基于位置密钥的增强型北斗用户设备接入认证协议

doi:10.11959/j.issn.1000-436x.2022214

Abstract

Abstract:

In order to solve the shortcomings of the existing Beidou user equipment access solutions such as prolonged authentication, and in response to the need of user privacy protection, a user equipment access authentication protocol based on location key was proposed, which realized the mutual authentication and session key negotiation between entities.Combining Beidou’s location information and master key to form a two-factor, the proposed protocol solved the security problem of the master key leaking due to the equipment being captured during the authentication process to some extent.The proposed protocol can meet different security requirements through the verification of the Scyther formal tool.Compared with other similar schemes, it has better performance overhead, and is suitable for Beidou satellite navigation system with limited node resources.

Key words: Beidou satellite navigation system, location key, two-factor, access authentication

CLC Number:

TP302

Jin CAO, Qiuyu BU, Yuanyuan YANG, Hui LI, Qiao LIU, Maode MA. Enhanced Beidou user equipment access authentication protocol based on location key[J]. Journal on Communications, 2022, 43(11): 80-89.

Figures/Tables 13

References 22

[1]	ALSHARIF M , KELECHI A , ALBREEM M ,et al. Sixth generation (6G) wireless networks:vision,research activities,challenges and potential solutions[J]. Symmetry, 2020,12:676.
[2]	李凤华, 殷丽华, 吴巍 ,等. 天地一体化信息网络安全保障技术研究进展及发展趋势[J]. 通信学报, 2016,37(11): 156-168.
	LI F H , YIN L H , WU W ,et al. Research status and development trends of security assurance for space-ground integration information network[J]. Journal on Communications, 2016,37(11): 156-168.
[3]	SHENG M , ZHOU D , LIU R Z ,et al. Resource mobility in space information networks:opportunities,challenges,and approaches[J]. IEEE Network, 2019,33(1): 128-135.
[4]	袁冰清, 蔡芸云, 王英翔 . 浅析北斗导航卫星系统[J]. 中国无线电, 2022(2): 46-47.
	YUAN B Q , CAI Y Y , WANG Y X . Elementary analysis of Beidou navigation satellite system(BDS)[J]. China Radio, 2022(2): 46-47.
[5]	王斯梁, 冯暄, 陈翼 ,等. 北斗导航系统信息安全研究[J]. 信息安全研究, 2020,6(12): 1068-1073.
	WANG S L , FENG X , CHEN Y ,et al. Research of information security in Beidou navigation system[J]. Journal of Information Security Research, 2020,6(12): 1068-1073.
[6]	曾勇, 王驭, 徐文斌 ,等. 天地一体化信息网络无线链路安全防护技术探讨[J]. 信息安全与通信保密, 2020,18(10): 100-106.
	ZENG Y , WANG Y , XU W B ,et al. Discussion on the wireless link security protection technology of the space-ground integrated information network[J]. Information Security and Communications Privacy, 2020,18(10): 100-106.
[7]	XUE K P , MENG W , LI S H ,et al. A secure and efficient access and handover authentication protocol for Internet of things in space information networks[J]. IEEE Internet of Things Journal, 2019,6(3): 5485-5499.
[8]	LIU Y , NI L Q , PENG M G . A secure and efficient authentication protocol for satellite-terrestrial networks[J]. IEEE Internet of Things Journal, 2022,doi:10.1109/JIOT.2022.3152900.
[9]	马军, 黄慧, 夏传福 ,等. 基于标识认证和SM2算法的用户终端接入认证协商协议[J]. 电子设计工程, 2020,28(19): 67-70,75.
