Research On The Cross-domain End-to-end Security Association Protocol In Space Networks

With the rapid development of space information technology,the security of network com?munication has become a important issue.As the national key construction protect for large network infrastructure,space information networks(SIN)are of great significance to the de-velopment of economy society and ensure the safety and stability of the country.Space information networks are mainly composed of the satellite systems,which include the aircrafts carrying out different tasks and the related ground network information system-s.In the network architecture,there are many different security domains.Based on the secure requirements,there are different security mechanisms used in the security domains.There-fore,it is hard for different network endpoints to communicate each other directly across the different domains.In order to ensure the communication security,it is necessary to shield the differences between the various security domains in the process of information transmis-sion.Besides,space information networks are facing serious security threats.The methods of realizing the communication between the different network endpoints have become hot top-ic.This paper designs a cross domain end-to-end security association protocol on the basis of the characteristics of SIN(In the following,the protocol is referred to as seccurity association protocol).In this paper,the main research results are as follows:1.Research and analysis of the architecture of SIN.Firstly,for a given system model and the application scenarios,this paper studies the ar-chitecture of SIN.And on this basis,this paper analyzes the characteristics and the potential security threats of SIN.Furthermore,the targets of security protocol are put forword;2.Based on the characteristics of SIN,this paper designs a security association protocol.For the potential threats to the security of SIN,this paper designs a cross domain end-to-end security association protocol.In this protocol,both sides of the session only need to conduct an interactive key agreement work,then they are able to establish a non-interactive security association in multiple cycles.In addition,the protocol can fully satisfy the needs of SIN.3.Experiments and analysis of the security association protocol.In the process of the experiments,this paper carries on the programming to the related algo-rithm of the protocol.Based on the experimental data,this paper analyzes the availability of the protocol.4.Security analysis of the protocol.Based on the security association protocol,this paper analyzes the security of the protocol by simulating the common attacks.Thus,the availability of the protocol is further verified.