BDSec:Security Authentication Protocol for BeiDou-Ⅱ Civil Navigation Message  

作　　者：Wu Zhijun Zhang Yuan Yang Yiming Wang Peng Yue Meng 

机构地区：[1]School of Safety Science and Engineering,Civil Aviation University of China,Tianjin 300300,China [2]School of Electronic Information and Automation,Civil Aviation University of China,Tianjin 300300,China

出　　处：《China Communications》2024年第6期206-218,共13页中国通信（英文版）

基　　金：supported in part by the National Key R&D Program of China(No.2022YFB3904503);National Natural Science Foundation of China(No.62172418);the joint funds of National Natural Science Foundation of China and Civil Aviation Administration of China(No.U2133203).

摘　　要：Due to the lack of authentication mechanism in BeiDou navigation satellite system(BDS),BD-Ⅱ civil navigation message(BDⅡ-CNAV) are vulnerable to spoofing attack and replay attack.To solve this problem,we present a security authentication protocol,called as BDSec,which is designed by using China’s cryptography Shangyong Mima(SM) series algorithms,such as SM2/4/9 and Zu Chongzhi(ZUC)algorithm.In BDSec protocol,both of BDⅡ-CNAV and signature information are encrypted using the SM4 algorithm(Symmetric encryption mechanism).The encrypted result is used as the subject authentication information.BDSec protocol applies SM9 algorithm(Identity-based cryptography mechanism) to protect the integrity of the BDⅡ-CNAV,adopts the SM2 algorithm(Public key cryptosystem) to guarantee the confidentiality of the important session information,and uses the ZUC algorithm(Encryption and integrity algorithm) to verify the integrity of the message authentication serial number and initial information and the information in authentication initialization sub-protocol respectively.The results of the SVO logic reasoning and performance analysis show that BDSec protocol meets security requirements for the dual user identity authentication in BDS and can realize the security authentication of BDⅡ-CNAV.

关 键 词：BDII civil navigation messages(BDIICNAV) BeiDou navigation satellite system(BDS) identity-based cryptography mechanism navigation message authentication protocol(BDSec) 

分 类 号：TN967.1[电子电信—信号与信息处理]