适用于双层卫星网络的星间组网认证方案

doi:10.11959/j.issn.1000-436x.2019058

Abstract

Abstract:

To solve the issue of networking authentication among GEO and LEO satellites in double-layer satellite network,a secure and efficient authenticated key agreement scheme was proposed.Based on symmetric encryption,the proposed scheme can achieve trust establishment and secure communication between satellites without the trusted third party.Meanwhile,considering characteristics of highly unified clock and predictable satellite trajectory in satellite networks,a pre-calculation method was designed,which can effectively improve the authentication efficiency of satellite networking.Moreover,formal proof and security analysis demonstrate that the scheme can satisfy various security requirements during satellite networking.Performance analysis and simulation results show that the scheme has low computation and communication overhead,which can achieve the authentication of satellite networking in resource-limited scenarios.

Key words: double-layer satellite network, satellite networking authentication, symmetric encryption, secure protocol

CLC Number:

TP302

Hui ZHU,Heng WU,Haiqiang ZHAO,Yuqing ZHAO,Hui LI. Efficient authentication scheme for double-layer satellite network[J]. Journal on Communications, 2019, 40(3): 1-9.

Figures/Tables 9

符号	含义
P,Q	通信主体
X ,Y	消息语句
$Q \overset{K}{\leftrightarrow} P$	P和Q之间的共享密钥K
(X,Y)	消息的连接
$P \| \equiv X$	P相信消息X
$P ⊲ X$	P收到了消息X
$P \| ～ X$	P发送了消息X
$P \| \Rightarrow X$	P对消息X具有控制权
#(X)	消息X是新鲜的
{X}_K	用密钥K加密X得到的密文

References 21

[1]	李凤华, 殷丽华, 吴巍 ,等. 天地一体化信息网络安全保障技术研究进展及发展趋势[J]. 通信学报, 2016,37(11): 156-168.
	LI F H , YIN L H , WU W ,et al. Research status and development trends of security assurance for space-ground integration information network[J]. Journal on Communications, 2016,37(11): 156-168.
[2]	廖勇, 樊卓宸, 赵明 . 空间信息网络安全协议综述[J]. 计算机科学, 2017,44(4): 202-206.
	LIAO Y , FAN Z C , ZHAO M . Survey on security protocol of space information networks[J]. Computer Science, 2017,44(4): 202-206.
[3]	易克初, 李怡, 孙晨华 ,等. 卫星通信的近期发展与前景展望[J]. 通信学报, 2015,36(6): 157-172.
	YI K C , LI Y , SUN C H ,et al. Recent development and its prospect of satellite communications[J]. Journal on Communications, 2015,36(6): 157-172.
[4]	LIU J , LIU W , QIANHONG W U ,et al. Survey on key security technologies for space information networks[J]. Journal of Communications ＆ Information Networks, 2016,1(1): 72-85.
[5]	CHOWDHURY R A , BARAS J S , HADJITHEODOSIOU M . An authentication framework for a hybrid satellite network with resource constrained nodes[C]// International Conference on Space Information Technology. 2006.
[6]	任方, 马建峰, 郝选文 . 空间信息网基于证书的混合式公钥基础设施[J]. 吉林大学学报(工学版), 2012,42(2): 440-445.
	REN F , MA J F , HAO X W . Certificate-based hybrid public key infra-structure for space information net-works[J]. Journal of Jilin Univer-sity (Engineering Edition), 2012,42(2): 440-445.
[7]	ZHONG Y T , MA J F . A highly secure identity-based authenticated key-exchange protocol for satellite communication[J]. Journal of Communications and Networks, 2010,12(6): 592-599.
[8]	ZHANG Y , CHEN J , HUANG B . Security analysis of an authentication and key agreement protocol for satellite communications[J]. International Journal of Communication Systems, 2015,27(12): 4300-4306.
[9]	QI M , CHEN J . An enhanced authentication with key agreement scheme for satellite communication systems[J]. International Journal of Satellite Communications ＆ Networking, 2018,36(3): 296-304.
[10]	VOSSAERT J , LAPON J , DE D B ,et al. Symmetric key infrastructure for authenticated key establishment between resource constrained nodes and powerful devices[J]. Security ＆ Communication Networks, 2016,9(2): 106-117.
[11]	LEE C C , LI C T , CHANG R X . A simple and efficient authentication scheme for mobile satellite communication systems[J]. International Journal of Satellite Communications ＆ Networking, 2012,30(1): 29-38.
[12]	ZHANG Y , CHEN J , HUANG B . An improved authentication scheme for mobile satellite communication systems[J]. International Journal of Satellite Communications ＆ Networking, 2015,33(2): 135-146.
[13]	TSAI J L , LO N W , WU T C . Secure anonymous authentication scheme without verification table for mobile satellite communication systems[J]. International Journal of Satellite Communications ＆ Networking, 2015,32(5): 443-452.
[14]	YOON E J , YOO K Y , HONG J W ,et al. An efficient and secure anonymous authentication scheme for mobile satellite communication systems[J]. EURASIP Journal on Wireless Communications ＆ Networking, 2011,2011(1):86.
[15]	DOLEV D , YAO A . On the security of public key protocols[J]. IEEE Transactions on Information Theory, 1983,29(2): 198-208.
[16]	王聪 . 安全协议原理与验证[M]. 北京: 北京邮电大学出版社, 2011.
	WANG C . Principle and verification of security protocol[M]. Beijing: Beijing University of Posts and Telecommunications PressPress, 2011.
[17]	SAXENA N , CHAUDHARI N S . Secure-AKA:an efficient AKA protocol for UMTS networks[J]. Wireless Personal Communications, 2014,78(2): 1345-1373.
[18]	SAXENA N , THOMAS J , CHAUDHARI N S . ES-AKA:an efficient and secure authentication and key agreement protocol for UMTS networks[J]. Wireless Personal Communications, 2015,84(3): 1-32.
[19]	HUANG Y L , SHEN C Y , SHIEH S W . S-AKA:a provable and secure authentication key agreement protocol for UMTS networks[J]. IEEE Transactions on Vehicular Technology, 2011,60(9): 4509-4519.
[20]	OU H H , HWANG M S , JAN J K . A cocktail protocol with the authentication and key agreement on the UMTS[M]. Amsterdam:Elsevier Science Inc. 2010.
[21]	张子剑, 周琪, 张川 ,等. 新的低轨星座组网认证与群组密钥协商协议[J]. 通信学报, 2018,39(6): 146-154.
	ZHANG Z J , ZHOU Q , ZHANG C ,et al. New lowearth orbit satellites authentication and group key agreement protocol[J]. Journal on Com-munications, 2018,39(6): 146-154.

