应急场景下无人机网络中的指令安全下发协议

doi:10.19665/j.issn1001-2400.20241007

摘要/Abstract

摘要：

无人机在应急场景中发挥着越来越重要的作用。无人机执行远程任务时,飞行距离长,导致地面管控中心无法直接与无人机通信。而应急场景如突发的火灾地震等,需要及时下达指令应对。针对应急场景下的无人机网络数据指令安全下发场景,设计了一种基于多接收者加密协议的指挥权限下发机制和基于代理签密的指令安全下发机制。在地面管控中心下发指挥权限时,通过多接收者加密协议,向若干移动指挥中心下发指挥权限,并将其派往应急现场。在指令安全下发时,移动指挥中心将签密后的指令发送给空中平台,空中平台验证移动指挥中心的身份和指挥权限,并将指令签密后发送给无人机。网络中的无人机预先配置在空中平台的管辖下,无人机验证空中平台的身份,解密并执行指令。采用形式化验证工具Scyther、BAN逻辑和非形式化安全分析等多种方法对方案进行了安全性分析,结果表明,所提出的方案能够满足必要安全需求。与多个方案进行性能对比,结果表明,所提出的方案具有良好的性能表现。

关键词: 应急场景, 无人机网络, 指令安全下发, 认证

Abstract:

Drones play an increasingly important role in emergency scenarios.When drones perform long-distance missions,the flight distance is long,which makes it impossible for the ground control center to communicate directly with the drones.Emergency scenarios such as sudden fires and earthquakes require timely instructions to respond.Aiming at the scenario of secure issuance of drone network data instructions in emergency scenarios,a command authority issuance mechanism based on a multi-receiver encryption protocol and a secure instruction issuance mechanism based on proxy signcryption are designed.When the ground control center issues command authority,it issues command authority to several mobile command centers through a multi-receiver encryption protocol and dispatches them to the emergency site.When the instruction is securely issued,the mobile command center sends the signed instruction to the aerial platform which verifies the identity and command authority of the mobile command center and sends the signed instruction to the drone.The drones in the network are pre-configured under the jurisdiction of the aerial platform.The drone verifies the identity of the aerial platform,decrypts and executes the instruction.A security analysis of the scheme is carried out using a variety of methods such as the formal verification tool Scyther,BAN logic and informal security analysis.The results show that the proposed scheme can meet the necessary security requirements.Compared with multiple schemes,the results show that the proposed scheme has a good performance.

Key words: emergency scenarios, drone network, safe delivery of instructions, authentication

中图分类号:

TP309

刘璐瑶, 周雨辰, 曹进, 马如慧, 尤伟, 李晖. 应急场景下无人机网络中的指令安全下发协议[J]. 西安电子科技大学学报, 2024, 51(5): 201-216.

LIU Luyao, ZHOU Yuchen, CAO Jin, MA Ruhui, YOU Wei, LI Hui. Secure command delivery protocol for drone networks in emergency scenarios[J]. Journal of Xidian University, 2024, 51(5): 201-216.

