空间信息网可重构的密钥管理方案研究与仿真

发布时间：2018-03-15 22:24

本文选题：空间信息网　切入点：重构　出处：《东北大学》2014年硕士论文　论文类型：学位论文

【摘要】：空间信息网是由在轨运行的多颗卫星及卫星星座组成的骨干式通信网络,可为各种空间任务如气象、环境与灾害监测、资源勘察、地形测绘、侦察、通信广播和科学探测等提供集成的通信服务,在无线通信领域中占有极其重要的地位,有着非常广阔的应用前景。然而由于空间信息网具有网络异构、节点种类繁多、拓扑变化频繁、传输距离远等固有特征,使得其与传统网络相比,将受到更多的安全威胁,因此空间信息网的安全问题受到越来越多的关注,密钥管理作为空间信息网安全方面的基础也成为目前的一个研究热点。结合空间信息网的特点和安全需求,提出一种空间信息网可重构的密钥管理方案。算法分三个阶段：在网络初始化阶段,针对空间信息网的特点设置密钥管理安全架构,该架构的设置结合了空间信息网自有的分层特点,在安全架构中分为骨干网络层、高轨接入层、成员接入层。在密钥管理设置方面在骨干网络层、高轨接入层、低空接入层接入层分别采用部分分布式、基于动态簇的分布式和集中式的密钥管理方案。同时,加入信任机制,各个节点监测一跳邻居节点的异常行为,进行信用值评估,保证网络安全性。在密钥主动优化阶段,骨干网络层通过对节点信用值的计算,离线地面控制中心阶段性的加入网络,调整(k,n)门限的取值,既保证网络的安全性,又能减小网络的计算开销。高轨与成员接入层根据邻居节点的信用评估值,适当减小或者增加证书更新周期和证书分片。在被动密钥重构阶段,分为关键节点地面控制中心失效和大量骨干节点遭受攻击两类,分别采用自适应完全分布式和按需预设值的构造来完成密钥共享与更新,适应网络的动态变化,保证网络安全有效的运行。采用NS2网络模拟软件对所提出的算法进行仿真分析,验证算法的可扩展性和抗毁性。结果表明,该算法能够较好的适应网络的变化,在网络故障时保证网络安全有效的运行,延长网络的生存周期,减小交互时延,从整体上优化网络性能。
[Abstract]:Space Information Network is a backbone communication network composed of many satellites and satellite constellations in orbit. It can be used for various space missions such as meteorology, environment and disaster monitoring, resource survey, topographic mapping, reconnaissance. The integrated communication services, such as communication broadcasting and scientific exploration, play an extremely important role in the field of wireless communication and have a very broad application prospect. However, because of the heterogeneity of the network, there are many kinds of nodes in the space information network. Compared with the traditional network, the topology changes frequently, the transmission distance is long and so on, it will be subjected to more and more security threats, so the security problem of the space information network is paid more and more attention. Key management, as the basis of the security of spatial information network, has become a research hotspot at present. This paper presents a reconfigurable key management scheme for spatial information network. The algorithm is divided into three stages: in the network initialization stage, the key management security framework is set up according to the characteristics of the spatial information network. The configuration of the architecture combines the layered characteristics of the spatial information network. In the security architecture, it is divided into backbone network layer, high orbit access layer, member access layer, key management setting in the backbone network layer, high rail access layer. The access layer in the low altitude access layer adopts distributed, dynamic clust-based and centralized key management schemes respectively. At the same time, by adding trust mechanism, each node monitors the abnormal behavior of one-hop neighbor node and evaluates the credit value. Ensure network security. In the key active optimization stage, the backbone network layer can ensure the security of the network by calculating the credit value of the node and adding the off-line ground control center to the network in stages to adjust the threshold value. It can also reduce the computational overhead of the network. According to the credit evaluation value of the neighbor node, the high orbit and member access layer can reduce or increase the certificate update cycle and certificate fragment appropriately. It is divided into two types: ground control center failure of key nodes and attacks on a large number of backbone nodes. Adaptive complete distribution and on-demand preset construction are used to complete key sharing and updating to adapt to the dynamic changes of the network. The NS2 network simulation software is used to simulate and analyze the proposed algorithm to verify the scalability and survivability of the algorithm. The results show that the algorithm can better adapt to the changes of the network. In the event of network failure, the network can run safely and effectively, prolong the lifetime of the network, reduce the interactive delay, and optimize the network performance as a whole.
【学位授予单位】：东北大学
【学位级别】：硕士
【学位授予年份】：2014
【分类号】：TN918.4

【相似文献】