一种面向软件定义卫星网络的轻量级快速安全认证策略

doi:10.3969/j.issn.1671-1122.2017.08.008

信息网络安全 ›› 2017, Vol. 17 ›› Issue (8): 53-59.doi: 10.3969/j.issn.1671-1122.2017.08.008

一种面向软件定义卫星网络的轻量级快速安全认证策略

彭岩¹, 廖珊²(), 赵宝康¹

1.国防科技大学计算机学院,湖南长沙410073
2.湖南工程职业技术学院,湖南长沙410151

收稿日期:2017-07-10 出版日期:2017-08-20 发布日期:2020-05-12
作者简介:
作者简介：彭岩（1993—）,男,安徽,硕士研究生,主要研究方向为天地一体化网络安全;廖珊（1983—）,女,湖南,实验师,硕士,主要研究方向为计算机网络;赵宝康（1981—）,男,湖北,副研究员,博士,主要研究方向为计算机网络、网络空间安全。
基金资助:
国家自然科学基金[61202488]

A Lightweight Fast Security Authentication Strategy towards Software Defined Satellite Networks

Yan PENG¹, Shan LIAO²(), Baokang ZHAO¹

1.College of Computer, National University of Defense Technology, Changsha Hunan 410073, China
2. Hunan Vocational College of Engineering, Changsha Hunan 410151, China

Received:2017-07-10 Online:2017-08-20 Published:2020-05-12

摘要/Abstract

摘要：

软件定义卫星网络通过将控制平面与数据平面解耦合,实现了网络的全局统一管理,是一种新型的卫星网络架构。安全认证是软件定义卫星网络中的一个核心问题,控制平面与数据平面之间的控制通路存在周期性切换等特点,使网络面临巨大的安全威胁。然而,目前国内外软件定义卫星网络安全方面的研究较少。文章提出了一种轻量级快速安全认证策略,在可证明安全性的前提下减少频繁切换产生的时间开销。仿真实验平台中的实验结果表明,该策略的计算开销虽大,但节约了通信时间,适用于软件定义卫星网络。

关键词: 软件定义卫星网络, 轻量级, 快速安全认证

Abstract:

By decoupling the control plane and the data plane, software defined satellite networks achieves a unified network management, which is a new type of satellite network architecture. Security authentication is a core problem in software defined satellite networks. The control path between the control plane and the data plane has the characteristic of periodic switching, which makes the network face significant security threats. However, there are few studies on software defined satellite network security now around the world. This paper proposes a lightweight fast security authentication strategy that reduces the time overhead of frequent handover under proven security. Experimental results in the simulation experiment platform show that the computational cost of the strategy is large, but the strategy saves communication time, which is suitable for software defined satellite networks.

Key words: software defined satellite networks, lightweight, fast security authentication

中图分类号:

TP309.1

彭岩, 廖珊, 赵宝康. 一种面向软件定义卫星网络的轻量级快速安全认证策略[J]. 信息网络安全, 2017, 17(8): 53-59.

Yan PENG, Shan LIAO, Baokang ZHAO. A Lightweight Fast Security Authentication Strategy towards Software Defined Satellite Networks[J]. Netinfo Security, 2017, 17(8): 53-59.

