高斯矢量多路输入信道下的消息认证方案  

Message Authentication Scheme Under Gaussian Vector Multiple-Input Channels

作　　者：韩佳良 徐明[1] HAN Jialiang;XU Ming(College of Information Engineering,Shanghai Maritime University,Shanghai 201306,China)

机构地区：[1]上海海事大学信息工程学院,上海201306

出　　处：《计算机工程》2020年第12期120-126,共7页Computer Engineering

基　　金：国家自然科学基金(61202370)。

摘　　要：消息认证可使消息接收者检测消息是否被合法发送者之外的其他人伪造或非法修改,而传统消息认证方案通常在网络层或更高层上执行,容易遭受重放攻击、拒绝服务攻击等安全威胁。在分析基于物理层的消息认证方案基础上,构建高斯矢量多路输入信道模型。通过最小均方误差法进行信道估计,提出消息认证方案并制定敌手的最优攻击策略,同时根据敌手攻击成功的概率确定可达的保密边界。在信道传输功率一定的情况下,通过信息论分析信道的最大安全认证速率,得到信道的保密容量区域。实验结果表明,随着接收消息数的增加,敌手攻击成功的概率均值呈指数级下降,且当所有发送者与窃听方的空间相关系数均低于0.3时,敌手攻击成功的概率均值小于1.87×10^-7,验证了该方案的安全性。Message authentication allows the receiver of a message to detect whether the message is forged or illegally modified by someone other than the legitimate sender.Traditional message authentication schemes are typically implemented at the network layer or higher,which are vulnerable to security threats such as replay attacks,denial of service attacks and so forth.Based on the existing schemes based on the physical layer,this paper proposes a message authentication scheme using the Minimum Mean Square Error(MMSE)method for estimation of channels under the Gaussian vector multiple-input channel model.An optimal attack strategy for the eavesdropper is also formulated,and determines the reachable secrecy boundary according to the probabilities of successful attacks of the eavesdropper.By using the information theory to analyze the maximum security authentication rate of the channel,the secrecy capacity domain of the channel is obtained.Experimental results show that the average probability of successful attack of the eavesdropper decreases exponentially with the increased number of received messages.When the spatial correlation coefficients between all senders and the eavesdropper are lower than 0.3,the average probability of successful attack of the eavesdropper is less than 1.87×10^-7,which verifies the security of the proposed scheme.

关 键 词：高斯矢量多路输入信道 消息认证 假设检验 最优攻击策略 保密容量 

分 类 号：TP309[自动化与计算机技术—计算机系统结构]