基于信任评估的卫星物联网终端认证方法

田敏求; 李凤华; 李子孚; 郭超

doi:10.11959/j.issn.2096-109x.2024051

您当前的位置：

首页 >

文章列表页 >

基于信任评估的卫星物联网终端认证方法

学术论文

- 基于信任评估的卫星物联网终端认证方法
- Satellite IoT terminal authentication method based on trust evaluation
- 网络与信息安全学报 2024年10卷第4期页码：37-48
- 作者机构：
  
  1.中国科学院信息工程研究所,北京 100085
  2.中国科学院大学网络空间安全学院,北京 100049
  3.网络空间安全防御重点实验室,北京 100085
  4.北京电子科技学院电子与通信工程系,北京 100070
- 作者简介：
  
  [ "田敏求（1985- ），男，河北保定人，中国科学院信息工程研究所博士生，主要研究方向为卫星物联网的安全认证与密码应用。" ]
  [ "李凤华（1966- ），男，湖北浠水人，博士，中国科学院信息工程研究所研究员、博士生导师，主要研究方向为网络与系统安全、隐私计算、信息保护。" ]
  [ "李子孚（1992- ），女，内蒙古赤峰人，博士，中国科学院信息工程研究所高级工程师、硕士生导师，主要研究方向为网络与系统安全。" ]
  [ "郭超（1987- ），女，江西九江人，博士，北京电子科技学院讲师、硕士生导师，主要研究方向为卫星通信网络安全。" ]
- 基金信息：
  
  国家自然科学基金(U23B2024;62202463)
- DOI：10.11959/j.issn.2096-109x.2024051
  中图分类号： TP393
- 收稿：2024-03-10，
  
  修回：2024-07-18，
  
  纸质出版：2024-08-25
- 稿件说明：
移动端阅览
田敏求, 李凤华, 李子孚, 等. 基于信任评估的卫星物联网终端认证方法[J]. 网络与信息安全学报, 2024, 10(4): 37-48.

Format: TIAN M Q, LI F H, LI Z F, et al. Satellite IoT terminal authentication method based on trust evaluation[J]. Chinese Journal of Network and Information Security, 2024, 10(4): 37-48.
田敏求, 李凤华, 李子孚, 等. 基于信任评估的卫星物联网终端认证方法[J]. 网络与信息安全学报, 2024, 10(4): 37-48. DOI： 10.11959/j.issn.2096-109x.2024051.

Format: TIAN M Q, LI F H, LI Z F, et al. Satellite IoT terminal authentication method based on trust evaluation[J]. Chinese Journal of Network and Information Security, 2024, 10(4): 37-48. DOI： 10.11959/j.issn.2096-109x.2024051.

摘要

卫星物联网利用卫星通信网络、星载及地面多种类型终端设备，能够实现空天地一体化的人、物连接和信息交互，具有空中无界、地面无障的优势，也有大尺度覆盖、链路高度开放、拓扑动态变化、终端资源受限、通信时延长等特点。为了实现卫星物联网资源的安全高效利用，提出了基于信任评估的卫星物联网终端认证方法，通过对终端设备进行信任评估来优化认证策略。针对曾经强认证的终端短时间内再次认证，和经由强认证节点授信两种情形，提出了卫星物联网终端信任评估机制，按照直接信任和间接信任刻画了动态调整的信任度量和评估模型，设计了基于信任评估的卫星物联网接入认证协议，根据设备信任度采用相匹配的认证机制，使高信任度设备的后续认证流程得以简化，实现了在同一认证策略框架下为不同终端设备提供差异化的认证服务。使用非形式化方法和Tamarin形式化工具对协议安全性进行全面分析，通过实验验证协议的有效性，可降低总体认证开销，且可利用信任简化认证流程。

Abstract

Satellite internet of things (satellite IoT) has been utilized to achieve the integration of space-ground

human-thing connection

and information interaction through the satellite communication network and various types of spaceborne and ground terminal devices. It possesses advantages that are boundless in air and unobstructed on ground

as well as characteristics such as large-scale coverage

highly open links

dynamically changing topologies

limited terminal resources

and long communication latency. In order to achieve the safe and efficient utilization of satellite IoT resources

a trust evaluation-based terminal authentication method for satellite IoT was proposed

which could optimize the authentication strategy by evaluating the trust of terminal devices. A trust evaluation mechanism for satellite IoT terminals was proposed for two scenarios: terminals that had recently undergone strong authentication and had been granted credit by strongly authenticated nodes. A dynamically adjusted trust measurement and evaluation model was characterized based on direct trust and indirect trust. Secondly

a trust evaluation-based access authentication protocol for satellite IoT was designed

which adopted a matching authentication mechanism according to the trust degree of the device. This allowed for the simplification of the subsequent authentication process for high-trust devices and provided differential authentication services for different terminal devices under the same authentication strategy framework. The security of the protocol was comprehensively analyzed using non-formal methods and Tamarin formal tools

and the effectiveness of the protocol was verified by experiments. The protocol was shown to be capable of reducing the overall authentication overhead and simplifying the authentication process with trust.

