UC安全的移动卫星通信系统认证密钥交换协议

The Universally Composable Security Authentication and Key Exchange Protocol for Mobile Satellite Communication Systems

由于移动卫星和移动用户的计算、存储和通信能力有限,解决移动卫星通信系统的安全和保密问题面临许多困难。根据移动卫星通信系统的实际情况,分析了系统的安全需求,基于UC安全模型定义了移动卫星通信系统认证密钥交换协议的理想函数,该理想函数保证了强安全性和实用性,并用于实际协议的设计。在移动用户和移动卫星通信网络控制中心之间,设计了一个简单、低计算复杂性的认证密钥交换协议,该协议涉及了较少的交互次数,认证协议计算负载仅仅需要利用伪随机函数、散列函数和与或计算。同时,基于UC安全模型,对新的协议进行了可证明安全分析。新协议的安全属性包括可用性、有效性、身份隐藏的可认证性、前向保密的密钥交换以及协议的模块化可复合性。

Security and privacy in Mobile Satellite Communication Systems （MSCS） is an important and active research area. A number of challenges arise due to the limited computational, storage and communication abilities of a typical mobile satellite and mobile users. This work describes a simple and inexpensive an authentication and key exchange scheme for mobile satellite communication systems. The proposed protocols involve minimal interaction between a mobile users and a network control center and place low computational burden on the mobile users and the network control center for authentication, requiring only a pseudo-random functions and XOR and hash operations. The paper also describes a universally composable security model tuned for MSCS applications. By making specific setup, communication, and concurrency assumptions that are realistic in the MSCS application setting, we arrived at a model that guarantees strong security and availability properties, while still permitting the design of practical MSCS protocols. We show that our protocols are provably secure within the new security model. The security involved, availability, efficiency, identity concealment authentication, forward-secure key exchange, and modularity composable.