改进拉普拉斯的网络数据链网关终端访问认证  

Improved Laplacian Network Data Link Gateway Terminal Access Authentication

作　　者：王斌[1] 王业[1] WANG Bin;WANG Ye(Xinjiang Agricultural University,Urumqi Xinjiang 830052,China)

机构地区：[1]新疆农业大学,新疆乌鲁木齐830052

出　　处：《计算机仿真》2023年第8期408-412,共5页Computer Simulation

摘　　要：网关终端存在接入不规范,终端访问易受蠕虫、木马等病毒的攻击,给网关终端带来安全隐患。为了提升网关终端访问安全性,提出一种在移动网络数据链环境下网关终端访问安全性认证方法。运用拉普拉斯与差分隐私方式,建立网关终端的隐私数据保护机制,在保留有效数据特征前提下扰动转换隐私数据;根据网关终端数据投放人要求,设立安全访问权限标签,明确数据安全级别;根据集中KDC秘密份额与分布式联合秘密份额发放密钥,利用会聚算法判断密钥是否合法,完成网关终端访问安全性认证。实验结果表明,所提方法访问认证时间在3ms内、认证正确率在90%以上,并能保证良好的网络吞吐量性能。In order to improve the security of gateway terminal access,a method of security authentication for gateway terminals in mobile network data link was proposed.Firstly,Laplacian and differential privacy methods were adopted to construct a privacy data protection mechanism for gateway terminals,thus disturbing the converting privacy data while retaining the valid data characteristics.According to providers' requirements for gateway terminal data,a security access right label was set to define the security level.According to the centralized KDC secret shares and the distributed joint secret shares,the key was issued.Moreover,the convergence algorithm was used to determine whether the key was legal.Finally,the gateway terminal access security authentication was achieved.Experimental results prove that the authentication time of the proposed method is less than 3ms,and the accuracy is more than 90%.Meanwhile,the network throughput is good.

关 键 词：移动网络数据链 网关终端 密钥认证 秘密份额 数据节点 

分 类 号：TP318.2[自动化与计算机技术—计算机软件与理论]