| With the popularity of the Internet and the development of mobile communication technology,people's demand for instant messaging is increasing.Low earth orbit(LEO)satellite network has the advantages of wide coverage,low power consumption and high mobility,which not only reduces the threshold of satellite communication,but also complements the ground-based network to achieve full coverage of communication network,providing instant and effective communication services for ocean voyages,deep mountain operations and fishermen going to sea.Therefore,the construction of LEO satellite network has become a research hotspot under the background of 5G.However,LEO satellite networks have the characteristics of open channels,dynamic network topology and massive user terminals,which will lead to problems of security,quality of service and overload of ground network control center.This puts forward higher requirements for LEO satellite network entity access authentication.At the same time,if the 3GPP protocol that used in the 3G/4G network is applied in LEO satellite network,due to frequent handover and high satellite-ground link delay,handover delay will be very high,which will affect the communication quality of users.Therefore,fast and secure access and handover is an important factor for LEO satellite network to provide continuous communication network services.Aiming at the above problems,a user random access authentication protocol based on token is proposed,including initial access,reconnection and inter-satellite handover authentication protocol.The security and performance of the protocol are analyzed.Then,a user access authentication service system for LEO satellite network is designed based on the protocol.The system is implemented and tested in wireless network environment,which implements users safe and efficient access LEO satellite network.The main research contents are as follows.1)Aiming at security issue,based on the characteristics of high synchronization of satellite clock and different access scenarios,the initial access authentication protocol,reconnection authentication protocol and inter-satellite handover authentication protocol are designed.The security of the protocol is proved by establishing the attacker model,BAN logic proof and security analysis,which guarantees the security of user information and communication data.2)Aiming at the quality of service,in the initial access authentication protocol,using the predictability of satellite orbit,the authentication vectors generated by the ground network control center are transmitted between satellites,which avoids the consumption of communication delay that satellites obtaining authentication information from the ground network control center again in the process of reconnection and inter-satellite handover,and then improves the authentication efficiency.3)Aiming at the overload problem of ground network control center,authentication and key agreement based on hash function,XOR operation and message authentication code,which reduce the computational cost.At the same time,token is generated by sharing key between the home subscriber server and the ground network control center,which avoids the communication process of the ground network control center obtaining user information from the home subscriber server and the resource consumption of storing massive user information and authentication tables.4)A user access service system for LEO satellite network is designed based on the proposed authentication protocol.The memory structure of LEO satellite is designed with Bloom filter and red-black tree,which reduces the query time of user authentication information and further improves the authentication efficiency.5)The user access service system of LEO satellite network is simulated and implemented in wireless network environment,and the function and performance of the system are tested and analyzed.The test results show that the system can provide secure and efficient user access authentication services. |
PDF Full Text Request