面向智慧城市监控的无人机网络身份认证方案的分析与改进

Analysis and Improvement of Identity Authentication Scheme for UAV Network for Smart City Surveillance

摘要: 智慧城市中的无人机在环境监测领域的应用越来越广泛，无人机被用来收集信息，用户通过他们的移动设备与特定飞行区域的无人机通信，以实时获取数据，所以无人机通信实体间传输数据的安全变得尤为重要。所以，为了避免敏感信息遭到截获和篡改则需要一个高效和安全的认证方案来使用户和无人机之间实现保密通信。2020年，Nikooghadam等人提出了一个可证明安全的轻量级智能城市监控无人机互联网认证方案。然而，本文分析了Nikooghadam等人提出的方案的安全性指出了该方案不能抵抗跟踪攻击、假冒用户攻击和假冒无人机攻击，为了克服该方案的安全缺陷，本文通过更新与用户有关的重要信息，提出一个改进方案。经过逻辑安全性分析以及与相关认证方案安全功能、计算通信开销的分析比较，证明了改进方案可以抵抗多种攻击，能够实现安全和高效的身份认证。

Abstract: UAVs in smart cities are increasingly widely used in the field of environmental monitoring. UAVs are used to collect information, and users communicate with UAVs in specific flight areas through their mobile devices to obtain real-time data. Therefore, the safety of data transmission between UAVs becomes particularly important. Therefore, in order to avoid the interception and tampering of sensitive information, an efficient and secure authentication scheme is needed to achieve secure communication between the user and the UAV. In 2020, Nikooghadam et al. proposed an Internet certification scheme for a lightweight and provably safe smart city surveillance drone. However, this paper analyzes the security of the scheme proposed by Nikooghadam et al. and points out that the scheme cannot resist tracking attack, impersonating user attack and impersonating drone attack. In order to overcome the security defects of the scheme, this paper proposes an improved scheme by updating important information related to users. Through the analysis of logical security and the comparison with the security function and computational communication cost of related authenti-cation schemes, it is proved that the improved scheme can resist various attacks and achieve secure and efficient identity authentication.