卫星IP网络中用户身份认证机制的改进研究  

Modification of User Identity Authentication Mechanism in Satellite IP Network

作　　者：张兆雷[1] 董贵山[1] ZHANG Zhao-lei;DONG Gui-shan(No.30 Institute of CETC,Chengdu Sichuan 610041,China)

机构地区：[1]中国电子科技集团公司第三十研究所,四川成都610041

出　　处：《通信技术》2018年第11期2715-2720,共6页Communications Technology

基　　金：四川省科技计划(No.2017GZDZX0002)~~

摘　　要：卫星IP网络的使用范围越来越广泛,但其信道存在高延时、高丢包率问题,而基于卫星IP网的业务应用对协议的时效性和稳定性具有很高要求。在卫星IP网络中的用户身份认证机制中,传统的二元信任模型会因为重复认证而造成通信效率降低。因此,基于多元信任模型,利用可信的用户身份票据,将本地网络层身份认证的结果安全传递到远端应用层的认证服务系统中,以减少在卫星信道上完成认证协议所需的交互次数,有效提高卫星IP网络中身份认证和应用系统的访问效率。The satellite IP networks becomes more and more widely-used, but its channel features highdelay and high packet-loss-rate. However, service applications based on satellite IP networks have high requirements for the timeliness and stability of the protocols. In the user identity authentication mechanism of the satellite IP network, the traditional binary trust model would reduce communication efficiency due to the repeated authentication. Therefore, based on the multi-element trust model, and by using the trusted user ID ticket message, the result of the local network layer identity authentication is securely transmitted to the authentication service system of the remote application layer, thus to reduce the number of interactions required for completing the authentication protocol on the satellite channel, and effectively improve the access efficiency of the identity authentication and application system in the satellite IP network.

关 键 词：多元信任 票据 卫星IP网络 认证协议 

分 类 号：TN918.91[电子电信—通信与信息系统]