Security analysis of the RSSP-II protocol and a novel security enhancement approach

FENG Tao; TIE Xiaoping; WU Yi; SHI Jianming

doi:10.11959/j.issn.2096-109x.2025038

您当前的位置：

首页 >

文章列表页 >

Security analysis of the RSSP-II protocol and a novel security enhancement approach

Papers | 更新时间：2025-06-30

- Security analysis of the RSSP-II protocol and a novel security enhancement approach
- Chinese Journal of Network and Information Security Vol. 11, Issue 3, Pages: 45-66(2025)
- 作者机构：
  
  兰州理工大学计算机与通信学院，甘肃兰州 730000
- 作者简介：
- 基金信息：
  
  The National Natural Science Foundation of China(61762060);Key Research and Development Projects of Gansu Province(23YFGA0060);Gansu Province Excellent Doctoral Student Foundation(23JRRA837)
- DOI：10.11959/j.issn.2096-109x.2025038
  CLC： TP393
- Received：15 January 2025，
  
  Revised：2025-05-26，
  
  Published：25 June 2025
- 稿件说明：
移动端阅览
冯涛, 铁小平, 吴毅, 等. RSSP-II的安全分析及安全增强新方案[J]. 网络与信息安全学报, 2025, 11(3): 45-66.

Format: FENG T, TIE X P, WU Y, et al. Security analysis of the RSSP-II protocol and a novel security enhancement approach[J]. Chinese Journal of Network and Information Security, 2025, 11(3): 45-66.
冯涛, 铁小平, 吴毅, 等. RSSP-II的安全分析及安全增强新方案[J]. 网络与信息安全学报, 2025, 11(3): 45-66. DOI： 10.11959/j.issn.2096-109x.2025038.

Format: FENG T, TIE X P, WU Y, et al. Security analysis of the RSSP-II protocol and a novel security enhancement approach[J]. Chinese Journal of Network and Information Security, 2025, 11(3): 45-66. DOI： 10.11959/j.issn.2096-109x.2025038.

摘要

铁路信号安全协议‐II（railway signal safety protocol-Ⅱ

RSSP-II）是我国列车控制系统CTCS-3的核心安全通信协议，在保障列车通信安全性与可靠性方面发挥着关键作用。然而，现有研究表明，RSSP-II的消息鉴定安全层存在密钥恢复与伪造等安全漏洞，可能危及列车控制系统的稳定运行。针对上述安全问题，使用着色Petri网（colored Petri nets

CPN）形式化建模方法对RSSP-II进行了分析，验证了RSSP-II中存在安全漏洞，并提出了一种改进协议EN-RSSP（enhanced railway signal safety protocol）。该改进协议主要包含3个方面的增强措施。首先，通过可信第三方在安全信道中动态构建通信双方设备的临时密钥对；其次，基于椭圆曲线双线性对的离散对数困难特性，结合哈希函数实现会话密钥协商；最后，采用由会话密钥和通信双方设备的预共享密钥构成的双密钥加密体系对消息进行加密传输。此外，还在信息交互过程中引入了时间戳和CMAC（cipher-based message authentication code）消息认证码，以确保通信双方消息的保密性和完整性。通过CPN形式化分析工具对EN-RSSP（enhance-RSSP）和RSSP-II进行安全评估，结果表明，改进后的协议不仅能有效抵御密钥恢复与伪造攻击，还可防范重放攻击，显著提升了系统的安全性。

Abstract

The railway signal safety protocol-Ⅱ (RSSP-Ⅱ)

as the core security communication protocol of China’s train control system (CTCS-3)

played a crucial role in ensuring the security and reliability of train communication. However

existing research revealed that RSSP-Ⅱ’s message authentication security layer (MASL) had security vulnerabilities like key recovery and forgery

which might endanger the train control system’s stable operation. To address these security issues

the formal modeling method of colored Petri nets (CPN) was employed to analyze RSSP-Ⅱ

and the existence of security vulnerabilities in it was verified. Consequently

an improved protocol

EN - RSSP (enhanced railway signal safety protocol)

was proposed. The improvement primarily comprised three aspects. First

a temporary key pair for the communication devices of both parties was dynamically constructed through a trusted third party in a secure channel. Next

