Design And Implementation Of Secure Access Authentication Scheme For Space-ground Integration Network

The Space-ground integration network has the characteristics such as highly dynamic change of topology,wide variety of access users,limited resources,and high exposure and vulnerability of channels,so that as the first line of defense for network security,the access authentication scheme becomes extremely important.Most of the current secure access authentication schemes are based on the public key system and adopt a centralized authentication method to perform unified authentication through the network ground control center.However,due to the large delay of the Space-ground integration network,the intermittent connection of channels and the highly dynamic change of topology,users frequently handover access,so this centralized authentication will bring a lot of extra calculation and storage overhead,affecting the quality of user access service.In view of the above problems,this thesis takes lightweight computing and anonymous authentication technology as the starting point,designing a secure access authentication scheme and handover authentication mechanism to ensure the security of access authentication and reduce authentication overhead.The main work is as follows:Firstly,in order to ensure the security of access authentication while reducing communication overhead,this thesis proposes a lightweight anonymous access authentication scheme.First of all,XOR and hash operations are introduced to anonymously process the user's true identity.Then,a multi-access authentication scheme is designed to transfer the authentication function to the LEO satellite,no third party involved in the authentication process to reduce the number of authentication interactions.At the same time,a fast handover authentication mechanism based on the security context transfer method is proposed.The inter-stallite authentication and the hash function are used to construct the switching session key,which reduces the amount of calculation and avoids the re-authentication problem caused by frequent user handover.Then,a performance analysis was performed.Finally,through BAN logic proof and security feature analysis,it is proved that the lightweight anonymous access authentication scheme can resist attacks such as man-in-the-middle,replay,and denial of service.Secondly,according to the lightweight access authentication scheme proposed in this thesis,the access authentication system of the Space-ground integration network is designed.The system is based on the EXata simulation software to deploy and build each node,the thesis designs the function modules of user terminal node,trusted network ground control center node and satellite terminal node,and implements the function modules,and then applies EXata's internal Connection Manager function to each system node module carries on the connection management,and implements the lightweight access authentication prototype test system of the Space-ground integration network.Thirdly,based on the built access authentication prototype system of the Space-ground integration network,the lightweight anonymous access authentication scheme designed by the thesis is tested from three aspects: authentication success rate,authentication delay and authentication overhead.The test results show that the scheme can reduce the communication and computational overhead while ensuring the security of access authentication,and obviously reduce the authentication delay.