5G移动边缘计算场景下的快速切换认证方案

张伟成; 卫红权; 刘树新; 普黎明

doi:10.11959/j.issn.2096-109x.2022034

您当前的位置：

首页 >

文章列表页 >

5G移动边缘计算场景下的快速切换认证方案

学术论文 | 更新时间：2024-06-03

- 5G移动边缘计算场景下的快速切换认证方案
- Fast handover authentication scheme in 5G mobile edge computing scenarios
- 网络与信息安全学报 2022年8卷第3期页码：154-168
- 作者机构：
- 作者简介：
  
  [ "张伟成（1990− ），男，山西应县人，信息工程大学硕士生，主要研究方向为5G移动边缘计算安全" ]
  [ "卫红权（1971− ），男，河南唐河人，信息工程大学研究员，主要研究方向为融合网络安全、可重构网络理论与技术" ]
  [ "刘树新（1987− ），男，山东潍坊人，博士，信息工程大学副研究员，主要研究方向为链路预测和通信网络安全" ]
  [ "普黎明（1976− ），男，云南嵩明人，信息工程大学副研究员，主要研究方向为网络体系结构和通信网络安全" ]
- 基金信息：
  
  国家自然科学基金资助项目;The National Natural Science Foundation of China(61803384)
- DOI：10.11959/j.issn.2096-109x.2022034
  中图分类号： TP309
- 网络首发：2022-06，
  
  纸质出版：2022-06-15
- 稿件说明：
移动端阅览
张伟成, 卫红权, 刘树新, 等. 5G移动边缘计算场景下的快速切换认证方案[J]. 网络与信息安全学报, 2022,8(3):154-168.

Weicheng ZHANG, Hongquan WEI, Shuxin LIU, et al. Fast handover authentication scheme in 5G mobile edge computing scenarios[J]. Chinese Journal of Network and Information Security, 2022, 8(3): 154-168.
张伟成, 卫红权, 刘树新, 等. 5G移动边缘计算场景下的快速切换认证方案[J]. 网络与信息安全学报, 2022,8(3):154-168. DOI： 10.11959/j.issn.2096-109x.2022034.

Weicheng ZHANG, Hongquan WEI, Shuxin LIU, et al. Fast handover authentication scheme in 5G mobile edge computing scenarios[J]. Chinese Journal of Network and Information Security, 2022, 8(3): 154-168. DOI： 10.11959/j.issn.2096-109x.2022034.

摘要

5G 万物互联为用户带来极致网络体验的同时也提出了新的挑战，用户的超低时延体验、移动状态下无顿感的获取业务以及安全防护问题备受关注。移动边缘计算能够满足 5G 低时延、大连接、高带宽的严苛要求，作为一种多信任域共存的计算范式，多实体之间、跨信任域之间互联互通频繁，身份认证作为安全防护的第一道关口尤为重要。通过对现有边缘计算范式下的身份认证机制研究，提出了一种通过构建信任域的基于预认证的轻量级快速切换认证方案，不同区域间移动的用户能实现快速安全的切换认证。所提方案将服务和计算由云端下沉到边缘侧，生物指纹技术被用于用户端以抵御终端被盗攻击，不同区域的边缘服务器采用预认证的方式来满足快速切换需求，用户与边缘服务器采用实时协商共享会话密钥的方式建立安全通道，认证方案以异或和哈希运算来保证轻量级。对所提方案从安全性与性能两方面进行评估，其中，安全性从理论设计分析和形式化工具验证两方面进行。采用形式化分析工具AVISPA验证了在存在入侵者的情况下所提方案的安全性，与其他方案相比所提方案更安全。性能主要从认证方案的计算成本和通信成本进行评估，仿真表明，所提方案在通信成本上有较好的优势，计算开销能够满足资源受限的移动终端用户需求。后续需要从两方面对方案进行改进，一是要加强方案可扩展性的改进以确保用户及边缘服务器能随时加入退出。二是要加强方案普适性的改进以满足第三方服务商的接入部署。

