基于预认证的高速列车快速安全切换机制

A Secure Fast Handoff Mechanism Based on Pre-authentication for High-speed Trains

针对高速列车在行驶过程中面临的安全切换问题,提出基于列车移动方向和位置的目标基站选择方法,设计一种基于预认证的高速列车安全切换机制,结合可认证密钥协商协议实现中继站和目标基站之间的双向认证以及生成共享的会话密钥。安全性分析与仿真实验表明,提出的切换机制不仅具有较高的安全性,而且有效地降低了切换时延和中断率,同时保持了较为稳定的吞吐率,显著改善了车地无线通信的切换性能。当高速列车行驶速率低于500 km/h时,切换时延普遍低于50 ms,切换中断率低于1.6%;当高速列车行驶速率为350 km/h时,切换过程的平均吞吐率高于19.5 Mbit/s。

In order to realize secure handover of high-speed trains during their operation,this paper proposed a method of selecting target Evolved NodeB based on moving direction and position of trains,and then designed a mechanism of secure handover based on pre-authentication,which realized two-way authentication between relay station and target Evolved NodeB by using authenticated key agreement protocol and generating shared session keys.Security analysis and simulation experiment results show that the proposed handoff mechanism not only has higher security,but also effective reduction of the handoff delay and outage probability,while maintaining a more stable throughput rate,which significantly improves the handoff performance of train-wayside wireless communication.When the speed of high-speed train is lower than 500 km/h,the handover delay is generally lower than 50 ms with lower than 1.6%handover outage probability.When the speed of high-speed train is 350 km/h,the average throughput of handover process is higher than 19.5 Mbit/s.