基于TESLA协议的BDSBAS电文认证技术

Design of message authentication based on TESLA protocol for BDSBAS

星基增强系统(SBAS)能为航空、航海等生命安全领域提供完好性增强服务,针对SBAS服务的欺骗风险,面向北斗星基增强系统(BDSBAS)发展,提出基于中国商用密码标准算法的时间效应流丢失容错认证机制(TESLA)电文认证方案。阐述SBAS电文认证架构与TESLA认证原理,开展基于中国商用密码标准算法的BDSABS认证电文编排及空中密钥更新(OTAR)的电文播发设计,针对L5I与L5Q开展认证时间间隔和最大认证延迟等指标的理论分析,进一步从OTAR信息权重和解调错误率2方面仿真首次认证时间指标。仿真结果能为基于TESLA协议的BDSBAS电文认证提供一定的理论支持。

Aviation,navigation,and other life safety areas can benefit from the integrity augmentation services offered by SBAS.In response to the deception risk of SBAS services and the development of the BeiDou satellite-based augmentation system(BDSBAS),this paper proposes a message authentication method based on the timed efficient streaming loss-tolerant authentication(TESLA)protocol.Firstly,this article introduces SBAS service security risks and the concept of message authentication and then explains the principle of TESLA,key chain generation,and operation process.The Over the Air Rekeying(OTAR)message broadcast design and authentication message format are created in accordance with the domestic commercial cryptographic standard hash algorithm.Finally,a simulation test is carried out for the L5I channel and the L5Q channel.The simulation results can provide theoretical support for the BDSBAS authentication based on the TESLA scheme.