面向多类型终端的天地一体化信息网络接入与切换认证机制研究

曹进; 陈李兰; 马如慧; 李晖; 李凤华

doi:10.11959/j.issn.2096-8930.2021026

您当前的位置：

首页 >

文章列表页 >

面向多类型终端的天地一体化信息网络接入与切换认证机制研究

专题：天地一体化信息网络安全防护技术 | 更新时间：2024-06-03

- 面向多类型终端的天地一体化信息网络接入与切换认证机制研究
- Research on Access and Handover Authentication Mechanism of SpaceIntegrated-Ground Information Network for Multi-Type Terminals
- 天地一体化信息网络 2021年2卷第3期页码：2-14
- 作者机构：
  
  1. 西安电子科技大学网络与信息安全学院，陕西西安 710071
  2. 中国科学院信息工程研究所，北京 100093；3.中国科学院大学网络空间安全学院，北京 100049
- 作者简介：
  
  [ "曹进（1985-），男，博士，西安电子科技大学教授，主要研究方向为4G/5G网络、天地一体化信息网络安全及认证协议设计分析等" ]
  [ "陈李兰（1997-），女，西安电子科技大学硕士生，主要研究方向为天地一体化信息网络终端接入安全等" ]
  [ "马如慧（1991-），女，博士，西安电子科技大学讲师，主要研究方向为4G/5G网络、天地一体化信息网络安全认证机制研究等" ]
  [ "李晖（1968-），男，博士，西安电子科技大学网络与信息安全学院教授、博士生导师，主要研究方向为密码学、无线网络安全、信息理论和网络编码等" ]
  [ "李凤华（1966-），男，博士，中国科学院信息工程研究所教授、博士生导师，主要研究方向为网络与系统安全、隐私计算、密码应用等" ]
- 基金信息：
  
  国家自然科学基金面上项目;The National Natural Science Foundation of China(61772404);陕西省重点产业创新链（群）-工业领域项目;Shaanxi Province Key Industrial Innovation Chain (Group)-Industrial Field Project(2020ZDLGY08-08);国家自然科学基金资助项目;the National Natural Science Foundation of China(U1836203)
- DOI：10.11959/j.issn.2096-8930.2021026
  中图分类号： TP393
- 网络出版日期：2021-09，
  
  纸质出版日期：2021-09-20
- 稿件说明：
移动端阅览
曹进, 陈李兰, 马如慧, 等. 面向多类型终端的天地一体化信息网络接入与切换认证机制研究[J]. 天地一体化信息网络, 2021,2(3):2-14.

Jin CAO, Lilan CHEN, Ruhui MA, et al. Research on Access and Handover Authentication Mechanism of SpaceIntegrated-Ground Information Network for Multi-Type Terminals[J]. Space-integrated-ground information networks, 2021, 2(3): 2-14.
曹进, 陈李兰, 马如慧, 等. 面向多类型终端的天地一体化信息网络接入与切换认证机制研究[J]. 天地一体化信息网络, 2021,2(3):2-14. DOI： 10.11959/j.issn.2096-8930.2021026.

Jin CAO, Lilan CHEN, Ruhui MA, et al. Research on Access and Handover Authentication Mechanism of SpaceIntegrated-Ground Information Network for Multi-Type Terminals[J]. Space-integrated-ground information networks, 2021, 2(3): 2-14. DOI： 10.11959/j.issn.2096-8930.2021026.

摘要

随着天地一体化信息网络新频段的关键技术研究成熟，网络能容纳各种频段类型的用户。为实现资源有效利用，针对差异化终端需要设计有针对性、定制化的安全防护机制。在统一网络架构下，针对普通终端、关键终端和Ka终端3种类型终端，分别提出3种接入认证机制。同时，为确保不同类型终端接入网络后仍可获得连续的网络服务，提出一种基于预切换的切换认证机制，为3类终端提供统一安全的切换服务。形式化验证工具Scyther以及非形式化安全分析结果表明，所提方案满足相关场景下的多种安全需求，同时与同类型方案进行对比，发现所提方案能实现安全和性能的有效平衡，满足多维化天地一体化信息网络场景的终端接入与切换认证需求。

