空间信息网的分布式证书撤销机制  

A Distributed Certificate Revocation Mechanism for Space Information Network

作　　者：任方[1] 马建峰[1] 钟焰涛[1] 

机构地区：[1]西安电子科技大学计算机网络与信息安全教育部重点实验室,西安710071

出　　处：《宇航学报》2011年第8期1778-1785,共8页Journal of Astronautics

基　　金：国家自然科学基金(60872041);中央高校基本科研业务(JY1000903001)

摘　　要：针对以卫星网络为核心的空间信息网分析其安全隐患与安全目标,提出使用公钥证书机制作为其基本安全机制。根据空间信息网没有中心节点这一特点,给出了一种分布式证书撤销算法及其具体实现细节。该算法中任意节点可以对异常节点发起撤销指控,当指控量达到一定门限值时撤销异常节点的证书。网络中的节点只需维护两张表以标识全网节点证书状态,极大地减少了通信量。该算法可以防止被撤销节点发起有效指控,并且能够以很高的概率抵抗恶意节点的非法指控攻击。The increasing prominence of a space information network consisted of satellite networks and other grand stations is stimulating greater interest in developing adequate security mechanism for this newborn hybrid network.Security risks in the space information network and the security goals to be achieved are analyzed,and the public key cryptography is proposed as the basis of security architecture.The issue of certificate revocation in this type of network is a challenge problem because there are no central nodes in it and no on-line accesses to trusted authorities distributed on the ground.A distributed certificate revocation algorithm is proposed for the space information network.In this scheme,any node within the network is allowed to accuse the abnormal behaviors of entities and the certificate of the node will be revoked when its revocation quotient reaches its threshold.The algorithm can prevent effective accusations made by revoked nodes and resist illegal accusation attacks of malicious nodes at a high probability.

关 键 词：卫星网络 空间信息网 公钥密码术 证书 分布式算法 

分 类 号：TP393.08[自动化与计算机技术—计算机应用技术]