	MA J , HUANG H , XIA C F ,et al. Beidou terminal access authentication negotiation protocol based on identity authentication and SM2 algorithm[J]. Electronic Design Engineering, 2020,28(19): 67-70,75.
[10]	李昊鹏, 陈立云, 卢昱 . 基于北斗的军事物联网身份认证方案研究[J]. 计算机应用研究, 2018,35(8): 2431-2434.
	LI H P , CHEN L Y , LU Y . Research on identity authentication scheme based on Beidou in military Internet of Things[J]. Application Research of Computers, 2018,35(8): 2431-2434.
[11]	赵东昊, 卢昱, 王增光 . 北斗战场通信网络身份认证方法[J]. 现代防御技术, 2019,47(3): 99-105.
	ZHAO D H , LU Y , WANG Z G . Identity authentication method of“Beidou” battlefield communication network[J]. Modern Defence Technology, 2019,47(3): 99-105.
[12]	朱辉, 陈思宇, 李凤华 ,等. 面向低轨卫星网络的用户随遇接入认证协议[J]. 清华大学学报(自然科学版), 2019,59(1): 1-8.
	ZHU H , CHEN S Y , LI F H ,et al. User random access authentication protocol for low earth orbit satellite networks[J]. Journal of Tsinghua University (Science and Technology), 2019,59(1): 1-8.
[13]	CHEN Y L , CHEN J H . An enhanced dynamic authentication scheme for mobile satellite communication systems[J]. International Journal of Satellite Communications and Networking, 2021,39(3): 250-262.
[14]	KUMAR U , GARG M . A note on an enhanced dynamic authentication scheme for mobile satellite communication systems[J]. International Journal of Satellite Communications and Networking, 2022,40(5): 317-329.
[15]	LIN H Y . Efficient dynamic authentication for mobile satellite communication systems without verification table[J]. International Journal of Satellite Communications and Networking, 2016,34(1): 3-10.
[16]	LIU Y C , ZHANG A X , LI S H ,et al. A lightweight authentication scheme based on self-updating strategy for space information network[J]. International Journal of Satellite Communications and Networking, 2017,35(3): 231-248.
[17]	吴克河, 李岩, 崔文超 ,等. 基于商密算法的北斗短报文安全通信协议研究[J]. 计算机与数字工程, 2018,46(11): 2291-2295,2374.
	WU K H , LI Y , CUI W C ,et al. Research of Beidou short message security communication protocol based on commercial password[J]. Computer ＆ Digital Engineering, 2018,46(11): 2291-2295,2374.
[18]	ZHAO D H , LU Y , LIU X G ,et al. Design of emergency UAV network identity authentication protocol based on Beidou[J]. MATEC Web of Conferences, 2021,336:04004.
[19]	韩旭, 陆思奇, 程庆丰 . 形式化工具Scyther优化与实例分析[J]. 信息安全研究, 2016,2(3): 272-279.
	HAN X , LU S Q , CHENG Q F . The improvement and instance analysis of the formal verification tool scyther[J]. Journal of Information Security Research, 2016,2(3): 272-279.
[20]	石小平, 马如慧, 曹进 ,等. 面向卫星网络断续连通场景的接入和切换认证机制[J]. 天地一体化信息网络, 2021,2(3): 24-34.
	SHI X P , MA R H , CAO J ,et al. Access and handover authentication in intermittent connection scenario of satellite network[J]. Space-IntegratedGround Information Networks, 2021,2(3): 24-34.
[21]	BERINGER L , PETCHER A , KATHERINE Q Y ,et al. Verified correctness and security of OpenSSL HMAC[C]// Proceedings of 24th USENIX Security Symposium. Berkeley:USENIX Association, 2015: 207-221.
[22]	MA R H , CAO J , FENG D G ,et al. LAA:lattice-based access authentication scheme for IoT in space information networks[J]. IEEE Internet of Things Journal, 2020,7(4): 2791-2805.

Metrics

Recommended 0

No Suggested Reading articles found!