session key negotiation was achieved based on the difficulty of the discrete logarithm problem in elliptic curve bilinear pairing combined with a hash function. Finally

a dual-key encryption system made up of the session key and the pre-shared key of the communication devices of both parties was adopted to encrypt and transmit messages. Moreover

timestamps and CMAC (cipher-based message authentication code) were incorporated into the information exchange process to ensure the confidentiality and integrity of messages between devices. Security assessment of EN-RSSP and RSSP-Ⅱ was conducted using the CPN formal analysis tool. The results show that the improved protocol could not only effectively resist key recovery and forgery attacks

but also prevent replay attacks

thereby significantly enhancing the system’s security.

关键词

Keywords

references

LIU Y H , ZHAO H . Reliability analysis of CTCS-3 train operation control systems via binary decision diagrams method [C ] // Proceedings of the 2018 IEEE International Conference on Information and Automation (ICIA) . Piscataway : IEEE Press , 2018 : 728 - 733 .

XU W . High-speed railway signal system information security analysis and countermeasures [C ] // Proceedings of the 2017 Chinese Automation Congress (CAC) . Piscataway : IEEE Press , 2017 : 4862 - 4866 .

李敏 . 基于铁路RSSP-2安全通信协议的应用研究 [D ] . 北京：北京交通大学 , 2021 .

LI M . Application research of railway RSSP-2 secure communication protocol [D ] . Beijing : Beijing Jiaotong University , 2021 .

LIAN H Z , MA L C , CAO Y . Improvement of key management mechanism for RSSP-II and its formal modeling and verification [C ] // Proceedings of the 4th International Conference on Electrical and Information Technologies for Rail Transportation (EITRT) 2019 . Berlin : Springer , 2020 : 1 - 10 .

张凯 , 伍忠东 , 刘菲菲 . 铁路信号安全协议中消息认证码算法的研究 [J ] . 铁道标准设计 , 2020 , 64 ( 5 ): 181 - 189 .

ZHANG K , WU Z D , LIU F F . Research on message authentication code algorithm in railway signal safety protocol [J ] . Railway Standard Design , 2020 , 64 ( 5 ): 181 - 189 .

代新月 . 基于认证加密机制的列控信号安全通信协议研究 [D ] . 四川 : 西南交通大学 , 2019 .

DAI X Y . Research on signaling control signal safety communication protocol based on authentication encryption mechanism [D ] . Sichuan : Xinan Jiaotong University , 2019 .

WU P W , WU Z D , LI L Y . Research on MAC verification code of railway signal security communication protocol [J ] . Journal of Physics: Conference Series , 2021 , 1757 ( 1 ): 012166 .

徐倩 , 林俊亭 . RSSP-Ⅱ协议消息鉴定层的形式化描述及验证 [J ] . 计算机应用与软件 , 2023 , 40 ( 6 ): 77 - 82, 180 .

XU Q , LIN J T . Formal description and verification of message authenticate safety layer in RSSP-II [J ] . Computer Applications and Software , 2023 , 40 ( 6 ): 77 - 82, 180 .

王海龙 . RSSP-Ⅱ安全通信协议在RBC/CBI接口中的特殊点 [J ] . 铁路通信信号工程技术 , 2010 , 7 ( 6 ): 24 - 26 .

WANG H L . Special cases of RSSP-Ⅱ safety communication protocol for RBC/CBI interface [J ] . Railway Signalling & Communication Engineering , 2010 , 7 ( 6 ): 24 - 26 .

刘国靖 , 王静 , 杨晓峰 . RSSP-Ⅱ安全通信协议软件自动测试研究 [J ] . 中国新通信 , 2021 , 23 ( 9 ): 17 - 18 .

LIU G J , WANG J , YANG X F . Research on automatic testing of RSSP-Ⅱ security communication protocol software [J ] . China New Telecommunications , 2021 , 23 ( 9 ): 17 - 18 .

乐超 , 徐中伟 , 陈邦兴 , 等 . 基于RSSP-Ⅱ安全通信协议的TSRS-CTC测试接口设计与实现 [J ] . 机电一体化 , 2016 , 22 ( 12 ): 48 - 54 .

