高速环境下的接入认证研究

发布时间：2018-01-18 02:07

本文关键词：高速环境下的接入认证研究　出处：《南京航空航天大学》2015年硕士论文　论文类型：学位论文

【摘要】：认证是保证信息安全的基本技术。由于高铁、地铁运动的高速性以及列车中成员的密集性,导致此高速环境下存在聚集性快速切换的要求,由于现有的无线接入方案没有考虑到聚集性快速切换的问题,并不能很好的适用于此无线环境,存在终端在接入点之间不能流畅切换的问题。因而,研究一种适合于高速环境下安全的快速接入认证方案是必要的。本文从快速认证、聚集性认证两个方面进行了研究,并将其有机的融合,在高速聚集性切换中实现快速认证,尽量减少总体的切换时延。同时,为了保证用户身份及位置信息的隐私安全,本文又对匿名认证进行了研究,从而实现对用户身份及位置信息的保护。为了解决快速切换中的认证问题,本文将认证与切换相分离,在终端接入下一接入点之前,通过当前接入点提前完成与下一接入点的认证和信息交互;当切换时根据认证中的交互信息与下一接入点完成快速认证。通过快速认证减少切换时刻的认证时延,提高切换质量。在快速认证中用到双方协商的会话密钥,为了保证会话密钥的安全性,根据椭圆曲线上的离散对数难题,利用认证信息中双方的随机数与公钥的点乘积来计算会话密钥,实现会话密钥的双向控制并保证会话的前向安全性。为了解决快速切换中的聚集性认证问题,本文引入了批量认证的思想。通过对终端认证信息的批量处理,减少接入点的运算负载。然而,切换的同时进行批量认证会带来总体时延的增加,且时效性较差;于是在批量认证的基础上结合快速认证中认证与切换相分离的思想,下一接入点借助当前接入点通过批量认证提前完成与终端的认证和信息交互,切换时刻根据交互信息进行快速认证,减少切换时刻的认证时延,保证切换质量;同时,考虑到认证信息的时效性,本文又对批量认证信息进行了分组,通过分组批量认证来保证每一组认证信息的时效性。最终通过分组的批量认证解决了快速切换中的聚集性认证问题。为了保证用户身份及位置信息的隐私安全,匿名是很好的方法。然而,对固定匿名长时间的追踪可能泄露用户的真实身份;一次性匿名的批量申请又会给服务器和终端带来存储负担;因而,本文通过在初次接入和更新接入时,对下一次匿名接入身份进行申请的方式保证用户匿名的同时不增加家乡代理服务器和终端的存储负担;从而实现对用户身份及位置信息的保护。本文在对现有快速接入方案分析的基础上,针对高速运动环境,提出了线性快速接入认证方案,通过快速认证解决了高速环境下的无线接入和切换问题;同时,为了减少聚集性认证中接入点的负载,本文又提出了高速环境下的匿名批量快速切换方案,通过对认证信息的批处理,减少接入点的运算负载,并通过匿名身份的逐次获取实现了对用户身份及位置信息的保护。
[Abstract]:Authentication is the basic technology to ensure the information security. Due to the high speed of high-speed railway, the high speed of subway movement and the density of train members, there is the requirement of fast convergent switching in this high-speed environment. Because the existing wireless access schemes do not take into account the aggregation of fast handoff problem, it is not very suitable for this wireless environment, there is a terminal in the access point between the problem of fluency handoff. It is necessary to study a fast access authentication scheme which is suitable for high speed environment. In this paper, we study it from two aspects: fast authentication and aggregation authentication, and combine it organically. In order to ensure the privacy of user identity and location information, anonymous authentication is studied in this paper. In order to solve the authentication problem in fast handoff, the authentication and handover are separated before the terminal accesses the next access point. The authentication and information interaction with the next access point is completed in advance through the current access point; When handoff is completed with the next access point according to the interactive information in authentication, the authentication delay at the handover time is reduced through fast authentication, and the handover quality is improved. The session key negotiated by both sides is used in the fast authentication. In order to ensure the security of the session key, according to the discrete logarithm problem on the elliptic curve, the point product of the random number and public key of both sides in the authentication information is used to calculate the session key. In order to solve the problem of agglomeration authentication in fast switching, the idea of batch authentication is introduced in this paper. Through the batch processing of terminal authentication information, we implement the two-way control of session key and guarantee the forward security of session. The operation load of the access point is reduced. However, batch authentication at the same time will lead to the increase of the overall delay, and the time efficiency is poor. So on the basis of batch authentication, combined with the idea of separation of authentication and handover in fast authentication, the next access point completes the authentication and information exchange with the terminal in advance with the current access point through batch authentication. The handover time can be authenticated quickly according to the interactive information, which can reduce the authentication delay and ensure the quality of the handover. At the same time, considering the timeliness of authentication information, the batch authentication information is grouped in this paper. Group batch authentication is used to ensure the timeliness of each set of authentication information. Finally, the aggregation authentication problem in fast handoff is solved by batch authentication. In order to ensure the privacy security of user identity and location information. Anonymity is a good method. However, tracking a fixed anonymity for a long time may reveal the true identity of the user; The one-time anonymous batch application will bring the storage burden to the server and the terminal. Therefore, in the first access and update access, this paper applies for the next anonymous access identity to ensure the anonymity of the user while not increasing the storage burden of the home proxy server and terminal. In order to achieve the protection of user identity and location information. Based on the analysis of the existing fast access schemes, this paper proposes a linear fast access authentication scheme for high-speed moving environment. The problem of wireless access and handoff in high-speed environment is solved by fast authentication. At the same time, in order to reduce the load of access point in aggregation authentication, this paper proposes a fast anonymous batch switching scheme in high speed environment, which can reduce the operation load of access point by batch processing of authentication information. The user identity and location information are protected by successive acquisition of anonymous identity.
【学位授予单位】：南京航空航天大学
【学位级别】：硕士
【学位授予年份】：2015
【分类号】：TP309

【相似文献】