A Lightweight Fast Security Authentication Strategy towards Software Defined Satellite Networks

doi:10.3969/j.issn.1671-1122.2017.08.008

Abstract

Abstract:

By decoupling the control plane and the data plane, software defined satellite networks achieves a unified network management, which is a new type of satellite network architecture. Security authentication is a core problem in software defined satellite networks. The control path between the control plane and the data plane has the characteristic of periodic switching, which makes the network face significant security threats. However, there are few studies on software defined satellite network security now around the world. This paper proposes a lightweight fast security authentication strategy that reduces the time overhead of frequent handover under proven security. Experimental results in the simulation experiment platform show that the computational cost of the strategy is large, but the strategy saves communication time, which is suitable for software defined satellite networks.

Key words: software defined satellite networks, lightweight, fast security authentication

CLC Number:

TP309.1

Yan PENG, Shan LIAO, Baokang ZHAO. A Lightweight Fast Security Authentication Strategy towards Software Defined Satellite Networks[J]. Netinfo Security, 2017, 17(8): 53-59.

Figures/Tables 10

References 30

[1]	梁昊鸣,陈春林,刘锡,等. 基于OpenFlow的恶意网站防范模型设计与研究[J]. 信息网络安全, 2017 (1):77-83.
[2]	ZHAO Tao, LI Tao, HAN Biao, et al.Design and Implementation of Software Defined Hardware Counters for SDN[J]. Computer Networks, 2016(102):129-144.
[3]	ZHAO Tao, LI Tao, HAN Biao, et al.Design of Software Defined Hardware Counters for SDN[C]//IEEE.Local & Metropolitan Area Networks (LANMAN), 2014 IEEE 20th International Workshop on, May 21-23, 2014. Reno, NV, USA.NJ:IEEE,2014:1-5.
[4]	王丽冲, 姚秀娟, 闫毅. 一种基于OpenFlow的软件定义卫星网络架构设计方案[J]. 电子设计工程, 2016, 24(17): 85-89.
[5]	BAO Jinzhen, ZHAO Baokang, YU Wanrong, et al.OpenSAN: A Software-Defined Satellite Network Architecture[C]//ACM. SIGCOMM'14, August 17 - 22, 2014 . Chicago, Illinois, USA .New York:ACM, 2014:347-348.
[6]	TANG Zhu, ZHAO Baokang, YU Wanrong, et al.Software Defined Satellite Networks: Benefits and Challenges[C]//IEEE. Computing, Communications and IT Applications Conference (ComComAp), 2014 IEEE, October 20-22, 2014. Beijing, China.NJ: IEEE,2014:127-132.
[7]	BARRITT B J, EDDY W. SDN Enhancements for LEO Satellite Networks[EB/OL]. ,2017-6-29.
[8]	GOPAL R, RAVISHANKAR C. Software Defined Satellite Networks [EB/OL]. ,2017-6-29.
[9]	FERRUS R, SALLENT O, RASHEED T, et al. Enhancing Satellite & Terrestrial Networks Integration through NFV/SDN technologies [EB/OL]. ,2017-6-29.
[10]	田睿, 郁小松, 赵永利, 等. 基于SDN的空间信息网络多路径承载策略[J]. 无线电工程, 2016, 46(12):1-4,67.
[11]	HE Lei, ZHANG Xiaoning, CHENG Zijing, et al.Design and Implementation of SDN/IP Hybrid Space Information Network Prototype[C]//IEEE. 2016 IEEE/CIC International Conference on Communications in China, July 27-29, 2016 . Chengdu, China .NJ:IEEE, 2016:1-6.
[12]	YANG Bowei, WU Yue, CHU Xiaoli, et al.Seamless Handover in Software-Defined Satellite Networking[J]. IEEE Communications Letters, 2016, 20(9):1768-1771.
[13]	YANG Xiaoniu, XU Jianliang, LOU Caiyi. Software-Defined Satellite: A New Concept for Space Information System[EB/OL]. ,2017-6-29.
[14]	王春锋. 软件定义可重构卫星网络系统研究[J]. 中国电子科学研究院学报, 2015, 10(5): 455-459.
[15]	TIIYSIIZ A, ALAG Z F.Satellite Mobility Pattern Scheme for Centrical and Seamless Handover Management in LEO Satellite Networks[J]. Journal of Communications & Networks, 2012, 8(4): 451-460.
[16]	FU Shaojian. Sigma: A Mobility Architecture for Terrestrial and Space Networks [EB/OL]. ,2017-6-29.
[17]	ZHANG Tao, ZHANG Jun.A Minimum Cost Handover Algorithm for Mobile Satellite Networks[J]. Chinese Journal of Aeronautics, 2008, 21(3): 269-274.
[18]	CRUICKSHANK H S.A Security System for Satellite Networks[C]//IEEE.Fifth International Conference on Satellite Systems for Mobile Communications and Navigation, May 13-15, 1996. London, UK.UK:IET,2002:187-190.
[19]	HWANG M S, YANG Chaochen, SHIU C Y.An Authentication Scheme for Mobile Satellite Communication Systems[J]. ACM SIGOPS Operating Systems Review, 2003, 37(4): 42-47.
[20]	CHANG Yafen, CHANG C C.An Efficient Authentication Protocol for Mobile Satellite Communication Systems[J]. ACM SIGOPS Operating Systems Review, 2005, 39(1): 70-84.
[21]	CHEN T H, LEE Weibin, CHEN H B.A Self-verification Authentication Mechanism for Mobile Satellite Communication Systems[J]. Computers & Electrical Engineering, 2009, 35(1): 41-48.
[22]	LEE C C, LI C T, CHANG Ruixiang X.A Simple and Efficient Authentication Scheme for Mobile Satellite Communication Systems[J]. International Journal of Satellite Communications and Networking, 2012, 30(1): 29-38.
[23]	LIN Hanyu.Efficient Dynamic Authentication for Mobile Satellite Communication Systems without Verification Table[J]. International Journal of Satellite Communications and Networking, 2016, 34(1): 3-10.
[24]	LIU Yuchen, ZHANG Anxin, LI Shenghong, et al. A Lightweight Authentication Scheme Based on Self‐updating Strategy for Space Information Network [EB/OL]. ,2017-6-29.
[25]	TANG ZHU.Research on Optimization Techniques of the Snapshot Routing in Satellite Networks [D]. 长沙:国防科技大学, 2015.
[26]	陈亚萌程相国, 王硕, 等. 基于双线性对的无证书群签名方案研究[J]. 信息网络安全, 2017 (3):53-58.
[27]	BONEH D, MATT F.Identity-based Encryption from the Weil Pairing [A]// Advances in Cryptology — CRYPTO 2001[M]. Heidelberg : Springer-Verlag Berlin Heidelberg,2001: 213-229.
[28]	王硕,程相国,陈亚萌,等. 密钥隔离的群签名方案研究[J]. 信息网络安全, 2017 (4):40-45.
[29]	李发根, 胡予濮, 李刚. 一个高效的基于身份的签密方案[J]. 计算机学报, 2006, 29(9): 1641-1647.
[30]	VERNAM G S. Cipher Printing Telegraph Systems For Secret Wire and Radio Telegraphic Communications [J]. Transactions of the American Institute of Electrical Engineers, 1926, XLV(2): 295-301.