面向BDSBAS电文认证的OTAR设计与仿真

OTAR Design and Simulation for BDSBAS Message Authentication

星基增强系统(Satellite Based Augmentation System,SBAS)的电文格式公开,为防止SBAS服务遭受生成式欺骗攻击,国际民航组织积极推进SBAS认证服务标准的制定.本文面向北斗星基增强系统(BeiDou SatelliteBased Augmentation System,BDSBAS)阐述了基于中国商用密码算法的椭圆曲线数字签名(Elliptic Curve Digital Signature Algorithm,ECDSA)电文认证方案与时间效应流丢失容错(Time Efficient Stream Loss-tolerant Authentication,TESLA)电文认证方案,设计了BDSBAS认证电文,依据空中密钥管理OTAR(Over The Air Rekeying)的策略制定了OTAR电文(OTAR Message Type,OMT)与播发方案.通过蒙特卡洛OTAR仿真器开展仿真,对不同OTAR电文接收时间进行分析,本文设计的方案与国外方案对比结果有明显的提升,有效的减少了接收机完成认证使用SBAS增强服务的时间,对BDSBAS电文认证服务提供一定参考与建议.

The message format of the satellite based augmentation system(SBAS)is open,and the system is relative⁃ly fragile.In order to prevent the SBAS service from being subjected to generative spoofing attacks,the international civil aviation organization(ICAO)actively promotes the formulation of the SBAS certification service standard.This paper ex⁃pounds the elliptic curve digital signature Algorithum(ECDSA)message authentication scheme and the time efficient stream loss-tolerant authentication(TESLA)message authentication scheme based on the Chinese commercial cryptographic algorithm for the Beidou satellite based augmentation system(BDSBAS).The BDSBAS authentication message is de⁃signed,and according to the air key management OTAR(Over The Air Rekeying)strategy formulates the OTAR message type(OMT)and broadcast scheme.The Monte Carlo OTAR simulator is used to simulate and analyze the receiving time of different OTAR messages.The results of the scheme designed in this paper are significantly improved compared with for⁃eign schemes,which effectively reduces the time for the receiver to complete the authentication with the SBAS enhanced service.The message authentication service provides certain references and suggestions.