks and Applications, 1999,4(4): 301-310.
[18]	HE D , BU J , CHAN S ,et al. Handauth:efficient handover authentication with conditional privacy for wireless networks[J]. IEEE Transactions on Computers, 2013,62(3): 616-622.

Metrics

Recommended 0

No Suggested Reading articles found!

符号	定义
U (roaming user)	漫游用户
LEO (low earth orbit satellite)	低轨卫星
FLEO (foreign LEO)	漫游域低轨卫星
NCC (network control center)	网络控制中心
HNCC (home NCC)	归属域网络控制中心
FNCC (foreign NCC)	漫游域网络控制中心
GS (ground station)	地面站
FGS (foreign GS)	漫游域地面站

方案	匿名性	动态撤销	计费	计算时延	通信时延	认证时延/ms
文献[2]方案	支持	支持	不支持	3T_exp	2T_U-FLEO+2T_FLEO-FGS+2T_FGS-FNCC+2T_FNCC-HNCC	61.161
文献[3]方案	支持	支持	不支持	/	2T_U-FLEO+2T_FLEO-FGS+2T_FGS-FNCC+2T_FNCC-HNCC	60
文献[5]方案	支持	支持	不支持	3T_pair+16T_mul	2T_U-FLEO+2T_FLEO-FGS+2T_FGS-FNCC	91.725
文献[11]方案	支持	支持	不支持	/	3T_U-FLEO+3T_FLEO-FGS+2T_FGS-FNCC+2T_FNCC-HNCC	80.0
本文方案	支持	支持	支持	6T_exp+2T_mul	2T_U-FLEO	23.074

Secure and efficient token based roaming authentication scheme for space-earth integration network

RichHTML

PDF

Knowledge

Abstract

Cite this article

share this article

Figures/Tables 5

References 18

Related Articles 12

Metrics

Recommended 0

[1]	Chen ZHANG,Gengxin ZHANG,Xianyu WANG. Design of next generation high throughput satellite communication system based on beam-hopping [J]. Journal on Communications, 2020, 41(7): 59-72.
[2]	Zhi-bo DU,Zhen WU,Min WANG,Jin-tao RAO. Power analysis attack of dynamic password token based on SM3 [J]. Journal on Communications, 2017, 38(3): 65-72.
[3]	Dan LIU,Run-hua SHI,Shun ZHANG,Hong ZHONG. Efficient anonymous roaming authentication scheme using certificateless aggregate signature in wireless network [J]. Journal on Communications, 2016, 37(7): 182-192.
[4]	Zhi-quan LV,Cheng HONG,Min1 ZHANG,Deng-guo FENG,Kai-qu CHEN. Privacy-perserving scheme for social networks [J]. Journal on Communications, 2014, 35(8): 15-22.
[5]	. Privacy-perserving scheme for social networks [J]. Journal on Communications, 2014, 35(8): 4-32.
[6]	Chun-guang MA,Jiu-ru WANG,Xiao-rui ZHONG,Hua ZHANG. One-way accumulator-based key management protocol for wireless sensor networks [J]. Journal on Communications, 2011, 32(11A): 184-189.
[7]	Xuan-xia YAO,Xue-feng ZHENG,Xian-wei ZHOU. Broadcast authentication algorithm for wireless sensor networks [J]. Journal on Communications, 2010, 31(11): 49-55.
[8]	Han-hua LU,Li-juan MIN,Ya-shi WANG. Approach to master-slave workflow system and its Petri-net modeling [J]. Journal on Communications, 2010, 31(1): 92-99.
[9]	Tao FENG,Jian-feng MA. New approach against Sybil attack in wireless sensor networks [J]. Journal on Communications, 2008, 29(6): 13-19.
[10]	Chun-guang MA,Man-chun CAI,Peng WU. Transitively closed undirected graph authentication based on one-way accumulators [J]. Journal on Communications, 2008, 29(3): 63-69.
[11]	Jian ZHANG,Ji-gui SUN,Ni-ya LI,Cheng-quan HU,Bin YANG. Conditioned secure access control model based on multi-weighted roles and rules in workflow system [J]. Journal on Communications, 2008, 29(2): 8-16.
[12]	Tao FENG,Jian-feng MA. One-way accumulators based group key agreement scheme for mobile ad hoc network [J]. Journal on Communications, 2007, 28(11A): 103-106.