无人机网络中基于多因子的认证密钥协商协议研究  

Research on Authentication Key Agreement Protocol Based on Multi-Factor in Internet of Drones

作　　者：张敏[1,2] 许春香[1] 张建华[2] ZHANG Min;XU Chunxiang;ZHANG Jianhua(School of Cyberspace Security,University of Electronic Science and Technology of China,Chengdu 611731,China;School of Computer Science and Engineer,Southwest Minzu University,Chengdu 610225,China)

机构地区：[1]电子科技大学网络空间安全学院,成都611731 [2]西南民族大学计算机科学与工程学院,成都610225

出　　处：《信息网络安全》2022年第9期21-30,共10页Netinfo Security

基　　金：国家自然科学基金[61872060];国家重点研发计划[2017YFB0802000]。

摘　　要：随着无人机技术的发展,无人机网络日益普及,无人机网络安全也越来越受到人们的关注。解决无人机网络的安全问题,研究和设计安全、高效且轻量级的认证密钥协商协议至关重要。2021年,HUSSAIN等人提出一种基于椭圆曲线加密算法的无人机网络认证密钥协商协议,但该协议存在无人机伪装攻击、会话密钥泄露等安全问题。基于此,文章提出一种基于多因子的认证密钥协商协议,利用安全概略算法和椭圆曲线加密算法解决HUSSAIN等人协议的安全威胁,且可实现访问控制。安全分析、安全证明及仿真实验表明,该协议的计算开销和通信开销虽然略有增长,但安全性更高。With the development of drone technology,Internet of drones(IoD) is becoming more and more popular,and the security of IoD has also become a hot topic in academic circles.To solve the security problems faced by IoD,it is very important to study and design a secure,efficient and lightweight authentication key agreement protocol.In 2021,HUSSAIN et al.proposed a key agreement protocol for IoD authentication key agreement based on elliptic curve encryption algorithm.This paper found that this protocol can be suffered from serious security attacks such as drone impersonation attack,session key leakage attack and so on.Aiming at the security problems faced by Hussain et al.,this paper proposed a new authenticated key agreement scheme based on multi-factors.The scheme is based on secure sketch algorithm and elliptic curve encryption algorithm,which can effectively solve the security threats faced by HUSSAIN et al.’s scheme.What’s more,the proposed scheme can realize access control also.From security analysis,security proof and simulation experiments,the result shows that the proposed scheme has higher security,although the computational and communication overhead has increased slightly.

关 键 词：无人机网络 安全概略 认证密钥协商 多因子身份认证 

分 类 号：TP309[自动化与计算机技术—计算机系统结构]