Research On Access Authentication Mechanism Of Smart Collaborative Routing System

As a solution for high-speed mobile communication,Smart Collaborative Routing System provides stable network services for high-speed rail networking through multi link cooperative transmission technology.At present,it mainly provides high-speed rail-way network access services,and has the characteristics of multi link heterogeneous net-work collaborative transmission and multi link frequent handover.The existing authenti-cation technology mostly relies on fixed terminal type and network architecture,binding terminal address and port,only authenticate the initial access state,and can not meet the needs of heterogeneous network authentication compatibility and continuous credibility under high-speed environment.Based on the in-depth study of the architecture of Smart Collaborative Routing Sys-tem,this paper explores the bottleneck of the security authentication mechanism,at the same time,it designs and implements a Smart collaborative routing system Access Au-thentication Scheme.The specific work is as follows:First,it introduces the architecture and mechanism of smart collaborative routing system,describes its vulnerable attack model,and then draws out its urgent need for se-curity authentication mechanism;it summarizes the characteristics and deficiencies of existing authentication schemes;it compares a variety of cryptography algorithms,in-cluding encryption algorithms,hash algorithms,and digital signature algorithms,and give the selection process.Second,using the advantages of digital certificates,the initial authentication scheme was designed.Through the definition of access tickets,the mutual authentication of ac-cess routers and border routers was completed,meeting the compatibility requirements of multi-link transport;based on multi-link collaboration,a handover re-authentication scheme was designed to ensure the continued credibility of the identity of the access ter-minal.By using the Merkel Hash Tree structure,a system batch authentication scheme was designed to improve the system's authentication efficiency;The comparison of au-thentication schemes demonstrates the advantages of the scheme in terms of security.Third,based on the attribute value verification method,the interaction mode be-tween entities is defined to meet the requirements for authentication information pro-cessing;and through the multi-threading technology,the authentication initialization module and message processing module of each entity are implemented,and the key cycle is updated and the initial access authentication process is completed;based on the socket approach,communication between entities and modules is realized,and re-authentication management and authentication vector updating and maintenance are completed during link handover.Finally,by setting up the actual environment,the function of the authentication scheme was tested,and it was verified that each entity can correctly construct and process the authentication packet,which satisfies the requirements of the system in terms of se-curity and continuous trust;the authentication overhead of each entity is given.The com-parison with other schemes shows that the scheme of this paper is feasible;the delay of batch authentication is analyzed,and the performance of batch authentication is clarified by comparison with single point authentication.