从信息安全角度浅析RDSS系统的安全性  

Analyzing the security of RDSS system from the perspective of information security

作　　者：张涛[1] 聂桂根[2] 马俊 ZHANG Tao;NIE Guigen;MA Jun(School of Geodesy and Geomatics Wuhan University,Wuhan 430079,China;GNSS Research Center,Wuhan University,Wuhan 430079,China)

机构地区：[1]武汉大学测绘学院,武汉430079 [2]武汉大学卫星导航定位技术研究中心,武汉430079

出　　处：《全球定位系统》2024年第4期42-47,共6页Gnss World of China

摘　　要：针对卫星无线电测定业务(radio determination satellite service,RDSS)系统的信号结构和运行机制,分析了RDSS系统的安全优势,从信息安全的保密性、完整性和可用性三个角度研究了RDSS系统可能存在的安全隐患和应对措施,特别是采用射频录制和回放(record and replay,RAR)手段对RDSS系统可能存在的仿冒与欺骗安全隐患做了验证.证明RDSS系统在抗RAR攻击方面存在漏洞,容易被RAR攻击欺骗,这种欺骗攻击暴露了RDSS系统存在完整性和可用性上的安全隐患,可能使得终端用户造成信息混乱,也可能使终端用户被触发频次限制,无法得到正常的服务.最后提出了针对此类安全隐患提高系统安全性的几种措施.This paper analyzes the security advantages of radio determination satellite service(RDSS)in terms of signal structure and operation mechanism,and studies the potential security risks and countermeasures of RDSS from three aspects of information security:confidentiality,integrity,and availability.In particular,the use of radio frequency recording and replay(RAR)to verify the potential counterfeiting and deception security risks of RDSS has been studied prove that RDSS has vulnerabilities in resisting RAR attacks and is easily deceived by RAR attacks.The success of this deception attack exposes the security risks in the integrity and availability of the RDSS system,which can cause information confusion for end users and may also limit the frequency of attacks,preventing them from receiving normal services.Finally,several measures were proposed to improve system security in response to such security risks.

关 键 词：GNSS 卫星无线电测定业务(RDSS) GPS 北斗卫星导航系统(BDS) 欺骗 反欺骗 信息安全 重放攻击 软件无线电 

分 类 号：P228[天文地球—大地测量学与测量工程] TN911.7[天文地球—测绘科学与技术] TN96[电子电信—通信与信息系统]