空间网络中密钥协商协议的设计与分析
The Design and Analysis of Key Agreement Protocol in Space Information Network
摘要:
针对空间信息网络中节点间安全高效通信需求,本文利用组合公钥思想设计了一个节点间密钥协商协议。地面控制中心首先完成基于身份的组合密钥的生成,并通过安全通道分发至各空间节点。当各空间节点间需要通信时,在进行双向身份认证后,利用本身的三个秘密值与对方节点的可信公钥信息计算得出两方节点的会话密钥。文章详细分析了协议自身的安全特性,并将协议和现有的相关协议在安全和性能两个方面进行比较。比较结果表明,本文设计的协议不仅在安全性方面有所提升,且具有更髙的计算效率。
Abstract:
In order to meet the security and efficient communication requirements of nodes in space information network, a scheme of key agreement between nodes based on combined public key is proposed. The ground control center first completes the generation of the combination key based on identity and distributes it to the space nodes through a secure channel. When communication between different nodes is needed, after the two-way authentication is carried out, the two party nodes' session key is calculated by using their three secret values and the trusted public key information of the other nodes. The security properties of the protocol are analyzed, and compare the protocol and related protocols existing in the two aspects of security and performance. The comparison results show that this protocol not only has improved in terms of safety, and has higher computational efficiency.
参考文献
|
[1]
|
徐军华, 樊宏, 郝云芳. 安全高效的空间信息网中密钥管理方案[J]. 现代电子技术, 2011, 34(7): 81-84.
|
|
[2]
|
冯登国. 密码学原理与实践[M]. 北京: 电子工业出版社, 2016.
|
|
[3]
|
Yang, J.H. and Chang, C.C. (2009) An ID-Based Remote Mutual Authentication with Key Agreement Scheme for Mobile Devices on Elliptic Curve Cryptosystem. Computers & Security, 28, 138-143. [Google Scholar] [CrossRef]
|
|
[4]
|
Yoon, E.J. and Yoo, K.Y. (2009) Robust Id-Based Remote Mutual Authentica-tion with Key Agreement Scheme for Mobile Devices on ECC. 2009 IEEE International Conference on Computational Science and Engineering (CSE’09), Vancouver, BC, 29-31 August 2009, Vol. 2, 633-640. [Google Scholar] [CrossRef]
|
|
[5]
|
Chou, C.H., Tsai, K.Y. and Lu, C.R. (2013) Two ID-Based Authenticated Schemes with Key Agreement for Mobile Environments. The Journal of Supercomputing, 66, 973-988. [Google Scholar] [CrossRef]
|
|
[6]
|
Farash, M.S. and Attari, M.A. (2014) A Secure and Efficient Identity-Based Authenticated Key Exchange Protocol for Mobile Client-Server Networks. The Journal of Su-percomputing, 69, 395-411. [Google Scholar] [CrossRef]
|
|
[7]
|
周星, 刘军, 董春冻, 等. 基于身份的卫星网络密钥管理方案[J]. 计算机技术与发展, 2013, 23(11): 148-151.
|
|
[8]
|
刘毅. 基于椭圆曲线的无线传感器网络密钥管理方案的研究[D]: [硕士学位论文]. 北京: 北京邮电大学, 2014.
|
|
[9]
|
宋宁宁, 刘蕴络, 姚倩燕, 等. 基于隐秘映射组合公钥的云计算密钥管理方案[J]. 计算机应用研究, 2013, 30(9): 2759-2762.
|
|
[10]
|
赵秀凤. 认证及密钥协商协议设计与分析[D]: [博士学位论文]. 济南: 山东大学, 2012.
|