机器类型通信中的网络安全问题研究

发布时间：2018-08-23 20:15

【摘要】：机器类型通信(MTC)使所有机器设备都具备连网和通信能力,是物联网(Internet of Things,IOT)的构成基础,已成为移动通信网络新的业务增长点,有着广阔的市场和应用前景,而其中网络安全对于通信应用的顺利开展具有极其重要的意义。MTC通信首先需要考虑设备到服务器间的端到端安全,这对于确保常规的短消息业务、多媒体广播和多播业务的数据保密性、完整性以及信令数据的完整性都有决定作用;其次,海量数据进行业务请求可能会导致核心网拥塞,甚至核心网过载问题;此外,作为MTC通信的一种重要应用形态,车载Ad Hoc网络还需要考虑对车辆以及路边单元实体的认证,其应用中所涉及的身份隐私问题又是用户所极为关心的。围绕着海量设备接入带来的拥塞等问题,论文从网络安全的角度对此开展了系统研究,着重从服务接入、应用层安全、广播/多播业务安全、具体应用中的安全及隐私问题四个方面开展了相关工作,概括如下:第一部分研究机器类型通信安全的服务接入机制。考虑到面对多样化的应用环境,如果为每种应用逐一提供所需的端到端安全防护,将会导致认证基础设施的大量重复建设。论文根据大规模MTC应用大多由移动运营商主导或参与的特点,结合通用认证架构,提出了一个适用于MTC的端到端安全方案,由运营商网络协助完成用户认证和会话密钥的生成,使MTC服务器专注于应用服务的提供,显著降低了MTC应用安全的实现复杂度。安全性分析与性能分析表明,该方案可以推导出主会话密钥生存期与引导请求数期望之间的函数关系,从而得到寻找最优密钥生存期的方法。第二部分研究机器类型通信应用层安全的优化技术。针对3GPP的通用认证架构中,同时请求服务的移动终端数量很大时会出现信令拥塞的情况,论文基于聚合签名技术提出了一种适用于LTE网络的应用层批量认证和密钥协商协议,以实现端到端安全。该方案将认证信令聚合,由运营商协助完成认证,相比3GPP通用认证架构而言可大大减轻网络拥塞程度,减小认证时延。第三部分研究机器类型通信的多媒体广播/多播业务安全技术。考虑到3GPP为在群组密钥协商和更新方面不够灵活的缺点,以及引入MTC通信可能会导致核心网过载的问题,论文提出了一种多媒体业务中适用于MTC通信的群组密钥协商协议。该方案使用广播消息来传输生成群组密钥所需的相关信息以减少交互轮数,可有效克服上述不足。分析表明协议具有后向和前向安全性,并可抗合谋攻击,相比3GPP的MBMS方案可降低通信开销,通信开销为一常量。第四部分研究机器类型通信中VANET业务的安全与隐私保护技术。针对典型VANET应用中由于通信范围受限和网络架构高动态带来的问题,提出了一种高效的、具有隐私保护能力的协作数据下载方案。它通过使用CP-ABE-CL,达到了数据接收者匿名,并保持了密文长度的固定,从而根据用户计费等级实现了高速移动环境中细粒度的访问控制。安全性分析和性能分析表明该方案满足VANET增值业务的安全和隐私要求,可有效地应用于VANET增值应用中。
[Abstract]:Machine type communication (MTC) makes all machine equipments have the ability of networking and communication. It is the foundation of Internet of Things (IOT) and has become a new service growth point of mobile communication network. It has a broad market and application prospects. Among them, network security is very important for the smooth development of communication applications. The end-to-end security between devices and servers should be considered firstly, which plays a decisive role in ensuring the data confidentiality, integrity and signaling data integrity of conventional short message services, multimedia broadcasting and multicast services; secondly, massive data traffic requests may lead to congestion in the core network, or even core network passing. In addition, as an important application form of MTC communication, on-board Ad Hoc network also needs to consider the authentication of vehicles and roadside unit entities, and the identity privacy issues involved in its application are of great concern to users. Systematic research has been carried out, focusing on service access, application layer security, broadcasting/multicast service security, security and privacy issues in specific applications. It is summarized as follows: The first part studies the mechanism of service access for machine type communication security. Providing end-to-end security protection one by one will lead to a large number of duplicate construction of authentication infrastructure. According to the characteristics that most large-scale MTC applications are dominated or participated by mobile operators, this paper proposes an end-to-end security scheme for MTC, which is based on the general authentication architecture. The operator network assists the user authentication and conference. Security analysis and performance analysis show that the scheme can derive the functional relationship between the lifetime of the master session key and the expectation of boot requests, and thus obtain a method to find the optimal lifetime of the key. The second part studies the optimization technology of application layer security in machine type communication. Aiming at the signaling congestion in 3GPP universal authentication architecture when the number of mobile terminals requesting service is very large, this paper proposes an application layer batch authentication and key agreement protocol for LTE network based on aggregate signature technology to realize the end. End-to-end security. The scheme aggregates authentication signaling and is authenticated by operators. Compared with the 3GPP universal authentication architecture, it can greatly reduce network congestion and authentication delay. The third part studies the security technology of multimedia broadcast/multicast services for machine-type communication. Considering that 3GPP is not used in group key agreement and updating. This paper proposes a group key agreement protocol for MTC communications in multimedia services. The scheme uses broadcast messages to transmit the relevant information needed to generate the group key to reduce the number of rounds of interaction, which can effectively overcome the above shortcomings. Ming protocol has backward and forward security and can resist collusion attacks. Compared with 3GPP's MBMS scheme, Ming protocol can reduce the communication overhead and the communication overhead is a constant. This paper proposes an efficient and privacy-preserving cooperative data download scheme. By using CP-ABE-CL, the scheme achieves the anonymity of data receiver and keeps the length of ciphertext fixed. Thus fine-grained access control in high-speed mobile environments is implemented according to the user's billing level. Security analysis and performance analysis show that the scheme is effective. The case satisfies the security and privacy requirements of VANET value-added services and can be effectively applied to VANET value-added applications.
【学位授予单位】：西安电子科技大学
【学位级别】：博士
【学位授予年份】：2014
【分类号】：TP393.08

【相似文献】