Research On Authentication Technology For Space-earth Integration Network

The space-earth integration network is a heterogeneous network formed by the fusion of various networks between space and earth.It will serve as the key infrastructure for next-generation communications,allowing for massive bandwidth,minimal latency and high-speed data transfer.However,different from the traditional networks,the space-earth integration network has the characteristics of limited resources,dynamic topology,intermittent connectivity,large-scale users and channel exposure,which bring great challenges to the identity authentication of entities in the network.Inefficiency in user authentication,concurrent conflicts in batch authentication and high delay in handover authentication make the existing authentication protocols in traditional networks unable to meet the requirements of the space-earth integration network in terms of security and performance.How to solve the above problems and ensure the entity authentication security has become a challenge.This paper proposes authentication protocols for three typical scenarios: access authentication for the single user,batch authentication for large-scale users and handover authentication between nodes.The main contributions are as follows:1.Considering the limited resources of space-earth integration network and high communication delay,a lightweight certificateless non-interactive authentication and key exchange protocol is proposed.By modeling the two parties involved in authentication as peer entities,the lightweight authentication is proposed based on elliptic curve and bilinear pairing,which not only does not need complex certificate management and maintenance,but also reduces the dependence on third-party.The protocol reduces the average waiting time in user authentication on the basis of ensuring security.2.Considering the scenario of large-scale users concurrent access,a batch authentication protocol based on Schnorr's idea under the certificateless cryptography is proposed.Combined with the challenge-response mechanism and aggregate signature,the protocol realizes the efficient authentication of large-scale users' concurrent access,and optimizes the calculation method for users authenticate satellite.With only one interaction,the protocol realizes the mutual authentication between satellite and multiple users,and exchanges the session key with each user independently,which can significantly reduce the computation and communication load of authentication parties.3.For the scenario where users need to frequently switch access nodes and obtain uninterrupted services,a pre-verification handover authentication scheme based on predictable orbits is proposed,which achieves secure and seamless handover.This scheme uses the predictability of satellite orbits to pre-load the handover certificate of the next satellite to online satellite.And more computing operations are moved forward through the way that the online satellite generates the precertificate and sends it to users in advance,so as to simplify the handover process and ensure the continuity of user sessions.