| The civil navigation messages of Bei Dou third-generation navigation system(BDS-III)are transmitted in an environment without integrity protection measures,facing the threat of spoofing attacks.Based on the structural characteristics and transmission process of the third-generation Beidou civil navigation messages,this paper adopts the idea of cryptographic authentication and uses domestic cryptographic algorithms to propose Beidou civil navigation message information authentication scheme based on the TESLA.This method enables civil users of Beidou to realize the functions of "multi-star" spoofing detection,resisting forwarding spoofing,resisting replay spoofing and reducing key management.The main work includes two parts.First,this paper studies the spoofing model and different types of spoofing of BDS-III.We design a special Message Authentication Code(MAC)and key sequence according to different navigation messages of BDS-III.Three kinds of key-chains were generated using SM3,and the keys were divided into two kinds of alternative schemes,which were applied to standard TESLA and cross TESLA authentication schemes.Secondly,the D1 and D2 navigation message with a fixed format in BDS-III civil navigation message is taken as an example,and the anti-spoofing design is carried out on it.In the design process,SM3 is used to generate the key chain of TESLA,and the SM2 signature algorithm is used to generate the signature of the root key and time information.The simulation test of this scheme is carried out using the equipped experimental platform.Test verification shows that the proposed scheme has a high authentication rate under the premise of ensuring safety,which can greatly reduce the time interval for BDS-III initial authentication.In addition,in terms of algorithm performance,the SM2 signature algorithm adopted in this paper has lower overhead than the international ECDSA algorithm. |
PDF Full Text Request