基于公钥基础设施的卫星网络安全保障平台  

Security Platform for Satellite Network Based on Public Key Infrastructure

作　　者：林琪[1,2] 王宇[3] 卢昱[4] 

机构地区：[1]北京航空航天大学计算机学院,北京100083 [2]装备指挥技术学院重点实验室,北京101416 [3]装备指挥技术学院信息装备系,北京101416 [4]装备指挥技术学院训练部,北京101416

出　　处：《装备指挥技术学院学报》2008年第2期76-81,共6页Journal of the Academy of Equipment Command & Technology

摘　　要：针对卫星网络拓扑动态变化、网络边界模糊等特点，分析了卫星网络对安全基础设施提出的需求，提出基于公共密钥基础设施（public key infrastructure，PKI）建立卫星网络安全保障平台的思．想；基于PKI提供的证书结构，在密钥管理、身份认证、完整性和机密性保护等方面，针对卫星网络应用环境进行了相应设计；利用仿真手段，基于卫星网络安全保障平台完成了卫星网络对抗信息传输过程的仿真，并分析了机密性和完整性保护策略的实施效果；最后从卫星网络使用的安全策略、密码算法和认证体系等方面得出结论，并指出下一步要研究的内容。Because of the specific attributes of satellite network, such as variability of topological structure and ambiguity of network boundary, the requirements for the security infrastructure in satellite network are analyzed. The approach to establish a security platform for satellite network based on public key infrastructure （PKI） is proposed, in which the PKI system is extended in the area of key management, authentication, integrity and sensitivity so as to be applicable in satellite network. The simulation of information transmission during satellite network counterwork is performed based on the security platform; and the performance of sensitivity/integrlty protective strategies is analyzed. Finally, the conclusion about security strategy, cryptography algorithm and authentication system used in satellite network are presented, and next steps in research are showed.

关 键 词：卫星网络 网络安全 防御策略 公共密钥基础设施 仿真 

分 类 号：TP319[自动化与计算机技术—计算机软件与理论]