基于TESLA协议的BDSBAS电文认证技术  

Design of message authentication based on TESLA protocol for BDSBAS

作　　者：陈潇 田翔 罗瑞丹 刘婷 宋佳慧 吴海涛 CHEN Xiao;TIAN Xiang;LUO Ruidan;LIU Ting;SONG Jiahui;WU Haitao(Aerospace Information Research Institute,Chinese Academy of Sciences,Beijing 100094,China;School of Electronic,Electrical and Communication Engineering,University of Chinese Academy of Sciences,Beijing 100049,China)

机构地区：[1]中国科学院空天信息创新研究院,北京100094 [2]中国科学院大学电子电气与通信工程学院,北京100049

出　　处：《北京航空航天大学学报》2023年第9期2289-2298,共10页Journal of Beijing University of Aeronautics and Astronautics

摘　　要：星基增强系统(SBAS)能为航空、航海等生命安全领域提供完好性增强服务,针对SBAS服务的欺骗风险,面向北斗星基增强系统(BDSBAS)发展,提出基于中国商用密码标准算法的时间效应流丢失容错认证机制(TESLA)电文认证方案。阐述SBAS电文认证架构与TESLA认证原理,开展基于中国商用密码标准算法的BDSABS认证电文编排及空中密钥更新(OTAR)的电文播发设计,针对L5I与L5Q开展认证时间间隔和最大认证延迟等指标的理论分析,进一步从OTAR信息权重和解调错误率2方面仿真首次认证时间指标。仿真结果能为基于TESLA协议的BDSBAS电文认证提供一定的理论支持。Aviation,navigation,and other life safety areas can benefit from the integrity augmentation services offered by SBAS.In response to the deception risk of SBAS services and the development of the BeiDou satellite-based augmentation system(BDSBAS),this paper proposes a message authentication method based on the timed efficient streaming loss-tolerant authentication(TESLA)protocol.Firstly,this article introduces SBAS service security risks and the concept of message authentication and then explains the principle of TESLA,key chain generation,and operation process.The Over the Air Rekeying(OTAR)message broadcast design and authentication message format are created in accordance with the domestic commercial cryptographic standard hash algorithm.Finally,a simulation test is carried out for the L5I channel and the L5Q channel.The simulation results can provide theoretical support for the BDSBAS authentication based on the TESLA scheme.

关 键 词：北斗星基增强系统 电文认证 消息认证码 时间效应流丢失容错认证机制 空中密钥更新 

分 类 号：V19[航空宇航科学与技术—人机与环境工程] X949[环境科学与工程—安全科学]