D2D通信的认证和密钥协商协议研究

发布时间：2018-04-15 11:20

本文选题：终端直接通信(D2D) + 设备发现　；参考：《西安电子科技大学》2014年硕士论文

【摘要】：随着移动通信的快速发展,作为LTE网络中的一种新型无线通信模式,终端直接通信(D2D)受到了运营商和研究者的广泛关注。凭借着能够增加蜂窝系统的频谱利用率、减轻蜂窝小区基站负荷、降低终端和基站发射功率以及提升系统整体性能等优势,终端直接通信有着巨大的发展前景。尽管对D2D通信的研究正在进行,但目前对其安全方面的研究还关注不够。为确保D2D通信的保密性和完整性,用户设备间应当进行双向认证并协商出会话密钥。针对此问题部分学者从物理层安全的角度开展了研究工作,这种思路更适用于无网络基础设施的环境,且存在无法认证通信主体身份和计算复杂的问题。本文从应用层的角度对蜂窝网络环境下的D2D通信的认证和密钥协商机制进行了深入研究,结合D2D通信的流程给出了一对一通信和一对多通信场景下的相关方案,所取得的主要研究成果如下：1.对D2D一对一通信的认证与密钥协商机制进行了研究。论文中结合D2D一对一通信的实际过程,提出了一种认证和密钥协商方案。该方案在设备的注册阶段,终端设备和邻近服务功能模块首先通过3GPP的通用认证架构GAA的GBA过程生成预共享主会话密钥,然后利用此主密钥完成D2D应用的注册、设备发现和密钥协商流程。经分析表明,该方案利用GAA在D2D一对一通信的基础上完成了两个设备的认证和密钥协商,安全上保证了数据的机密性和完整性、能抗重放攻击,从而确保双方通信的安全。性能上与未采用安全通信的普通D2D通信的流程相比,在通信量和计算量上有所增加,但是仍然具有较好的可用性。2.对D2D一对多通信的密钥协商机制进行了研究。在D2D一对多通信的媒体业务中,为了业务数据流的安全,发起设备与其他多个设备需要共享一个会话密钥。论文提出了一种适用于D2D一对多通信的认证密钥协商方案。该方案中邻近服务功能模块分别与群组中各终端设备通过通用认证架构GAA生成预共享密钥,并通过广播向群组设备分发计算群组主密钥所需的必要信息。利用上述信息,D2D通信设备可独立计算出安全的媒体业务所需的群组主密钥,发起设备再生成一个用于一对多会话的群组会话密钥,并通过群组主密钥加密将此会话密钥广播给其他的设备。分析表明,该方案满足前向安全和后向安全并能抗共谋攻击,而且与现有的一对多通信的媒体业务的安全架构相比,该密钥协商方案具有较少的消息交互轮数。
[Abstract]:With the rapid development of mobile communication, as a new type of wireless communication mode in LTE network, terminal direct communication (D2D) has been widely concerned by operators and researchers.With the advantages of increasing the spectrum efficiency of the cellular system, reducing the base station load, reducing the transmission power of the terminal and the base station, and improving the overall performance of the system, the terminal direct communication has a great development prospect.Although the research on D2D communication is under way, the current research on its security is not enough.In order to ensure the confidentiality and integrity of D2D communication, user devices should be bidirectional authenticated and the session key should be negotiated.In view of this problem, some scholars have carried out research work from the point of view of physical layer security. This idea is more suitable for the environment without network infrastructure, and there are some problems such as unable to authenticate the identity of the communication subject and the complexity of calculation.In this paper, the authentication and key agreement mechanism of D2D communication in cellular network environment is deeply studied from the perspective of application layer. In combination with the flow of D2D communication, the related schemes of one-to-one communication and one-to-many communication scenarios are given.The main research results obtained are as follows: 1. 1.The authentication and key agreement mechanism of D 2 D one-to-one communication is studied.In this paper, a scheme of authentication and key agreement is proposed based on the process of D2D one-to-one communication.In the registration phase of the device, the terminal device and the adjacent service module first generate the pre-shared master session key through the GBA process of 3GPP's general authentication architecture GAA, and then use the master key to complete the registration of the D2D application.Device discovery and key agreement process.The analysis shows that the scheme uses GAA to complete the authentication and key agreement of the two devices on the basis of D2D one-to-one communication, which guarantees the confidentiality and integrity of the data, and can resist the replay attack, thus ensuring the security of the communication between the two sides.Compared with the normal D2D communication flow without secure communication, the performance of the system increases in terms of traffic and computation, but it still has good usability.The key agreement mechanism of D2D one-to-many communication is studied.In D2D one-to-many communication media services, for the security of service data flow, the initiating device needs to share a session key with other devices.This paper presents an authentication key agreement scheme for D2D one-to-many communication.In this scheme, the adjacent service function module and the terminal devices in the group generate the pre-shared key through the universal authentication architecture (GAA), and broadcast the necessary information to the group device to calculate the group master key.Using the above information, the D2D communication device can independently calculate the group master key required for secure media services, and the initiating device then generates a group session key for one-to-many sessions.The session key is broadcast to other devices via group master key encryption.The analysis shows that the scheme satisfies forward security and backward security and can resist collusion attack, and compared with the existing security architecture of one-to-many communication media services, the key agreement scheme has less number of message interaction rounds.
【学位授予单位】：西安电子科技大学
【学位级别】：硕士
【学位授予年份】：2014
【分类号】：TN918.4

【相似文献】