一种卫星网络中的星地轻量化认证鉴权架构  

A Lightweight Satellite-ground Authentication Architecture in Satellite Networks

作　　者：窦志斌[1] 白鹤峰 李文屏 苏曼 王晓婷 王金海[1] DOU Zhibin;BAI Hefeng;LI Wenping;SU Man;WANG Xiaoting;WANG Jinhai(The 54th Research Institute of CETC,Shijiazhuang 050081,China;Unit 63921,PLA,Beijing 100094,China)

机构地区：[1]中国电子科技集团公司第五十四研究所,河北石家庄050081 [2]中国人民解放军63921部队,北京100094

出　　处：《无线电工程》2020年第4期262-268,共7页Radio Engineering

基　　金：国家重点研发计划基金资助项目(2016YFB0800301)。

摘　　要：考虑星载计算、存储资源受限,结合卫星和终端的特点,提出了一种适用于卫星网络中的星地轻量化认证鉴权架构。该架构依托于预共享密钥(Pre-shared Key,PSK)体制,支持卫星和终端之间的双向认证鉴权。双方的轻量化认证鉴权架构去除了传统三方实体认证协议中认证中心的消息传递作用,解决了传统三方实体认证协议通信时延大和安全性不足的问题。A lightweight satellite-ground authentication architecture has been proposed taking the limited on-board processing resources as well as features of terminals and satellites into consideration in the satellite networks.The proposed architecture is based on the pre-shared key(PSK)mechanism to provide mutual authentication between terminals and satellites,which eliminates unnecessary authentication messages from and to the authentication center in the conventional three-party authentication model.In addition,the proposed architecture eliminates authentication problems like high communication latency and variance as well as security vulnerabilities in the conventional three-party authentication model.

关 键 词：预共享密钥 轻量化认证鉴权 双向认证鉴权 卫星网络 星地 

分 类 号：TP915.5[自动化与计算机技术]