Abstract

The 5G internet of things brings the ultimate experience to users

but it also puts forward new challenges.Users’ requirements of ultra-low latency experience

access to business without sense during movement and security guarantee have attracted much attention.Mobile edge computing can meet the strict requirements of 5G with low latency

large connection and high bandwidth.As a computing paradigm with the coexistence of multi-trust domains

multi-entities and cross-trust domains are interconnected frequently.Identity authentication is particularly important for security protection.Through the research on the identity authentication mechanism under the existing edge computing paradigm

a lightweight fast handover authentication scheme based on pre-authentication was proposed.The proposed solution moved services and calculations from the cloud to the edge.Biometric fingerprint technology was used on the client side to defend against terminal theft attacks.Edge servers in different regions used pre-authentication scheme to meet fast switching requirements.The user and the edge server established a secure channel by negotiating a shared session key in real time

and the authentication scheme ensured lightweight operation with XOR and hash operation.The proposed scheme was evaluated from two aspects of security and performance.Theoretical design analysis and formal tool verification were carried out for security evaluation.The formal analysis tool

AVISPA

was used to verify the improved security of the proposed scheme in the presence of intruders.The performance was mainly evaluated from the computing cost and communication cost of the authentication scheme.The simulation results showed that the proposed scheme reduces communication cost

and the computational overhead can meet the needs of mobile terminals with limited resources.As the future work

the scheme will be improved from two aspects: one is to strengthen the scalability to ensure that users and edge servers can join and exit at any time

and the other one is to strengthen the universality of the scheme to meet the access deployment of third-party service providers.

关键词

Keywords

references

5G Infrastructure PPP Association . 5G Vision-The 5G Infrastructure Public Private Partnership:the next generation of communication networks and services [J ] . White Paper,February , 2015 .

HU Y C , PATEL M , SABELLA D , et al . Mobile edge computing—A key technology towards 5G [J ] . ETSI White Paper , 2015 , 11 ( 11 ): 1 - 16 .

PATEL M , NAUGHTON B , CHAN C , et al . Mobile-edge computing introductory technical white paper [J ] . Mobile-edge Computing (MEC) Industry Initiative , 2014 , 29 : 854 - 864 .

QI Y , TIAN L , ZHOU Y , et al . Mobile edge computing-assisted admission control in vehicular networks:the convergence of communication and computation [J ] . IEEE Vehicular Technology Magazine , 2019 , 14 ( 1 ): 37 - 44 .

ZHOU Y , TIAN L , LIU L , et al . Fog computing enabled future mobile communication networks:a convergence of communication and computing [J ] . IEEE Communications Magazine , 2019 , 57 ( 5 ): 20 - 7 .

ZHOU Y , LING L , WANG L , et al . Service aware 6G:An intelligent and open network based on convergence of communication,computing and caching [J ] . Digital Communications and Networks , 2020 , 6 ( 3 ): 253 - 260 .

胡鑫鑫 , 刘彩霞 , 刘树新 , 等 . 移动通信网鉴权认证综述 [J ] . 网络与信息安全学报 , 2018 , 4 ( 12 ): 1 - 15 .

HU X X , LIU C X , LIU S X , et al . Overview of mobile communication network authentication [J ] . Chinese Journal of Network and Information Security , 2018 , 4 ( 12 ): 1 - 15 .

翟靖轩 . 移动云计算中的认证协议研究 [D ] . 徐州:中国矿业大学 , 2019 .

ZHAI J X . Research on authentication protocol in mobile cloud computing [D ] . Xuzhou:China University of Mining and Technology , 2019 .

陈春雨 , 尚文利 , 赵剑明 , 等 . 边缘计算身份认证和隐私保护技术 [J ] . 自动化博览 , 2018 , v.35;No.300 ( S2 ): 96 - 99 .

CHEN C Y , SHANG W L , ZHAO J M , et al . Edge computing identity authentication and privacy protection technology [J ] . Automation Panorama , 2018 , v.35;No.300 ( S2 ): 96 - 99 .

胡荣磊 , 陈雷 , 段晓毅 , 于秉琪 . 一种适用于雾计算的终端节点切换认证协议 [J ] . 电子与信息学报 , 2020 , 42 ( 10 ): 2350 - 2356 .

