1. 北京邮电大学网络空间安全学院,北京 100876
2. 可信分布式计算与服务教育部重点实验室,北京 100876
3. 海军参谋部航行保证局,北京100847
4. 军事科学研究院系统工程院,北京 100091
[ "卢波(1988-),男,山西晋中人,北京邮电大学博士生,主要研究方向为应用安全。" ]
[ "刘赟(1986-),男,北京人,硕士,海军参谋部航行保证局工程师,主要研究方向为无线电导航和惯性导航。" ]
[ "张洁(1981-),女,军事科学研究院系统工程院教授,主要研究方向为信息安全。" ]
[ "陆月明(1969-),男,江苏吴县人,北京邮电大学教授、博士生导师,主要研究方向为云计算、搜索引擎、智能光网络、大数据存储与计算、智能家居体系与标准、互联网安全。" ]
网络首发:2018-11,
纸质出版:2018-11-15
移动端阅览
卢波, 刘赟, 张洁, 等. 应用于网间互联控制协议的轻量级认证方法[J]. 网络与信息安全学报, 2018,4(11):40-48.
Bo LU, Yun LIU, Jie ZHANG, et al. Lightweight authentication method for network interconnection control protocols[J]. Chinese Journal of Network and Information Security, 2018, 4(11): 40-48.
卢波, 刘赟, 张洁, 等. 应用于网间互联控制协议的轻量级认证方法[J]. 网络与信息安全学报, 2018,4(11):40-48. DOI: 10.11959/j.issn.2096-109x.2018090.
Bo LU, Yun LIU, Jie ZHANG, et al. Lightweight authentication method for network interconnection control protocols[J]. Chinese Journal of Network and Information Security, 2018, 4(11): 40-48. DOI: 10.11959/j.issn.2096-109x.2018090.
针对天地一体化网络对网间互联安全控制的需求以及有限资源不能采用高计算复杂度认证方法的问题,提出了一种应用于网间互联控制协议的轻量级认证方法,在公钥加解密算法和签名算法中,采用了随机填充的思想,通过有限资源的计算,在网间互联控制协议中实现实体认证,采用形式化分析工具 Scyther 对协议进行安全性分析,并通过仿真实验和其他安全通信协议做性能比较,结果表明该方法可以满足网络有限资源计算的要求,且保证了安全性。
As network interconnection controls are required for the space-earth integrated network and the limited resources are not suitable for high computing complexity degree authentication methods
a lightweight authentication method for network interconnection control protocols is proposed.Through the calculation of limited resources
using the idea of random fill
It design and implement public key encryption and signature algorithm which is components of the networks interconnection control authentication protocol.Formal analysis tool Scyther is used to analyze the security of the protocol.Comparing with other secure communication protocols
the method can meet the requirements of resource-constrained networks and ensure the safety.
吕涛 . 卫星通信加密机及其接口 [J ] . 通信保密 , 1989 ( 2 ): 7 - 11 .
LV T . Satellite communication encryption machine and its interface [J ] . Communications Security , 1989 ( 2 ): 7 - 11 .
向红权 . 一种卫星通信链路的加密技术实现研究 [D ] . 成都:电子科技大学 , 2008 .
XIANG H Q . Research on encryption technology implementation of a satellite communication link [D ] . Chengdu:University of Electronic Science and Technology , 2008 .
邹宇聪 . 一种应用于微小卫星的通信数据加密技术 [J ] . 信息通信 , 2016 ,( 10 ): 223 - 24 .
ZOU Y C . A communication data encryption technology applied to micro-satellite [J ] . Information Communication , 2016 ,( 10 ): 223 - 24 .
郑建宏 , 周亮 . 椭圆曲线加密算法在卫星通信中的应用 [J ] . 信息通信 , 2016 ( 2 ): 209 - 210 .
ZHENG J H , ZHOU L . Application of elliptic curve encryption algorithm in satellite communication [J ] . Information Communication , 2016 ( 2 ): 209 - 210 .
王宝成 . 基于DVB-RCS卫星通信系统的通信加密技术研究 [D ] . 北京:北京邮电大学 , 2012 .
WANG B C . Research on communication encryption technology based on dvb-rcs satellite communication system [D ] . Beijing:Beijing University of Posts and Telecommunications , 2012 .
WANG B C , TANG C M , YANG Y X . The construction of GLV-friendly elliptic curves with fast point multiplication [J ] . International Journal of Advancements in Computing Technology , 2012 , 4 ( 4 ): 268 - 75 .
