水下通信网络中基于公钥加密体制的安全数据传输方法  

Underwater Secure Data Transmission Method Based on Public-key Encryption System for Underwater Communication Networks

作　　者：张杰[1] 杜金华 刘立[1] 韩光洁[1] 钱玉洁 ZHANG Jie;DU Jin-hua;LIU Li;HAN Guang-jie;QIAN Yu-jie(Changzhou Key Laboratory of Internet of Things Technology for Intelligent River and Lake,Hohai University,Changzhou 213022,China)

机构地区：[1]河海大学常州市智慧河湖物联网技术重点实验室,江苏常州213022

出　　处：《小型微型计算机系统》2023年第8期1805-1811,共7页Journal of Chinese Computer Systems

基　　金：国家自然科学基金项目(61971206,62002099)资助;江苏省自然科学基金项目(BK20200184)资助。

摘　　要：针对水下通信网络的安全数据通信,根据水下节点、水下信道及水下通信模式的特性,提出一种基于公钥加密体制的多跳水下通信网络安全数据传输方法.该方法包括1)基于移动CA(Certification Authority)的公钥证书发放策略及2)基于空间验证的公钥管理策略.首先,使水下移动节点作用于代理CA,遍历网络区域并通过水下光通信认证水下节点;随后,自水面的汇聚节点向下逐跳发放链式结构安全参数,使所有水下节点根据自身离汇聚节点的跳数,生成空间组密钥对;最终,水下节点利用水下声通信,通过基于公钥加密的机会式数据转发将数据发送至水面.提出方法利用可行的水下公钥证书发放模式及低通信成本公钥加密通信手段,试解决苛刻水下通信环境的公钥管理问题.Aiming at improving the feasibility of secure data communication in underwater communication networks,the paper propo-ses a public-key encryption based secure data transmission method for multi-hop underwater communication networks.The method considers the characteristics of underwater nodes,underwater channels and underwater communication modes,and is described by 1)a public-key certification strategy based on mobile CA(Certification Authority)and 2)a public-key management strategy based on space verification.First,the underwater mobile nodes work as proxy CAs which traverse the network area and authenticate the underwater node through underwater optical communication;then,the floating nodes on the surface distribute the chain-structural security parame-ters from surface to deep underwater that lead the underwater nodes to hierarchically generate public-private key pairs according to their hop distances from the floating nodes;finally,the underwater node generate and transmit the secure data by the public-key en-cryption using the opportunistic data forwarding through the underwater acoustic channels.Consequently,the proposed method applies a feasible underwater public-key certification approach and a low-cost public-key encryption based data communication scheme to solve the problem of public-key management in the harsh underwater communication environment.

关 键 词：水下通信网络 安全数据通信 公钥加密体制 公钥证书 空间验证 

分 类 号：TP393[自动化与计算机技术—计算机应用技术]