区块链共识增强的高速铁路RSSP安全通信协议研究  

Research on High-speed Railway RSSP Secure Communication Protocol Enhanced by Blockchain Consensus

作　　者：陈永[1] 张冰旺 信召凤 CHEN Yong;ZHANG Bingwang;XIN Zhaofeng(School of Electronic and Information Engineering,Lanzhou Jiaotong University,Lanzhou 730070,China)

机构地区：[1]兰州交通大学电子与信息工程学院,甘肃兰州730070

出　　处：《铁道学报》2024年第12期69-76,共8页Journal of the China Railway Society

基　　金：国家自然科学基金(62462043,61963023);兰州交通大学重点研发项目(ZDYF2304)。

摘　　要：针对铁路信号安全通信RSSP-Ⅱ协议在下一代5G-R无线通信中存在安全性低以及认证效率低的问题,提出一种基于区块链共识增强的高速铁路RSSP安全通信协议。首先,基于区块链的防篡改性和混合椭圆曲线非对称加密机制,设计私钥签名和共识机制相结合的增强认证方案,实现D2D移动终端和地面信号设备的密钥机密性保护,以有效防止消息伪造,抵抗分布式拒绝服务攻击。然后,提出共识算法和签名验证相结合的混合验证方法,验证信号安全设备身份的合法性,并降低共识延迟。最后,采用TAMARIN形式化工具验证所提方案的正确性。结果表明:所提方案较对比方法,具有更高的安全属性和执行效率,并为5G-R下D2D通信的安全性提供了一定的理论和技术支撑。Aiming at the problems of low security and low authentication efficiency of the railway signal security communication protocol RSSP-Ⅱin the next generation 5G-R wireless communication,a high-speed railway RSSP security communication protocol based on blockchain consensus enhancement was proposed.Firstly,based on the tamper resistance of the blockchain and the hybrid elliptic curve asymmetric encryption mechanism,an enhanced authentication scheme combining private key signature and consensus mechanism was designed to achieve key confidentiality protection for D2D mobile terminals and ground signal equipment,which can effectively prevent message forgery and resist distributed denial of service attacks.Then,a hybrid verification method that combines consensus algorithm and signature verification was proposed to verify the legitimacy of the identity of the signal security device and reduce the consensus delay.Finally,the TAMARIN formal tool was used to verify the correctness of the proposed scheme.The results show that the proposed scheme has higher security attributes and execution efficiency compared to the comparative methods.The proposed method provides certain theoretical and technical support for the security of D2D communication under 5G-R.

关 键 词：铁路无线通信 RSSP协议 区块链增强 共识算法 安全认证 D2D通信 

分 类 号：U285.5[交通运输工程—交通信息工程及控制] TP393[交通运输工程—道路与铁道工程]