Abstract

With the maturity of the key technologies of the new spectrum of the network

the network can accommodate users of various frequency bands.In order to make eff ective use of resources

diff erentiated terminals need targeted and customized security protection mechanisms.In the unifi ed network architecture

three access authentication mechanisms were proposed for common terminals

high-speed terminals and Ka terminals.At the same time

in order to ensured that diff erent types of terminals could still obtain continuous network services after accessing the network

a switching authentication mechanism based on pre-switching was proposed to provided unifi ed security switching services for the three types of terminals.Formal verifi cation tool named Scyther and informal security analysis results showed that the proposed scheme meet a variety of security requirements of the proposed scenario.At the same time

compared with the same type schemes

the proposed scheme can achieve the eff ective balance between security and performance

which can meet multidimensional integration of heaven and earth network of the scene terminal access switch and certifi cation requirements.

关键词

Keywords

references

陈鲸 . 天地一体化空间信息安全面临的挑战和思考 [J ] . 高科技与产业化 , 2020 , 26 ( 12 ): 24 - 27 .

CHEN J . Challenges to and reflection on space information security under integration of space and earth [J ] . High-Technology＆ Commercialization , 2020 , 26 ( 12 ): 24 - 27 .

徐常志 , 靳一 , 李立 , 等 . 面向6G的星地融合无线传输技术 [J ] . 电子与信息学报 , 2021 , 43 ( 1 ): 28 - 36 .

XU C Z , JIN Y , LI L , et al . Wireless transmission technology of satellite-terrestrial integration for 6G mobile communication [J ] . Journal of Electronics ＆ Information Technology , 2021 , 43 ( 1 ): 28 - 36 .

曾勇 , 王驭 , 徐文斌 , 等 . 天地一体化信息网络无线链路安全防护技术探讨 [J ] . 信息安全与通信保密 , 2020 , 18 ( 10 ): 100 - 106 .

ZENG Y , WANG Y , XU W B , et al . Discussion on the wireless link security protection technology of the space-ground integrated information network [J ] . Information Security and Communications Privacy , 2020 , 18 ( 10 ): 100 - 106 .

HWANG M S , YANG C C , SHIU C Y . An authentication scheme for mobile satellite communication systems [J ] . ACM SIGOPS Operating Systems Review , 2003 , 37 ( 4 ): 42 - 47 .

LASC I , DOJEN R , COFFEY T . Countering jamming attacks against an authentication and key agreement protocol for mobile satellite communications [J ] . Computers ＆ Electrical Engineering , 2011 , 37 ( 2 ): 160 - 168 .

张子剑 , 周琪 , 张川 , 等 . 新的低轨星座组网认证与群组密钥协商协议 [J ] . 通信学报 , 2018 , 39 ( 6 ): 146 - 154 .

ZHANG Z J , ZHOU Q , ZHANG C , et al . New low-earth orbit satellites authentication and group key agreement protocol [J ] . Journal on Communications , 2018 , 39 ( 6 ): 146 - 154 .

朱辉 , 陈思宇 , 李凤华 , 等 . 面向低轨卫星网络的用户随遇接入认证协议 [J ] . 清华大学学报(自然科学版) , 2019 , 59 ( 1 ): 1 - 8 .

ZHU H , CHEN S Y , LI F H , et al . User random access authentication protocol for low earth orbit satellite networks [J ] . Journal of Tsinghua University (Science and Technology) , 2019 , 59 ( 1 ): 1 - 8 .

郭渊博 , 王超 , 王良民 . UC安全的空间网络双向认证与密钥协商协议 [J ] . 电子学报 , 2010 , 38 ( 10 ): 2358 - 2364 .

GUO Y B , WANG C , WANG L M . Universally composable authentication and key exchange protocol for access control in spatial information networks [J ] . Acta Electronica Sinica , 2010 , 38 ( 10 ): 2358 - 2364 .

任方 , 马建峰 , 郝选文 . 空间信息网基于证书的混合式公钥基础设施 [J ] . 吉林大学学报(工学版) , 2012 , 42 ( 2 ): 440 - 445 .

REN F , MA J F , HAO X W . Certificate-based hybrid public key infrastructure for space information networks [J ] . Journal of Jilin University (Engineering and Technology Edition) , 2012 , 42 ( 2 ): 440 - 445 .

IBRAHIM M H , KUMARI S , DAS A K , et al . Jamming resistant non-interactive anonymous and unlinkable authentication scheme for mobile satellite networks [J ] . Security and Communication Networks , 2016 , 9 ( 18 ): 5563 - 5580 .

