| The railway wireless communication system is the transmission carrier of train control information,it is an important infrastructure to ensure the safety of train operation,and is a core equipment for building an information-based and intelligent railway.The existing GSM-R system of high-speed railways in China belongs to a 2G narrowband communication system,which cannot meet the future intelligent needs of railways.LTE-R,as a wireless communication system used for train to ground authentication,it can provide high-speed,low latency,and high bandwidth to ensure train to ground authentication timely.However,the LTE-R system is based on an all IP network structure,which makes the train to ground authentication process prone to security risks such as data eavesdropping and tampering.Therefore,the study of train to ground authentication agreement protocol based on LTE-R is crucial for LTE-R access safely.This article analyzes the current research status of high-speed railway train to ground authentication at domestic and foreign,and on this basis,delves into relevant encryption methods to study the existing LTE-R network train to ground authentication process.The main research and work are as follows:(1)Aiming at the problems of clear text transmission of train identity information,no updated session keys in existing train to ground authentication key agreement protocols,a hybrid key enhanced LTE-R train to ground authentication key agreement scheme is proposed.Firstly,based on asymmetric encryption mechanism,authentication reliability and confidentiality protection are achieved.Secondly,the elliptic curve key exchange algorithm is used to realize the dynamic update of the key.Then,four different authentication protocols are designed for the train to ground authentication scenario.Finally,BAN logic is used for formal security verification.The results show that the scheme in this chapter can effectively resist replay,Do S and other attacks in terms of security,and is better than existing schemes in terms of communication overhead and computation overhead.(2)For GSM-R and LTE-R heterogeneous network evolution scenario,there are problems of low handover security and high handover authentication overhead in the existing heterogeneous network handover authentication protocol,and a LTE-R high-speed railroad heterogeneous network handover security authentication scheme is proposed.Firstly,the handover security features are realized by using identity and handover authentication code.Secondly,lightweight algorithms such as elliptic curve key exchange and hash function are used to reduce the handover authentication overhead.Finally,BAN logic is used for formal security verification.The results show that the scheme in this chapter can resist attacks such as man-in-the-middle and disguised users in terms of security,and has high advantages in terms of communication and computation overhead.(3)Aiming at the problems of no forward security of handover key,easy leakage of handover information and low handover efficiency of the existing handover protocols,a handover authentication and key agreement algorithm for LTE-R wireless communication systems is proposed.Firstly,the authentication information is used to achieve handover anonymity.Secondly,a session key is negotiated based on the function of lattice to achieve the backward and forward security of the handover key.Finally,string space and formal tool Scyther are used to verify the security of the proposed scheme,and the results show that the scheme in this chapter has certain advantages in terms of security,communication overhead and computation overhead. |