Metrics

Recommended 0

No Suggested Reading articles found!

符号	含义
IDKey	身份信息匿名保护密钥
MainKey	星间认证的主密钥
AuthKey	星间认证的认证密钥
f_TID	临时身份生成函数
f_AK	认证密钥生成函数
f_TK	时间戳保护序列生成函数
f_MAC	消息验证码生成函数
T₀	当前时间
T_TID	用于生成临时身份的时间戳
T_Auth	用于生成认证密钥的时间戳
T_AV	用于生成认证向量的时间戳
RID	卫星的真实身份
TID	卫星的临时身份
RAND	一次性随机数
TK	时间戳保护序列
MAC	消息验证码
AV	认证向量
RES	认证响应值
CK	会话密钥

方案	双向认证	重放攻击	DOS攻击	前向/后向安全性	匿名保护	同步开销
本文方案	9	9	9	9	9	×
文献[17]方案	9	9	9	9	9	9
文献[18]方案	9	9	9	9	×	×
文献[19]方案	9	9	9	9	×	9
文献[20]方案	9	9	9	9	×	9

方案	阶段1/次	阶段2/次
本文方案	3	2
文献[17]方案	5	3
文献[18]方案	5	—
文献[19]方案	3	—
文献[20]方案	4	—

方案	阶段1	阶段2
本文方案	2BL+2H+2M+2C	1M+2C
文献[17]方案	2BL+2H+2M+2C	1H+1M+3C
文献[18]方案	2H+2M+2C	—
文献[19]方案	2BL+2M+2C	—
文献[20]方案	2H+2M+3C	—

Efficient authentication scheme for double-layer satellite network

RichHTML

PDF

Knowledge

Abstract

Cite this article

share this article

Figures/Tables 9

References 21

Related Articles 4

Metrics

Recommended 0

[1]	Ruizhong DU, Yuqing ZHANG, Mingyue LI. Efficient dynamic searchable encryption scheme for conjunctive queries based on bidirectional index [J]. Journal on Communications, 2022, 43(5): 123-132.
[2]	Jinbo XIONG,Yuanyuan ZHANG,Youliang TIAN,Zuobin YING,Qi LI,Rong MA. Cloud data secure deduplication scheme via role-based symmetric encryption [J]. Journal on Communications, 2018, 39(5): 59-73.
[3]	Yu-xin MAO. Intrusion detection algorithm for wireless sensor network based on counter in symmetric encryption [J]. Journal on Communications, 2011, 32(9A): 211-219.
[4]	Zhao-feng MA,Ke-feng FAN,Ming CHEN,Yi-xian YANG,Xin-xin NIU. Trusted digital rights management protocol supporting for time and space constraint [J]. Journal on Communications, 2008, 29(10): 153-164.