基于身份签名的北斗二代民用D2导航电文认证协议  

The Authentication Protocol for Civil Navigation Message D2 of BeidouⅡBased on Identity Signature

作　　者：吴志军 杨一鸣 张云 WU Zhi-jun;YANG Yi-ming;ZHANG Yun(School of The Electronic Information and Automation,Civil Aviation University of China,Tianjin 300300,China)

机构地区：[1]中国民航大学电子信息与自动化学院,天津300300

出　　处：《电子学报》2021年第9期1790-1798,共9页Acta Electronica Sinica

基　　金：国家自然基金委员会与中国民航局联合基金资助项目(No.U1933108);国家自然基金青年基金项目(No.61802276);天津市教委科研计划项目(No.2019KJ117);中央高校基本业务费项目资助(No.ZXH2012P004)。

摘　　要：北斗二代民用D2导航电文(BeiDou-Civil Navigation Message-D2, B-CNAV-D2)信息在开放的信道中传输,缺乏完整性保护机制,面临信息被伪造和篡改的威胁,容易遭受欺骗攻击.为了保障B-CNAV-D2信息的完整、真实和可用,本文在分析B-CNAV-D2信息组成结构的基础上,设计了基于身份签名体制的北斗二代民用D2导航电文信息认证协议.该协议提供信息源认证和信息完整性保护,实现B-CNAV-D2信息防篡改和防伪冒的功能.B-CNAV-D2信息认证协议可以有效地减少传统签名认证方案中数字证书分发和更新等处理环节,提高认证协议的整体效率和认证效率,拥有较好的认证时效性与较低的计算成本和通信成本.The BeidouⅡcivil navigation message D2(B-CNAV-D2)in Beidou navigation satellite system(BDS)are transmitted in an open channel without integrity protection,facing the threat of information being tampered and falsified,and vulnerable to spoofing attacks.In order to guarantee the integrity,authenticity and availability of B-CNAV-D2 information,based on the analysis of the composition structure of B-CNAV-D2,this paper presents an authentication protocol based on the identity signature to provide B-CNAV-D2 information source authentication and integrity protection.The authentication protocol is designed to achieve the functions of anti-tampering and anti-spoofing for B-CNAV-D2.The application of authentication protocol in B-CNAV-D2 can effectively reduce the processing steps of digital certificate distribution and update in traditional signature authentication schemes,improve the overall efficiency and authentication efficiency,and has better performance in authentication timeliness,and lower computing and communication costs.

关 键 词：北斗民用D2导航电文 信息源认证 完整性 抗欺骗 防篡改 

分 类 号：TN915[电子电信—通信与信息系统]