天地一体化网络中基于预认证与群组管理的安全切换方案

Pre-authentication and group management based secure handover for space-earth integration network

针对天地一体化网络中卫星节点高速移动过程的卫星接入点频繁切换问题,利用卫星轨迹可预测的特点,提出了基于组的多移动节点安全切换方案。该方案针对网络中卫星节点和地面移动节点的移动特性,对多移动节点切换过程中的交互信息进行有效汇聚;利用卫星节点运动轨迹可预测的特性,提前通过安全上下文完成预认证与会话密钥协商。和已有方案相比,所提切换方案在保证切换所必备的安全性的同时,显著减小了切换延时以及认证和密钥协商过程中节点的通信、计算负担,适用于卫星节点能量受限的天地一体化网络环境。

In space-earth integration network, high-speed movement of space nodes brings in the problem of frequent satellite access router（SAR） handover. A group-based secure handover scheme for multiple mobility nodes（MN） utilizing satellite trajectory prediction was proposed. By using the movement features of the corresponding entities, an efficient aggregation mechanism for the interaction message occurred during the multi-MN handover was put forward. By using predictable satellite trajectory, authentication and session key agreement between new SAR and MN was accomplished beforehand with the secure context. Compared with existing schemes, the proposed scheme can provide necessary security features, lower the handover delay, and reduce the computation and communication overhead of mutual authentication and key agreement. The proposed scheme well suits the space-earth integration network, where the satellite node is energy constraint.