航空自组网漫游接入认证方案

摘要

Authentication is a crucial security requirement when one aircraft communicating with other aircrafts belong to another domain. For the existing scheme can not satisfied with user anonymity and high efficiency at the same time,this paper proposed a identity-based authentication scheme for roaming in aeronautical Ad hoc networks. It constructed the aircraft authenticate with aircrafts in other domain with the private key by partial private key and the secret value. The verification result of the signature was a constant with respect to the signer' s identifier, which realized secure authentication and user anonymity. And this scheme avoided the pairing operation. It is shows that the proposed scheme has superiority in both security and efficiency.%当飞机节点漫游到外地空域通信时必须经过身份认证,而现有的认证方案无法同时满足认证的匿名性和高效率,因此针对航空自组网设计了一种基于身份的漫游接入认证方案.在本方案中飞机节点使用由认证服务器生成的部分私钥与用户生成的秘密值共同产生的签名私钥,与外地空域内的飞机节点进行身份认证.外地飞机节点使用的签名验证算法的验证结果是一个常量,在保证漫游接入认证安全性的同时实现了用户匿名性和不可跟踪性.而且本方案避免了复杂的双线性运算,提高了漫游接入认证的效率.分析表明,该方案同时具有安全性和效率上的优势.