关键词

Keywords

references

AL HOMSSI B , AL-HOURANI A , WANG K , et al . Next generation mega satellite networks for access equality: opportunities, challenges, and performance [J ] . IEEE Communications Magazine , 2022 , 60 ( 4 ): 18 - 24 .

VOULGARIDIS K , LAGKAS T , ANGELOPOULOS C M , et al . IoT and digital circular economy: principles, applications, and challenges [J ] . Computer Networks , 2022 , 219 : 109456 .

CAPEZ G M , HENN S , FRAIRE J A , et al . Sparse satellite constellation design for global and regional direct-to-satellite IoT services [J ] . IEEE Transactions on Aerospace and Electronic Systems , 2022 , 58 ( 5 ): 3786 - 3801 .

CHAUDHRY S A , IRSHAD A , KHAN M A , et al . A lightweight authentication scheme for 6G-IoT enabled maritime transport system [J ] . IEEE Transactions on Intelligent Transportation Systems , 2023 , 24 ( 2 ): 2401 - 2410 .

ALHANDI S A , KAMALUDIN H , ALDUAIS N A M . Trust evaluation model in IoT environment: a comprehensive survey [J ] . IEEE Access , 2023 , 11 : 11165 - 11182 .

XUE K P , MENG W , LI S H , et al . A secure and efficient access and handover authentication protocol for Internet of things in space information networks [J ] . IEEE Internet of Things Journal , 2019 , 6 ( 3 ): 5485 - 5499 .

MA R H , CAO J , FENG D G , et al . LAA: lattice-based access authentication scheme for IoT in space information networks [C ] // Proceedings of the IEEE Internet of Things Journal . Piscataway : IEEE Press , 2020 : 2791 - 2805 .

MENG W , XUE K , XU J , et al . Low-latency authentication against satellite compromising for space information network [C ] // Proceedings of 2018 IEEE 15th International Conference on Mobile Ad Hoc and Sensor Systems (MASS) , 2018 : 237 - 244 .

YANG Q Y , XUE K P , XU J , et al . AnFRA: anonymous and fast roaming authentication for space information network [J ] . IEEE Transactions on Information Forensics and Security , 2019 , 14 ( 2 ): 486 - 497 .

曹进 , 石小平 , 马如慧 , 等 . 融合双层卫星网络的星地和星间AKA协议 [J ] . 网络与信息安全学报 , 2023 , 9 ( 1 ): 18 - 31 .

CAO J , SHI X P , MA R H , et al . Fusion of satellite-ground and inter-satellite AKA protocols for double-layer satellite networks [J ] . Chinese Journal of Network and Information Security , 2023 , 9 ( 1 ): 18 - 31 .

HUYNH T D , JENNINGS N R , SHADBOLT N R . An integrated trust and reputation model for open multi-agent systems [J ] . Autonomous Agents and Multi-Agent Systems , 2006 , 13 ( 2 ): 119 - 154 .

王伟 , 杨本朝 , 吴涛 . 贝叶斯预测下的域间路由信任机制 [J ] . 安徽大学学报(自然科学版) , 2014 , 38 ( 4 ): 33 - 36 .

WANG W , YANG B C , WU T . A trusted inter-domain routing protocol based on Bayesian estimation theory [J ] . Journal of Anhui University (Natural Science Edition) , 2014 , 38 ( 4 ): 33 - 36 .

D’ANGELO G , RAMPONE S , PALMIERI F . Developing a trust model for pervasive computing based on apriori association rules learning and Bayesian classification [J ] . Soft Computing , 2017 , 21 : 6297 - 6315 .

浏览量

下载量

CSCD

文章被引用时，请邮件提醒。

提交

工具集

关联资源

面向5G mMTC的网络切片安全研究

车载自组织网匿名接入认证机制研究综述