A Secure Identity Authentication Scheme for Space-ground Integrated Network Based on Bilinear Pairing

doi:10.3969/j.issn.1671-1122.2020.12.005

Abstract

Abstract:

This paper proposes a secure identity authentication scheme for space-ground integrated network based on bilinear pairing. In the process of authentication, the two-way authentication between entities in the network can be completed without the participation of a third party, and the session key will be negotiated during the authentication process. The key provides confidentiality protection for the subsequent data transmission. In addition, the security of the proposed scheme is based on the elliptic curve discrete logarithm difficulty problem(ECDLP) and the elliptic curve computational Diffie-Hellman difficult problem(ECCDHP). It has high security and can defend against various forms of attacks. Finally, thisp paper conducts a theoretical analysis for the scheme of the feasibility and effectiveness.

Key words: space-ground integrated network, bilinear pairing, two-way authentication, key agreement

CLC Number:

TP309

ZHAO Guofeng, ZHOU Wentao, XU Chuan, XU Lei. A Secure Identity Authentication Scheme for Space-ground Integrated Network Based on Bilinear Pairing[J]. Netinfo Security, 2020, 20(12): 33-39.

Figures/Tables 6

References 16

[1]	LIU Lixiang. Space-ground Integrated Network[M]. Beijing: Science Press, 2015.
	刘立祥. 天地一体化网络[M]. 北京: 科学出版社, 2015.
[2]	ZHANG Wei, BIAN Dongming, XIE Zhidong, et al. A Novel Space Information Network Architecture Based on Autimonmous System[C]// IEEE. 2015 International Conference on Wireless Communications and Signal Processing, October 15-17, 2015, Nanjing, China. New Jersey: IEEE, 2015: 1-5.
[3]	WU Heng. Research on Key Technologies of Satellite Security Network Authentication[D]. Xi’an: Xidian University, 2019.
	武衡. 卫星安全组网认证关键技术研究[D]. 西安:西安电子科技大学, 2019.
[4]	CRUICKSHANK H. S A Security System for Satellite Networks[C]// IET. 15th International Conference on Satellite Systems for Mobile Communications & Navigation, May 13-15 1996, London, UK. New York: IET, 1996: 187-190.
[5]	HWANG M S, YANG C C, SHIU C Y. An Authentication Scheme for Mobile Satellite Communication Systems[J]. ACM Sigops Operating Systems Review, 2003,37(4):42-47. doi: 10.1145/958965.958970 URL
[6]	CHANG Y F, CHANF C C. An Efficient Authentication Protocol for Mobile Satellite Communication Systems[J]. ACM SIGOPS Operating Systems Review, 2005,39(1):70-84. doi: 10.1145/1044552.1044560 URL
[7]	REN Fang, MA Jianfeng, HAO Xuanwen. Certificate-based Hybrid Public Key Infrastructure of Spatial Information Network[J]. Journal of Jilin University (Engineering and Technology Edition), 2012,42(2):440-445.
	任方, 马建峰, 郝选文. 空间信息网基于证书的混合式公钥基础设施[J]. 吉林大学学报(工学版), 2012,42(2):440-445.
[8]	LEE C C, LI C T, CHANG R X. A Simple and Efficient Authentication Scheme for Mobile Satellite Communication Systems[J]. International Journal of Satellite Communications and Networking, 2012,30(1):29-38. doi: 10.1002/sat.993 URL
[9]	TSAJ J L, LO N W, WU T C. Secure Anonymous Authentication Scheme without Verification Table for Mobile Satellite Communication Systems[J]. International Journal of Satellite Communications & Networking, 2015,32(5):443-452.
[10]	ZHANG Yuanyuan, CHEN Jianhua, HUANG Baojun. An Improved Authentication Scheme for Mobile Satellite Communication Systems[J]. International Journal of Satellite Communications & Networking, 2015,33(2):135-146.
[11]	LIN Hanyu. Efficient Dynamic Authentication for Mobile Satellite Communication Systems without Verification Table[J]. International Journal of Satellite Communications and Networking, 2016,34(1):3-10. doi: 10.1002/sat.1088 URL
[12]	IBRAHIM M H, KUMARI S, DAS A K, et al. Jamming Resistant Non-interactive Anonymous and Unlinkable Authentication Scheme for Mobile Satellite Networks[J]. Security and Communication Networks, 2016,9(18):5563-5580. doi: 10.1002/sec.v9.18 URL
[13]	MENG Wei, XUE Kaiping, XU Jie, et al. Low-latency Authentication Against Satellite Compromising for Space Information Network[C]// IEEE. 15th International Conference on Mobile Ad Hoc and Sensor Systems(MASS), October 9-12, 2018, Chengdu, China. New Jersey: IEEE, 2018: 237-244.
[14]	ZHANG Zhaolei, DONG Guishan. Research on Improvement of User Identity Authentication Mechanism in Satellite IP Network[J]. Communication Technology, 2018,51(11):2715-2720.
	张兆雷, 董贵山. 卫星IP网络中用户身份认证机制的改进研究[J]. 通信技术, 2018,51(11):2715-2720.
[15]	QI Mingping, CHEN Jianhua, CHEN Yitao. A Secure Authentication with Key Agreement Scheme Using ECC for Satellite Communication Systems[J]. International Journal of Satellite Communications and Networking, 2019,37(3):234-244. doi: 10.1002/sat.v37.3 URL
[16]	XIONG Hu, BAO Yangyang, NIE Xuyun, et al. Server-aided Attribute-based Signature Supporting Expressive Access Structures for Industrial Internet of Things[J]. IEEE Transactions on Industrial Informatics, 2019,16(2):1013-1023.