HU R L , CHEN L , DUAN X Y , et al . A switching authentication protocol of terminal node for fog computing [J ] . Journal of Electronics ＆ Information Technology , 2020 , 42 ( 10 ): 2350 - 2356 .

张佳乐 , 赵彦超 , 陈兵 , 等 . 边缘计算数据安全与隐私保护研究综述 [J ] . 通信学报 , 2018 , 39 ( 3 ): 1 - 21 .

ZHANG J L , ZHAO Y C , CHEN B , et al . Survey on data security and privacy-preserving for the research of edge computing [J ] . Journal on Communications , 2018 , 39 ( 3 ): 1 - 21 .

CHEN C L , CHIANG M L , HSIEH H C , et al . A lightweight mutual authentication with wearable device in location-based mobile edge computing [J ] . Wireless Personal Communications , 2020 , 113 ( 1 ): 575 - 598 .

DHILLON P K , KALRA S . A lightweight biometrics based remote user authentication scheme for IoT services [J ] . Journal of Information Security and Applications , 2017 :S2214212616301442.

HU Y C , PATEL M , SABELLA D , et al . Mobile edge computing—A key technology towards 5G [J ] . ETSI White Paper , 2015 , 11 ( 11 ): 1 - 16 .

胡鑫鑫 . 5G 网络认证协议和非接入层协议安全性研究 [D ] . 战略支援部队信息工程大学 .

HU X X . Research on security of 5G network authentication protocol and non-access stratum protocol [D ] . PLA Strategic Support Force Information Engineering University .

JIA X , HE D , KUMAR N , et al . A provably secure and efficient identity-based anonymous authentication scheme for mobile edge computing [J ] . IEEE Systems Journal , 2019 : 1 - 12 .

LIU H , ZHANG P , PU G , et al . Blockchain empowered cooperative authentication with data traceability in vehicular edge computing [J ] . IEEE Transactions on Vehicular Technology , 2020 , PP ( 99 ): 1 - 1 .

XIAO Y , JIA Y , LIU C , et al . Edge computing security:state of the art and challenges [J ] . Proceedings of the IEEE , 2019 , PP ( 99 ): 1 - 24 .

ZHANG J , CHEN B , ZHAO Y , et al . Data security and privacy-preserving in edge computing paradigm:survey and open issues [J ] . IEEE Access , 2018 , 6 ( 18 ) 209 - 37 .

LI X , CHEN T , CHENG Q , et al . Smart applications in edge computing:overview on authentication and data security [J ] . IEEE Internet of Things Journal , 2020 , PP ( 99 ): 1 - 1 .

TEAM T A . AVISPA v1.1 User manual [EB ] . Information society technologies programme (June 2006)[EB] . 2006 .

CHEVALIER Y , COMPAGNA L , CUELLAR J , et al . A high level protocol specification language for industrial security-sensitive protocols [C ] // Workshop on Specification and Automated Processing of Security Requirements-SAPS'2004 . Austrian Computer Society , 2004 .

GLOUCHE Y , GENET T , HOUSSAY E . SPAN:a security protocol animator for AVISPA [C ] // IRISA , 2008 .

SAILLARD R , GENET T . CAS+ [EB ] .

SHARMA V , YOU I , PALMIERI F , et al . Secure and energy-efficient handover in fog networks using blockchain-based DMM [J ] . IEEE Communications Magazine , 2018 , 56 ( 5 ): 22 - 31 .

RIFA-POUS H , HERRERA-JOANCOMARTÍ J , . Computational and energy costs of cryptographic algorithms on handheld devices [J ] . Future Internet , 2011 , 3 ( 1 ): 31 - 48 .

浏览量

991

下载量

CSCD

文章被引用时，请邮件提醒。

提交

工具集

关联资源

基于隐私集合求交的大模型双向隐私授权

基于PIR增强的可搜索加密方案研究

面向LBS的ADS-B报文定位数据本地化差分隐私保护方法

FL-IoV：基于联邦学习的综合车联网入侵检测方法

基于国密SM2的车联网高效匿名认证协议