符号	含义
K	北斗指控中心的基础密钥
key	用户设备的主密钥
ID_u	用户设备的真实身份标识
PID_u	用户设备的临时身份标识
T	时间戳
L_u	用户设备的位置信息
N_u	用户设备的随机数
N_s	北斗指控中心的随机数
CK	加密密钥
AK	位置密钥
MAC	用户设备侧的消息验证码
HMAC	北斗指控中心侧的消息验证码
RES	用户设备侧的认证响应值
XRES	北斗指控中心侧的认证响应值
AV	认证向量
S_k	会话密钥

协议	双向认证	条件隐私	不可链接性	前后向安全性	双因子认证
文献[8]	√	√	√	√	×
文献[11]	√	×	√	×	×
文献[12]	√	√	√	×	×
文献[14]	√	√	√	×	√
文献[17]	√	×	√	×	×
本文协议	√	√	√	√	√

运算类型	用户设备或卫星/μs	地面控制中心/μs	运算类型	用户设备或卫星/μs	地面控制中心/μs
T_H	2.39	1.21	T_sig	1.20 × 10³	0.73 × 10³
T_s	2.26	1.05	T_ver	0.81 × 10³	0.44 × 10³
T_enc	8.97	5.32	T_KDF	2.42	1.23
T_dec	0.08	0.03	T_mul	1.00 × 10³	0.52 × 10³

协议	用户设备	卫星	地面控制中心	总计算开销/μs
文献[8]	3T_mul+4 T_H+T_sig+2 T_ver +T_s	—	3T_mul+4 T_H+T_sig+2 T_ver+T_s	9 007.71
文献[11]	T _H+T_enc+T_sig+T_dec+T_ver	—	T _H+T_enc+T_sig+T_dec+T_ver	3 198
文献[12]	4 T_H	T_s	6 T_H+T_s	20.13
文献[14]	3T_mul+9 T_H+T_s	—	3T_mul+6 T_H+T_s	4 592.08
文献[17]	T _s+2 T_H+T_sig+T_ver	—	T _s+2 T_H+T_sig+T_ver	3 190.51
本文协议	2T_KDF+5 T_H+T_s	—	2T_KDF+5 T_H+T_s	28.61

协议	用户设备/bit	卫星/bit	地面控制中心/bit	总带宽开销/bit
文献[8]	7 072	—	7 232	14 304
文献[11]	3 840	—	3 712	7 552
文献[12]	672	32	640	1 344
文献[14]	608	64	448	1 120
文献[17]	768	—	768	1 536
本文协议	416	64	544	1 024

Enhanced Beidou user equipment access authentication protocol based on location key

RichHTML

PDF

Knowledge

Abstract

Cite this article

share this article

Figures/Tables 13

References 22

Related Articles 7

Metrics

Recommended 0

[1]	Jun WANG,Shu-bo LIU,Cai LIANG,Yong-kai LI. Two-factor wearable device authentication protocol based on PUF and IPI [J]. Journal on Communications, 2017, 38(6): 127-135.
[2]	Bin LIU,Yu-zhi HE,Yong ZHANG. Bulid campus network authentication system based on centralized 802.1x [J]. Journal on Communications, 2014, 35(Z1): 87-90.
[3]	. Bulid campus network authentication system based on centralized 802.1x [J]. Journal on Communications, 2014, 35(Z1): 17-90.
[4]	. Topology structure and routing policy based on multilayered clusters in Beidou satellite navigation system [J]. Journal on Communications, 2014, 35(10): 5-41.
[5]	Fei-long LI,Guang-xia LI,Zhi-qiang LI,Feng-bin PENG. Topology structure and routing policy based on multilayered clusters in Beidou satellite navigation system [J]. Journal on Communications, 2014, 35(10): 31-41.
[6]	. Fast access authentication scheme for mobile IPv6 hierarchical network [J]. Journal on Communications, 2013, 34(Z1): 35-267.
[7]	Shan-shan SONG,Tao SHANG,Jian-wei LIU. Fast access authentication scheme for mobile IPv6 hierarchical network [J]. Journal on Communications, 2013, 34(Z1): 263-267.