图/表 10

表1

图 1

表 2

图 2

图 3

表3

表 4

表 5

表 6

表 7

参考文献 30

[1]	梁昊鸣,陈春林,刘锡,等. 基于OpenFlow的恶意网站防范模型设计与研究[J]. 信息网络安全, 2017 (1):77-83.
[2]	ZHAO Tao, LI Tao, HAN Biao, et al.Design and Implementation of Software Defined Hardware Counters for SDN[J]. Computer Networks, 2016(102):129-144.
[3]	ZHAO Tao, LI Tao, HAN Biao, et al.Design of Software Defined Hardware Counters for SDN[C]//IEEE.Local & Metropolitan Area Networks (LANMAN), 2014 IEEE 20th International Workshop on, May 21-23, 2014. Reno, NV, USA.NJ:IEEE,2014:1-5.
[4]	王丽冲, 姚秀娟, 闫毅. 一种基于OpenFlow的软件定义卫星网络架构设计方案[J]. 电子设计工程, 2016, 24(17): 85-89.
[5]	BAO Jinzhen, ZHAO Baokang, YU Wanrong, et al.OpenSAN: A Software-Defined Satellite Network Architecture[C]//ACM. SIGCOMM'14, August 17 - 22, 2014 . Chicago, Illinois, USA .New York:ACM, 2014:347-348.
[6]	TANG Zhu, ZHAO Baokang, YU Wanrong, et al.Software Defined Satellite Networks: Benefits and Challenges[C]//IEEE. Computing, Communications and IT Applications Conference (ComComAp), 2014 IEEE, October 20-22, 2014. Beijing, China.NJ: IEEE,2014:127-132.
[7]	BARRITT B J, EDDY W. SDN Enhancements for LEO Satellite Networks[EB/OL]. ,2017-6-29.
[8]	GOPAL R, RAVISHANKAR C. Software Defined Satellite Networks [EB/OL]. ,2017-6-29.
[9]	FERRUS R, SALLENT O, RASHEED T, et al. Enhancing Satellite & Terrestrial Networks Integration through NFV/SDN technologies [EB/OL]. ,2017-6-29.
[10]	田睿, 郁小松, 赵永利, 等. 基于SDN的空间信息网络多路径承载策略[J]. 无线电工程, 2016, 46(12):1-4,67.
[11]	HE Lei, ZHANG Xiaoning, CHENG Zijing, et al.Design and Implementation of SDN/IP Hybrid Space Information Network Prototype[C]//IEEE. 2016 IEEE/CIC International Conference on Communications in China, July 27-29, 2016 . Chengdu, China .NJ:IEEE, 2016:1-6.
[12]	YANG Bowei, WU Yue, CHU Xiaoli, et al.Seamless Handover in Software-Defined Satellite Networking[J]. IEEE Communications Letters, 2016, 20(9):1768-1771.
[13]	YANG Xiaoniu, XU Jianliang, LOU Caiyi. Software-Defined Satellite: A New Concept for Space Information System[EB/OL]. ,2017-6-29.
[14]	王春锋. 软件定义可重构卫星网络系统研究[J]. 中国电子科学研究院学报, 2015, 10(5): 455-459.
[15]	TIIYSIIZ A, ALAG Z F.Satellite Mobility Pattern Scheme for Centrical and Seamless Handover Management in LEO Satellite Networks[J]. Journal of Communications & Networks, 2012, 8(4): 451-460.
[16]	FU Shaojian. Sigma: A Mobility Architecture for Terrestrial and Space Networks [EB/OL]. ,2017-6-29.
[17]	ZHANG Tao, ZHANG Jun.A Minimum Cost Handover Algorithm for Mobile Satellite Networks[J]. Chinese Journal of Aeronautics, 2008, 21(3): 269-274.
[18]	CRUICKSHANK H S.A Security System for Satellite Networks[C]//IEEE.Fifth International Conference on Satellite Systems for Mobile Communications and Navigation, May 13-15, 1996. London, UK.UK:IET,2002:187-190.
[19]	HWANG M S, YANG Chaochen, SHIU C Y.An Authentication Scheme for Mobile Satellite Communication Systems[J]. ACM SIGOPS Operating Systems Review, 2003, 37(4): 42-47.
[20]	CHANG Yafen, CHANG C C.An Efficient Authentication Protocol for Mobile Satellite Communication Systems[J]. ACM SIGOPS Operating Systems Review, 2005, 39(1): 70-84.
[21]	CHEN T H, LEE Weibin, CHEN H B.A Self-verification Authentication Mechanism for Mobile Satellite Communication Systems[J]. Computers & Electrical Engineering, 2009, 35(1): 41-48.
[22]	LEE C C, LI C T, CHANG Ruixiang X.A Simple and Efficient Authentication Scheme for Mobile Satellite Communication Systems[J]. International Journal of Satellite Communications and Networking, 2012, 30(1): 29-38.
[23]	LIN Hanyu.Efficient Dynamic Authentication for Mobile Satellite Communication Systems without Verification Table[J]. International Journal of Satellite Communications and Networking, 2016, 34(1): 3-10.
[24]	LIU Yuchen, ZHANG Anxin, LI Shenghong, et al. A Lightweight Authentication Scheme Based on Self‐updating Strategy for Space Information Network [EB/OL]. ,2017-6-29.
[25]	TANG ZHU.Research on Optimization Techniques of the Snapshot Routing in Satellite Networks [D]. 长沙:国防科技大学, 2015.
[26]	陈亚萌程相国, 王硕, 等. 基于双线性对的无证书群签名方案研究[J]. 信息网络安全, 2017 (3):53-58.
[27]	BONEH D, MATT F.Identity-based Encryption from the Weil Pairing [A]// Advances in Cryptology — CRYPTO 2001[M]. Heidelberg : Springer-Verlag Berlin Heidelberg,2001: 213-229.
[28]	王硕,程相国,陈亚萌,等. 密钥隔离的群签名方案研究[J]. 信息网络安全, 2017 (4):40-45.
[29]	李发根, 胡予濮, 李刚. 一个高效的基于身份的签密方案[J]. 计算机学报, 2006, 29(9): 1641-1647.
[30]	VERNAM G S. Cipher Printing Telegraph Systems For Secret Wire and Radio Telegraphic Communications [J]. Transactions of the American Institute of Electrical Engineers, 1926, XLV(2): 295-301.

一种面向软件定义卫星网络的轻量级快速安全认证策略

A Lightweight Fast Security Authentication Strategy towards Software Defined Satellite Networks

RichHTML

PDF (PC)

可视化

摘要/Abstract

引用本文

使用本文

图/表 10

参考文献 30

相关文章 6

编辑推荐

Metrics

本文评价

[1]	张敏, 许春香, 黄闽英. 远程医疗环境下面向多服务器的轻量级多因子身份认证协议研究[J]. 信息网络安全, 2019, 19(10): 42-49.
[2]	杨玉龙, 彭长根, 郑少波, 朱义杰. 基于移动智能终端的超轻量级移动RFID安全认证协议[J]. 信息网络安全, 2017, 17(5): 22-27.
[3]	马庆, 郭亚军, 曾庆江, 徐铎. 一种新的超轻量级RFID双向认证协议[J]. 信息网络安全, 2016, 16(5): 44-50.
[4]	侯玉灵, 卞阳东, 胡广跃, 王潮. 星际骨干网的轻量级密码体制研究[J]. 信息网络安全, 2015, 15(2): 33-39.
[5]	夏戈明;史立哲;周文;沈恒丰. 轻量级RFID双向通信认证协议优化方案[J]. , 2014, 14(2): 0-0.
[6]	. 轻量级RFID双向通信认证协议优化方案[J]. , 2014, 14(2): 58-.