MENG W , XUE K P , XU J , et al . Low-latency authentication against satellite compromising for space information network [C ] // Proceedings of 2018 IEEE 15th International Conference on Mobile Ad Hoc and Sensor Systems (MASS) . Piscataway:IEEE Press , 2018 : 237 - 244 .

QI M P , CHEN J H , CHEN Y T . A secure authentication with key agreement scheme using ECC for satellite communication systems [J ] . International Journal of Satellite Communications and Networking , 2019 , 37 ( 3 ): 234 - 244 .

OSTAD-SHARIF A , ABBASINEZHAD-MOOD D , NIKOOGHADAM M . Efficient utilization of elliptic curve cryptography in design of a threefactor authentication protocol for satellite communications [J ] . Computer Communications , 2019 , 147 : 85 - 97 .

XUE K P , MENG W , LI S H , et al . A secure and efficient access and handover authentication protocol for Internet of Things in space information networks [J ] . IEEE Internet of Things Journal , 2019 , 6 ( 3 ): 5485 - 5499 .

MA R H , CAO J , FENG D G , et al . LAA:lattice-based access authentication scheme for IoT in space information networks [J ] . IEEE Internet of Things Journal , 2020 , 7 ( 4 ): 2791 - 2805 .

XU S S , LIU X D , MA M M , et al . An improved mutual authentication protocol based on perfect forward secrecy for satellite communications [J ] . International Journal of Satellite Communications and Networking , 2020 , 38 ( 1 ): 62 - 73 .

CHANG C C , CHENG T F , WU H L . An authentication and key agreement protocol for satellite communications [J ] . International Journal of Communication Systems , 2014 , 27 ( 10 ): 1994 - 2006 .

ZHANG Y Y , CHEN J H , HUANG B J . Security analysis of an authentication and key agreement protocol for satellite communications [J ] . International Journal of Communication Systems , 2014 , 27 ( 12 ): 4300 - 4306 .

LEE C C , LI C T , CHANG R X . A simple and efficient authentication scheme for mobile satellite communication systems [J ] . International Journal of Satellite Communications and Networking , 2012 , 30 ( 1 ): 29 - 38 .

ZHANG Y Y , CHEN J H , HUANG B J . An improved authentication scheme for mobile satellite communication systems [J ] . International Journal of Satellite Communications and Networking , 2015 , 33 ( 2 ): 135 - 146 .

QI M P , CHEN J H . An enhanced authentication with key agreement scheme for satellite communication systems [J ] . International Journal of Satellite Communications and Networking , 2018 , 36 ( 3 ): 296 - 304 .

洪佳楠 , 李少华 , 薛开平 , 等 . 天地一体化网络中基于预认证与群组管理的安全切换方案 [J ] . 网络与信息安全学报 , 2016 , 2 ( 7 ): 33 - 41 .

HONG J N , LI S H , XUE K P , et al . Pre-authentication and group management based secure handover for space-earth integration network [J ] . Chinese Journal of Network and Information Security , 2016 , 2 ( 7 ): 33 - 41 .

YI Z , DU X H , LIAO Y , et al . A trust holding based secure seamless handover in space information network [M ] // Communications in Computer and Information Science . Singapore : Springer Singapore , 2017 : 137 - 150 .

黎海燕 , 王利明 , 徐震 , 等 . LEO卫星网络中星间切换的安全机制研究 [J ] . 智能计算机与应用 , 2018 , 8 ( 2 ): 7 - 13 .

LI H Y , WANG L M , XU Z , et al . Research on security mechanism of inter-satellite handover in LEO satellite scenario [J ] . Intelligent Computer and Applications , 2018 , 8 ( 2 ): 7 - 13 .

XUE K P , MENG W , ZHOU H C , et al . A lightweight and secure group key based handover authentication protocol for the softwaredefined space information network [J ] . IEEE Transactions on Wireless Communications , 2020 , 19 ( 6 ): 3673 - 3684 .

浏览量

1253

下载量

CSCD

文章被引用时，请邮件提醒。

提交

工具集

关联资源

面向卫星网络断续连通场景的接入和切换认证机制

卫星互联网地面缺省场景下用户设备的接入认证及重认证机制研究

6G天地一体化信息网络内生安全技术

天地一体化信息网络高速传输协议设计与若干关键技术研究

面向6G的天地一体化信息网络架构研究