LE C , XU Z W , CHEN B X , et al . Design and implementation of TSRS-CTC test interface based on RSSP-Ⅱ secure communication protocol [J ] . Mechatronics , 2016 , 22 ( 12 ): 48 - 54 .

刘振玉 , 任军 . RSSP-II安全通信协议软件的自动测试设计及实现 [J ] . 铁路通信信号工程技术 , 2015 , 12 ( 6 ): 44 - 47 .

LIU Z Y , REN J . Automatic testing design and implementation of RSSP-II software [J ] . Railway Signalling & Communication Engineering , 2015 , 12 ( 6 ): 44 - 47 .

左林 , 刘贞 , 王一民 . SM4分组密码算法在RSSP-Ⅱ铁路信号安全通信协议中的应用 [J ] . 铁路通信信号工程技术 , 2020 , 17 ( 8 ): 24 - 27 .

ZUO L , LIU Z , WANG Y M . Applications of SM4 block cipher algorithm in RSSP-Ⅱ railway signal safety communication protocol [J ] . Railway Signalling & Communication Engineering , 2020 , 17 ( 8 ): 24 - 27 .

张淼 , 耿宏亮 . 铁路信号安全通信协议中消息验证码算法的安全性分析和改进 [J ] . 铁路通信信号工程技术 , 2014 , 11 ( 6 ): 4 - 7, 17 .

ZHANG M , GENG H L . Security analysis and improvement of MAC algorithm in railway signal safety communication protocol [J ] . Railway Signalling & Communication Engineering , 2014 , 11 ( 6 ): 4 - 7, 17 .

郭伟 , 闫连山 , 王小敏 , 等 . RSSP-Ⅱ铁路信号安全通信协议的安全性分析 [J ] . 铁道学报 , 2016 , 38 ( 8 ): 50 - 56 .

GUO W ， YAN L S ， WANG X M , et al . Security analysis of railway signal safety communication protocol Ⅱ [J ] . Journal of the China Railway Society , 2016 , 38 ( 8 ): 50 - 56 .

张元玲 , 徐中伟 , 万勇兵 , 等 . 铁路信号安全通信协议中的MAC改进算法 [J ] . 计算机工程 , 2012 , 38 ( 3 ): 246 - 248 .

ZHANG Y L ， XU Z W ， WAN Y B ， et al . Improved MAC algorithmin railway signal safety communication protocol [J ] . Computer Engineering , 2012 , 38 ( 3 ): 246 - 248 .

LIANG Z D , HEI X H , WANG Y C , et al . Analysis and protection of DDoS attack based on RSSP-II protocol [C ] // Proceedings of the 2018 International Conference on Networking and Network Applications (NaNA) . Piscataway : IEEE Press , 2018 : 117 - 120 .

HEI X H , GAO W , WANG Y C , et al . Railway key exchange scheme for improving communication efficiency of RSSP-II protocol [C ] // Proceedings of the 2019 IEEE Globecom Workshops (GC Wkshps) . Piscataway : IEEE Press , 2019 : 1 - 6 .

XU M H , ZHAO H B . Simulation and verification of RSSP-II safety communication protocol [C ] // Proceedings of the 2012 Second International Conference on Business Computing and Global Informatization . Piscataway : IEEE Press , 2012 : 731 - 734 .

和晟姣 . RSSP-2协议安全性建模及铁路信号系统网络安全性分析 [D ] . 北京 : 北京交通大学 , 2016 .

HE S J . Security modeling of the RSSP-2 protocol and network security analysis of railway signal systems [D ] . Beijing : Beijing Jiaotong University , 2016 .

SANTOS F A , RODRÍGUEZ R J , FEITOSA E L . Automated broken object-level authorization attack detection in REST APIs through OpenAPI to colored Petri nets transformation [J ] . International Journal of Information Security , 2025 , 24 ( 2 ): 83 .

BHURKE A U , KAZI F . Methods of formal analysis for ICS protocols and HART - IP CPN modelling [C ] // Proceedings of the 2021 Asian Conference on Innovation in Technology (ASIANCON) . Piscataway : IEEE Press , 2021 : 1 - 7 .

