Design And Simulation Implementation Of Identity Authentication Scheme For Space-ground Integrated Network Based On IPv6

The Space-Ground Integrated Network achieves interconnection and efficient collaboration of entities within the network by constructing satellite-ground and intersatellite links.However,in the Space-Ground Integrated Network,all information is transmitted through highly open wireless links,which leads to the normal communication between entities being susceptible to interference and the existence of security threats such as entity impersonation.Therefore,a safe and effective identity authentication scheme is needed to ensure the secure communication of entities in the network from the source.This thesis researches an identity authentication scheme base on IPv6 for SpaceGround Integrated Network to achieve two-way authentication between any two entities in the network.1.Aiming at how to ensure the security of the authentication scheme under the authentication mechanism that removes the participation of the third party in the authentication process.This thesis uses an identity-based cryptography system to design a secure and anonymous Space-Ground Integrated Network identity authentication scheme.In this thesis,under the random prediction model,the scheme is proved to be IND-IBSC-CCA2 and EUF-IBSC-CMA through the provable security theory,and indicate that the scheme has high security strength.At the same time,the entity can negotiate and calculate the session key based on the interactive information during authentication to provide the security of the subsequent session in the authentication scheme.Aiming at how to ensure that the complexity of the authentication scheme is not high and the integration with the IPv6 protocol,in the offline registration phase of the entity,the identity of the entity in the Space-Ground Integrated Network is embedded in the last 64-bit interface identifier of the IPv6 address,so that the entity has Selfverification ability.In addition,the authentication information is encapsulated in the IPv6 extension header,so that the entity only needs one round of authentication information interaction to achieve mutual authentication during authentication,and improve the efficiency of the authentication scheme.2.According to the authentication scheme which designed in this thesis,the SpaceGround Integrated Network authentication system is designed based on the simulation platform EXata and STK.Firstly,design STK and EXata co-simulation module,trusted offline registration center module,external entity module and EXata scheduling module.And then,the authentication entity in the system is mapped to the external real physical device for hardware-in-the-loop simulation through the design of the hardware-in-theloop external interface.3.In order to verify the performance of the identity authentication scheme designed in this thesis,Firstly,using external real physical equipment and switches to deploy the simulation platform required for testing.Then use STK and EXata to build a SpaceGround Integrated Network identity authentication scenarios.Finally,perform a performance test on the designed identity authentication scheme,and make a security comparison with the existing scheme.The final results show that the authentication delay,and authentication overhead of the scheme are significantly reduced compared with the existing schemes,and it can meet many security features such as forward security and ciphertext anonymity.