Research On Group Key Management Schemes In Space Information Network

Both the military and civil needs drive the development of space communications towards integration and networking.The research on the security of space information networks(SINET)is an important part of the research on integrated networks of the world.However,the open nature of SINET makes it more vulnerable to security threats such as information theft,tampering,denial of service attacks,and replay attacks than traditional terrestrial networks.To build a secure SINET environment,security services such as confidentiality,integrity,and authentication need to be provided,and these security service requirements almost all need to be provided by a key management policy.However,due to the high dynamics,heterogeneity,temporality,and sparseness of SINET itself,some mature key management solutions cannot be directly applied to SINET.Therefore,we must fully consider SINET's topology and communication methods.The characteristics of the selected security architecture and management model,in addition to large-scale SINET node members to join and leave the network to the key update has brought severe challenges.Therefore,according to the characteristics of SINET,designing and applying a secure and efficient group key management scheme is an extremely important issue in the study of SINET group key management.The contributions and innovations of this dissertation are mainly embodied in the following four parts:1.According to the requirement analysis of SINET and the research on the current situation and trend of domestic and foreign development,the spatial backbone structure model of SINET space layer,adjacent space layer and ground layer is determined,the main features and security threats facing SINET are analyzed,and the security requirements and evaluation standards of key management system are given for the later research.To lay the foundation.2.After studying the topology of SINET and analyzing and comparing the common centralized?grouped?distributed and other types of group key management methods and typical schemes,it is proposed that the group key management model which combines centralized and distributed groups is more suitable for SINET stratified grouping and large-scale characteristics;and the model is given in this model.Detailed description and security performance analysis of typical structure LKH scheme.3.Limited by the satellite resources,the efficiency of the SINET key management scheme becomes the bottleneck.The existing LKH improvement scheme is described and analyzed.The problem is that the number of keys that the user needs to maintain is increasing with the increment of the user's quantity,and the number of encrypted times in the key update process leads to the update efficiency.The rate is low;a SINET group key management scheme based on B-LKH is proposed,which makes the key tree node increasing horizontally,limiting the height of the tree and reducing the number of keys to be stored.Under the premise of security,it effectively reduces the storage and transmission of the key,and improves the efficiency of the group key update,and is suitable for the group large rules in the SINET.Dynamic change characteristics of the model.4.Based on the current situation that most key management schemes are excessively expensive,the solution is more concentrated on the satellite network layer,the private key updating is rarely considered,and the scheme is based on public key certificates,a comprehensive and safe group key is considered in SINET.Management plan.A private key update mechanism suitable for SINET was proposed;a batch key update scheme was proposed for the problem that the single-key key update of the ground-level node was large,and a solution was proposed according to the real-time online status of the group manager request.