一种面向软件定义卫星网络的轻量级快速安全认证策略  

A Lightweight Fast Security Authentication Strategy towards Software Defined Satellite Networks

作　　者：彭岩[1] 廖珊[2] 赵宝康[1] 

机构地区：[1]国防科技大学计算机学院,湖南长沙410073 [2]湖南工程职业技术学院,湖南长沙410151

出　　处：《信息网络安全》2017年第8期53-59,共7页Netinfo Security

基　　金：国家自然科学基金[61202488]

摘　　要：软件定义卫星网络通过将控制平面与数据平面解耦合,实现了网络的全局统一管理,是一种新型的卫星网络架构。安全认证是软件定义卫星网络中的一个核心问题,控制平面与数据平面之间的控制通路存在周期性切换等特点,使网络面临巨大的安全威胁。然而,目前国内外软件定义卫星网络安全方面的研究较少。文章提出了一种轻量级快速安全认证策略,在可证明安全性的前提下减少频繁切换产生的时间开销。仿真实验平台中的实验结果表明,该策略的计算开销虽大,但节约了通信时间,适用于软件定义卫星网络。By decoupling the control plane and the data plane, software defined satellite networks achieves a unified network management, which is a new type of satellite network architecture. Security authentication is a core problem in software defined satellite networks. The control path between the control plane and the data plane has the characteristic of periodic switching, which makes the network face significant security threats. However, there are few studies on software defined satellite network security now around the world. This paper proposes a lightweight fast security authentication strategy that reduces the time overhead of frequent handover under proven security. Experimental results in the simulation experiment platform show that the computational cost of the strategy is large, but the strategy saves communication time, which is suitable for software defined satellite networks.

关 键 词：软件定义卫星网络 轻量级 快速安全认证 

分 类 号：TN927.2[电子电信—通信与信息系统]