摘要
针对飞机通过廊桥接入点与航空公司进行飞机健康管理数据、电子飞行包等数据传输的无线网络无统一身份认证机制的问题,结合椭圆曲线密码体制与组合式伪随机数提出一种数字签名技术与身份认证方案,同时使用SVO逻辑对该方案进行形式化分析.结果表明,组合式伪随机数生成方案解决了身份认证中随机数的重复值问题,数字签名技术实现了基于身份的认证机制,身份认证方案实现了双向认证,椭圆曲线密码体制保证了密码强度.综合分析表明,该方案满足飞机与航空公司通过廊桥接入点进行数据传输的安全需求,能更好地应用于民航领域.
In viewof the problem that aircraft have no unified identity authentication mechanism for wireless networks transmitting aircraft health management data,electronic flight packets and other data through the access points of passenger boarding bridge,a digital signature technique and an identity authentication scheme are proposed based on elliptic curve cryptosystem and the combined pseudorandom number. Meanwhile,formal analysis is conducted on the scheme by using SVO logic. The results showthat the problem of duplicate values of random numbers in identity authentication is solved by the combined pseudorandom number generation scheme. The identity-based authentication mechanism is implemented by digital signature technology,and mutual authentication is achieved by identity authentication scheme accordingly. At last,the strength of cipher is guaranteed by the elliptic curve cryptosystem. Comprehensive analysis shows that the scheme satisfies the security requirements of the data transmission between aircraft and airlines through the bridge access point,which can be better applied in the field of civil aviation.
作者
顾兆军
刘东楠
GU Zhao-jun;LIU Dong-nan(Information Security Evaluation Center,Civil Aviation University of China,Tianjin 300300,China;College of Computer Science and Technology,Civil Aviation University of China,Tianjin 300300,China)
出处
《小型微型计算机系统》
CSCD
北大核心
2019年第1期98-103,共6页
Journal of Chinese Computer Systems
基金
国家自然科学基金项目(61601467)资助
中央高校基本科研业务费中国民航大学专项项目(3122013Z008)资助
民航科技项目(MHRD20150233)资助
民航安全能力建设项目(PDSA008)资助
关键词
椭圆曲线密码体制
身份认证
双向认证
数字签名
形式化证明
elliptic curves cryptography
identity authentication
mutual authentication
digital signature
formal verification