陈铁明 , 葛亮 , 蔡家楣 , 等 . TinyTCSec:一种新的轻量级无线传感器网络链路加密协议 [J ] . 传感技术学报 , 2011 , 24 ( 2 ): 275 - 82 .
CHEN T M , GE L , JIA M , MA S L . TinyTCSec:a new lightweight wireless sensor network link encryption protocol [J ] . Journal of Sensor Technology , 2011 , 24 ( 2 ): 275 - 82 .
马韶璞 . VSAT网络认证与数据加密的研究 [D ] . 天津:中国民航大学 , 2015 .
MA S P . Research on VSAT network authentication and data encryption [M ] . Tianjin : Civil Aviation University of China , 2015 .
MA L . WNN-based prediction of security situation awareness for the civil aviation network [J ] . Journal of Intelligent Systems , 2015 , 24 ( 1 ): 55 - 67 .
高利军 . 无线射频识别系统安全认证协议研究 [D ] . 天津:天津大学 , 2015 .
GAO L J . Research on security authentication protocol of radio frequency identification system [D ] . Tianjin:Tianjin University , 2015 .
汪洋 . 物联网轻量级认证和加密技术研究 [D ] . 南京:南京邮电大学 , 2017 .
WANG Y . Research on lightweight authentication and encryption technology of Internet of things [D ] . Nanjing:Nanjing University of Posts and Telecommunications , 2017 .
吴伟民 , 张晶晶 , 彭家进 , 等 . 基于混沌加密的轻量级 RFID 所有权转移协议 [J ] . 计算机工程与应用 , 2018 , 54 ( 9 ): 62 - 66 .
WU W M , ZHANG J J , PENG J C , et al . Lightweight RFID ownership transfer protocol based on chaos encryption [J ] . Computer Engineering and Application , 2018 , 54 ( 9 ): 62 - 66 .
PANDA M , NAG A . Plain text encryption using AES,DES and SALSA20 by java based bouncy castle API on Windows and linux [C ] // Second International Conference on Advances in Computing and Communication Engineering . 2015 : 541 - 548 .
SIVASANKARI M N , SUJATHA S . Performance metric analysis for mobile encryption algorithm using bouncy castle toolkit [C ] // International Conference on Emerging Trends in Electrical and Computer Technology . 2011 : 1097 - 1101 .
DAN B , . Simplified OAEP for the RSA and rabin functions [C ] // Advances in Cryptology –CRYPTO . 2001 : 275 - 91 .
CREMERS C , MAUW S . Operational semantics and verification of security protocols [M ] // Information Security and Cryptography . Berlin : Springer , 2012 .
StatVerif . Verification of stateful processes [C ] // IEEE 24th Computer Security Foundations Symposium . 2011 : 33 - 47 .
ZHANG F , ZHAO Y W , MA D F , et al . Formal verification of behavioral AADL models by stateful timed CSP [J ] . IEEE Access , 2017 , 2 : 27421 - 27438 .
ZHAO Y , ZHANG P F , WANG Y K , et al . Troubleshooting data plane with rule verification in software-defined networks [J ] . IEEE Transactions on Network and Service Management . 2017 1.
YANG Y F , HUANG X L , CHENG S , CHEN S Y , et al . A method of network verification with stateful header space analysis [C ] // IEEE 22nd International Conference on Parallel and Distributed Systems (ICPADS) . 2016 : 232 - 238 .
NARAYAN S , ISHRAR S , KUMAR A , et al . Performance analysis of 4 to 6 and 6 to 4 transition mechanisms over point to point and IPSec VPN protocols [C ] // Thirteenth International Conference on Wireless and Optical Communications Networks (WOCN) . 2016 : 1 - 7 .
PETERSIDE G B , ZAVARSKY P , BUTAKO S . Automated security configuration checklist for a Cisco IPsec VPN router using SCAP 1.2 [C ] // 10th International Conference for Internet Technology and Secured Transactions (ICITST) . 2015 : 355 - 360 .
HOSSAIN M , HASAN R . Boot-IoT:a privacy-aware authentication scheme for secure bootstrapping of IoT Nodes [C ] // IEEE International Congress on Internet of Things (ICIOT) . 2017 .
康镇麒 , 吕克伟 . RSA/Rabin-Paillier 陷门函数的比特安全性 [J ] . 密码学报 , 2014 , 1 ( 3 ): 244 - 254 .
KANG Z Q , LV K W . On bit security of RSA/Rabin-paillier trapdoor functions [J ] . Journal of Cryptologic Research , 2014 , 2 : 244 - 254 .
0
浏览量
1157
下载量
0
CSCD
关联资源
相关文章
相关作者
相关机构
京公网安备11010802024621