符号	描述
$I{{D}_{A}}$	实体A的真实身份信息
$I{{D}_{B}}$	实体B的真实身份信息
$TI{{D}_{A}}$	实体A的临时可信身份标识信息
$TI{{D}_{B}}$	实体B的临时可信身份标识信息
${{Q}_{A}}$	实体A的公钥
${{S}_{A}}$	实体A的私钥
${{Q}_{B}}$	实体B的公钥
${{S}_{B}}$	实体B的私钥
${{R}_{A}},{{R}_{B}}$	实体注册时生成的随机数
$t,{t}',{{t}_{A}},{{t}_{B}},{{t}_{l}}^{\prime },{{t}_{u}}^{\prime }$	注册和认证阶段生成的时间戳
${{H}_{1}},{{H}_{2}},{{H}_{3}},{{H}_{4}},{h}'$	安全的密码哈希函数
${{Z}_{P}}^{*}$	元素集{0,…, p-1}
$s$	KGC的主密钥
$P$	${{G}_{1}}$的生成元
$\hat{e}$	双线性映射${{G}_{1}}\times {{G}_{1}}\to {{G}_{T}}$
${{r}_{A}},{{r}_{B}}$	实体认证过程生成的随机数
$m$	消息
$\sigma $	签密的密文
$K$	实体之间协商出的会话密钥
$\oplus $	异或操作
$\|\|$	字符串连接操作

符号	描述
$\|{{T}_{st}}\|$	时间戳长度
$\|{{T}_{id}}\|$	身份标识长度
$\|{{G}_{1}}\|$	群${{G}_{1}}$中元素比特数
$\|{{G}_{T}}\|$	群${{G}_{T}}$中元素比特数
$\|m\|$	认证请求消息长度
${{T}_{mul}}$	椭圆曲线上一次点乘运算所需时间
${{T}_{bp}}$	椭圆曲线上一次配对运算所需时间
${{T}_{add}}$	椭圆曲线上一次点加运算所需时间

	计算开销	通信时延	认证时延/ms
文献[12]	$11{{T}_{mul}}+3{{T}_{add}}+{{T}_{se}}+2{{T}_{si}}$	$\le 4\times {{T}_{E-E}}$	$\ge 74.506$
文献[13]	$10{{T}_{mul}}+4{{T}_{add}}+{{T}_{se}}+2{{T}_{si}}$	$\le 6\times {{T}_{E-E}}$	$\ge 73.850$
本文方案	$4{{T}_{mul}}+4{{T}_{bp}}$	$<4\times {{T}_{E-E}}$	$\ge 42.890$

	双向认证	身份匿名	密钥协商	前向保密
文献[12]	×	√	√	√
文献[13]	√	√	√	√
本文方案	√	√	√	√