【摘要】 针对铁路下一代移动通信系统LTE-R的车地无线通信实体认证安全漏洞及认证效率问题,提出了基于匿名代理签名的车-地无线通信安全认证方案。该方案针对3种认证场景分别设计了注册认证协议、初始认证协议和重认证协议,通过引入匿名代理签名机制,实现了IMSI的机密性保护和MME的预认证功能,可抵抗中间人攻击、重放攻击和拒绝服务攻击。此外,本方案实现了认证信息的本地生成,有效提高了高速移动环境下频繁重认证的计算和通信效率,避免了认证向量耗尽而重启初始认证协议的问题。性能分析表明,本方案能够满足LTE-R系统车地认证对安全性和实时性的实际需求。更多还原

【Abstract】 In the view of the security loopholes and authentication efficiency of train-ground wireless communication entity authentication in the next generation railway mobile communication system LTE-R, a security authentication scheme for vehicle-ground wireless communication based on anonymous proxy signature algorithm was proposed in this paper. This proposal introduced registration authentication, initialization authentication and re-authentication for a series of scenarios. This scheme can provide IMSI protection, mobile management entity pre-authentication, undeniable feature, and DoS resistant ability with the benefit of anonymous proxy signature. Along with that, the authentication information was generated locally to reduce the computational and communicational cost of re-authentication. The results of the analysis on the security and performance show that this scheme ensures the security of railway communications and the timeliness of authentication during the rapid movement process of trains.更多还原