Design Of Group Authentication Key Agreement Protocol For Ship Networking

Fishery ship networking is a kind of network system based on the Internet of things technology,which uses ships as network nodes,buoys,onboard instruments,shore stations and other information sources.After data processing and comprehensive utilization of wireless communication technology,it realizes data transmission from ship to shore and ship to ship.According to the number of ships,ship communication can be divided into single-ship communication and multi-ship communication.Single-ship communication refers to the data transmission between the ship and the shore station,and multi-ship communication refers to the key negotiation between the fleet.Due to the group communication system under the environment of ship networking has the characteristics of large scale,open channel,frequent joining or leaving of nodes,how to ensure the communication security between ships and the privacy of ship users in this open environment is facing great challenges.In order to ensure the safe transmission of information between ships in inland navigation,the research on identity authentication of ship networking is very important and the first problem to be solved.Therefore,different authentication protocols are designed for single-ship communication and multi-ship communication.For the single-ship communication between the ship and the shore station in the ship network,a remote user identity authentication protocol based on dynamic ID two-factor is proposed.For multi-ship communication between ships in the fleet,a group key authentication protocol is designed based on bilinear pairing and triple tree structure.The main research contents and conclusions of the paper are as follows:1)This paper analyzes the security requirements(including single-ship and multi-ship group communication)in the current ship networking environment,and proposes a group authentication key agreement protocol for ship networking,including single-ship user identity authentication protocols and multi-ship group authentication key agreement protocols.2)In view of the dynamic ID remote user authentication protocol for a single ship,the scheme of Hsieh and Leu is analyzed,and an improved scheme is proposed.The new scheme is based on cryptography technology(smart card,hash function),and the identity authentication mechanism combines other technologies(time stamp,random number)to authenticate users.As a tool in two-factor authentication,smart cards solve the problems of completely relying on a single static password,easy to leak user information,and poor security.When sending a login request message,a one-way encryption of the user identity is performed using a hash function to ensure the anonymity of the user identity.In the login phase,after inserting the smart card,the user identity and password are combined through the Hash formula to verify the accuracy of the user identity and password at the first time,which solves the problem of slow and wrong password detection.Timestamps and random numbers are dynamic factors that can ensure the freshness of the authentication code in the protocol and can resist replay attacks.Finally,the formal security analysis method of BAN logic was used to prove the security of the scheme.3)For the group authentication key agreement protocol between multiple ships,the scheme of Choi is studied and an improved scheme is proposed.The new scheme uses a bilinear pairing and key tree structure to design a key agreement protocol suitable for dynamic groups.Based on the difficulty of the BDH problem in the bilinear cryptosystem,a session key is constructed to make it difficult to solve and protocol security is achieved.