基于身份认证的卫星网络组密钥管理方案

摘要

为解决卫星网络组播通信过程中成员动态变化及认证等问题,提出一个基于身份认证的三叉密钥树组密钥管理方案.根据卫星网络多层次结构的特点,设计组密钥协商模型,将高轨道卫星作为组密钥协商发起节点,地面控制端作为系统的可信第三方.在密钥协商过程中,利用双线性对和身份认证技术鉴别不诚实的节点,并引入签名机制,保证盲密钥树的认证性及完整性.分析结果表明,该方案具有较强的安全性,并且计算量小,通信效率高.%To overcome the problems of mobility and authentication in multicast communication of satellite network, this paper presents a group key management with ternary key tree based on ID authenticated. A key negotiation matrix is designed due to the multiplayer of satellite network, which regards the satellites of high orbit as group key negotiation sponsored nodes and set telluric control center as the third trusted party. Bilinear parings and ID authentication technique are employed in the key negotiation process, therefore the dishonest nodes can be detected and identified. A signature is proposed to ensure the authentication and integrality of the blind key tree. Performance analysis shows that the proposed scheme has strong security, less computation and communication cost.