ADS-B中一种基于身份的签名广播认证协议  

An ID-based signature broadcast authentication protocol for automatic dependent surveillance-broadcast system

作　　者：冯孟 董昳辉 刘帅 Feng Meng;Dong Yihui;Liu Shuai(Nanjing University of Information Science&Technology,JiangsuNanjing 210044)

机构地区：[1]南京信息工程大学

出　　处：《网络空间安全》2019年第10期23-28,共6页Cyberspace Security

基　　金：鹏城实验室网络空间安全研究中心(项目编号：PCL2018KP004)

摘　　要：广播式自动相关监视(ADS-B)是空中交通监视技术中重要的组成部分。航空公司为了实现更好的安全性,为每一个飞机都装设了一个ADS-B设备。装设ADS-B设备的飞机会广播一些消息给其他飞机和基站。由于广播信道是开放且不安全的,所以ADS-B系统中的通信消息易受到各种攻击,比如截取、篡改等。为了保障通信信息的完整性和真实性,文章介绍了一种基于身份签名支持消息恢复的广播认证协议。在该协议中,信息无需与签名一起发送给验证者,且验证者能够恢复出被签名的信息,降低了协议的通信开销。此外,该协议没有哈希到点的操作和证书管理操作,相比于其他协议计算开销也比较小。The automatic-dependent surveillance-broadcast(ADS-B) is an important component of air traffic surveillance technology. To achieve better security, the airline equips an ADS-B device for each aircraft. Aircraft equipped with an ADS-B device broadcasts messages to other aircraft and base stations. Due to the open and unsecure broadcast channel, the communication messages in the ADS-B system are susceptible to various attacks such as interception and tampering. To ensure the integrity and authenticity of the communication messages, this paper introduces a broadcast authentication protocol based on identity signature supporting message recovery. In the proposed protocol, the message does not need to be sent to the verifier along with the signature and the verifier can recover the message, which reduces the communication cost. What’s more, hash-to-point computation and certification management are not required. The computational cost of the proposed protocol is lower than other related protocols.

关 键 词：ADS-B 签名 广播认证 证书 

分 类 号：TP309.2[自动化与计算机技术—计算机系统结构]