LAGES D , BORBA E , TAVARES E , et al . A CPN-based model for assessing energy consumption of IoT networks [J ] . The Journal of Supercomputing , 2023 , 79 ( 12 ): 12978 - 13000 .

ZHANG J L , MIAO X H . Application of colored Petri nets in security protocol analysis [C ] // Proceedings of the International Conference on Algorithms Software Engineering and Network Security . New York : ACM , 2024 : 676 - 682 .

ZROUG S , KAHLOUL L , BENHARZALLAH S , et al . A hierarchical formal method for performance evaluation of WSNs protocol [J ] . Computing , 2021 , 103 ( 6 ): 1183 - 1208 .

BENJBARA C , HABBANI A , MOUCHFIQ N . New multipath OLSR protocol version for heterogeneous Ad Hoc networks [J ] . Journal of Sensor and Actuator Networks , 2022 , 11 ( 1 ): 3 .

郑路 , 冯涛 , 苏春华 . 基于CPN的车载网络无证书匿名认证和密钥协商方案研究 [J ] . 通信学报 , 2024 , 45 ( 6 ): 101 - 116 .

ZHENG L , FENG T , SU C H . Research on certificateless anonymous authentication and key agreement scheme of vehicle network based on CPN [J ] . Journal on Communications , 2024 , 45 ( 6 ): 101 - 116 .

龚翔 , 冯涛 , 杜谨泽 . 基于CPN的安全协议形式化建模及安全分析方法 [J ] . 通信学报 , 2021 , 42 ( 9 ): 240 - 253 .

GONG X , FENG T , DU J Z . Formal modeling and security analysis method of security protocol based on CPN [J ] . Journal on Communications , 2021 , 42 ( 9 ): 240 - 253 .

ZHENG L , FENG T , XIE Z L , et al . BARM: blockchain-assisted anonymous authentication and reputation management for mobile crowdsensing in internet of vehicles [J ] . IEEE Internet of Things Journal , 2025 , ( 99 ): 1 .

HEIDARI A , ALI JABRAEIL J M , NAVIMIPOUR N J . An innovative performance assessment method for increasing the efficiency of AODV routing protocol in VANETs through colored timed Petri nets [J ] . Concurrency and Computation: Practice and Experience , 2025 , 37 ( 3 ): e8349 .

ALI N , PUNNEKKAT S , RAUF A . Modeling and safety analysis for collaborative safety-critical systems using hierarchical colored Petri nets [J ] . Journal of Systems and Software , 2024 , 210 : 111958 .

WANG D , CAO Y , LAM K Y , et al . An accountable GAKA protocol with changeable thresholds and verifiable shares in UAVs-assisted IoVs for emergency rescue [J ] . IEEE Transactions on Intelligent Transportation Systems , 2025 , 26 ( 4 ): 5522 - 5537 .

SMART N P . Identity-based authenticated key agreement protocol based on Weil pairing [J ] . Electronics Letters , 2002 , 38 ( 13 ): 630 - 632 .

陈永 , 刘雯 , 詹芝贤 . 基于混合密钥增强的LTE-R车地认证密钥协商方案 [J ] . 铁道学报 , 2023 , 45 ( 6 ): 69 - 79 .

CHEN Y , LIU W , ZHAN Z X . A train-to-ground authentication key agreement enhanced scheme based on hybrid secrurity key for LTE-R [J ] . Journal of the China Railway Society , 2023 , 45 ( 6 ): 69 - 79 .

Views

下载量

CSCD

Alert me when the article has been cited

提交

Tools

Publicity Resources

Hierarchical multi-device authentication and key agreement protocol for industrial IoT

Collaborative security assessment of cloud-edge-device distributed systems based on order parameters

Android complex information flow analysis method based on communicating sequential process

Related Author

WU Yi

FENG Tao

LIU Chunyan

SU Chunhua

FAN Qigang

JIANG Zhongyuan

LI Xinghua

MA Jianfeng

Related Institution

School of Computer and Communication, Lanzhou University of Technology

School of Economics and Management, Lanzhou University of Technology

Division of Computer Science, University of Aizu

School of Cyber Engineering, Xidian University

Information Engineering University

⁰