图/表 16

图1

表1

图2

图3

图4

图5

表2

表3

图6

图7

表4

表5

图8

图9

表6

图10

参考文献 31

[1]	LAVALLÉ E C, MARTINS B O. Reframing Civil-Military Relations in the EU:Insights from the Drone Strategy 2.0[J]. JCMS:Journal of Common Market Studies, 2024, 62(2):619-625.
[2]	吴义豪, 齐彦丽, 周一青, 等. 通感算协同的无人机群轨迹规划与功率分配[J]. 西安电子科技大学学报, 2023, 50(3):61-74.
	WU Yihao, QI Yanli, ZHOU Yiqing, et al. Trajectory Planning and Power Allocation of UAV Swarm Based on Interawareness and Computing[J]. Journal of Xidian University, 2023, 50(3):61-74.
[3]	MAMBO M, USUDA K, OKAMOTO E. Proxy Signatures for Delegating Signing Operation[C]// Proceedings of the 3rd ACM Conference on Computer and Communications Security. New York: ACM, 1996:48-57.
[4]	LI X, CHEN K, SUN L. Certificateless Signature and Proxy Signature Schemes from Bilinear Pairings[J]. Lithuanian Mathematical Journal, 2005, 45:76-83.
[5]	LU R, HE D, WANG C. Cryptanalysis and Improvement of a Certificateless Proxy Signature Scheme from Bilinear Pairings[C]// Eighth ACIS International Conference on Software Engineering,Artificial Intelligence,Networking,and Parallel/Distributed Computing(SNPD 2007).Piscataway:IEEE, 2007:285-290.
[6]	LI X, ZHOU L, YIN X, et al. A Security-Enhanced Certificateless Designated Verifier Aggregate Signature Scheme for HWMSNs in the YOSO Model[J]. IEEE Internet of Things Journal, 2023, 11(6):10865-10879.
[7]	CHEN H, ZHANG F, SONG R. Certificateless Proxy Signature Scheme with Provable Security[J]. Journal of Software, 2009, 20(3):692-701.
[8]	SEO S H, CHOI K Y, HWANG J Y, et al. Efficient Certificateless Proxy Signature Scheme with Provable Security[J]. Information Sciences, 2012, 188:322-337.
[9]	ZHANG L, ZHANG F, WU Q. Delegation of Signing Rights Using Certificateless Proxy Signatures[J]. Information Sciences, 2012, 184(1):298-309.
[10]	DENG L, ZENG J, HUANG H. Efficient Certificateless Proxy Signature Scheme[J]. International Journal of Foundations of Computer Science, 2016, 27(1):85-100.
[11]	HU X. Security Analysis and Improvement of Proxy Signature Scheme with Certificateless and Blind Properties[C]// 2023 2nd International Conference on Big Data,Information and Computer Network(BDICN).Piscataway:IEEE, 2023:372-375.
[12]	ULLAH R, MEHMOOD A, KHAN M A, et al. An Optimal Secure and Reliable Certificateless Proxy Signature for Industrial Internet of Things[J]. Peer-to-Peer Networking and Applications, 2024:1-16.
[13]	GAMAGE C, LEIWO J, ZHENG Y. An Efficient Scheme for Secure Message Transmission Using Proxy-Signcryption[C]//Proceedings of the Twenty Second Australasian Computer Science Conference.Berlin, Heidelberg:Springer, 1999:18-21.
[14]	QI Y, TANG C, LOU Y, et al. Certificateless Proxy Identity-Based Signcryption Scheme without Bilinear Pairings[J]. China Communications, 2013, 10(11):37-41.
[15]	KHAN M A, ALHAKAMI H, ULLAH I, et al. A Resource-Friendly Certificateless Proxy Signcryption Scheme for Drones in Networks Beyond 5G[J]. Drones, 2023, 7(5):321.
[16]	LO N W, TSAI J L. A Provably Secure Proxy Signcryption Scheme Using Bilinear Pairings[J]. Journal of Applied Mathematics, 2014, 2014(1):454393.
[17]	WU C, YANG L, YUAN B, et al. Convertible Certificateless Proxy Re-Signcryption for Data Access Control in Cloud Computing[C]// International Conference on Computer Application and Information Security(ICCAIS 2023).Washington:SPIE, 2024:1138-1145.
[18]	OBIRI I A, ADDOBEA A A, AFFUM E, et al. A Certificateless Signcryption with Proxy-Encryption for Securing Agricultural Data in the Cloud[J]. Journal of Computer Security, 2024, 32(2):77-115.
[19]	YU H, WANG Z. Construction of Certificateless Proxy Signcryption Scheme from CMGs[J]. IEEE Access, 2019, 7:141910-141919. doi: 10.1109/ACCESS.2019.2943718
[20]	RAMADAN M, ELBEZ G, HAGENMEYER V. Verifiable Certificateless Signcryption Scheme for Smart Grids[C]// 2023 7th International Conference on System Reliability and Safety(ICSRS).Piscataway:IEEE, 2023:181-189.
[21]	ZHANG J, DONG C, LIU Y. Efficient Pairing-Free Certificateless Signcryption Scheme for Secure Data Transmission in IoMT[J]. IEEE Internet of Things Journal, 2023, 11(3):4348-4361.
[22]	VERMA G K, SINGH B B, KUMAR N, et al. An Efficient and Provable Certificate-Based Proxy Signature Scheme for IIoT Environment[J]. Information Sciences, 2020, 518:142-156.
[23]	QU Y, ZENG J. Certificateless Proxy Signcryption in the Standard Model for a UAV Network[J]. IEEE Internet of Things Journal, 2022, 9(16):15116-15127.
[24]	SELVI S, VIVEK S, SHUKLA D, et al. Efficient and Provably Secure Certificateless Multi-Receiver Signcryption[C]// Provable Security: Second International Conference.Berlin,Heidelberg:Springer, 2008:52-67.
[25]	HUNDERA N W, SHUMENG W, MESFIN D, et al. An Efficient Online/Offline Heterogeneous Proxy Signcryption for Secure Communication in UAV Networks[J]. Journal of King Saud University-Computer and Information Sciences, 2024, 36(5):102044.
[26]	HUNDERA N W, AFTAB M U, MESFIN D, et al. An Efficient Heterogeneous Online/Offline Anonymous Certificateless Signcryption with Proxy Re-Encryption for Internet of Vehicles[J]. Vehicular Communications, 2024, 49:100811.
[27]	CREMERSC J F. Scyther:Semantics and Verification of Security Protocols[D]. Eindhoven: Technische Universiteit Eindhoven, 2006.
[28]	BURROWS M, ABADI M, NEEDHAM R. A Logic of Authentication[J]. ACM Transactions on Computer Systems(TOCS), 1990, 8(1):18-36.
[29]	AL-RIYAMI S S, PATERSON K G. Certificateless Public Key Cryptography[C]//International Conference on the Theory and Application of Cryptology and Information Security.Berlin, Heidelberg:Springer, 2003:452-473.
[30]	DOLEV D, YAO A. On the Security of Public Key Protocols[J]. IEEE Transactions on Information Theory, 1983, 29(2):198-208.
[31]	ELAINE B, WILLIAM B, WILLIAM P, et al. Recommendation for Key Management Part 1:General(revision 3)[J]. NIST Special Publication, 2012, 800(57):64.

符号	含义
G	循环群
q	循环群G的素数阶
P	循环群G的生成元
P_pub	系统主公钥
ID_i	网络中实体的真实身份
(x_i,y_i)	网络中实体的无证书公钥密码私钥
(X_i,Y_i)	网络中实体的无证书公钥密码公钥
w	地面管控中心发出的指挥权限信息
w_GCC,W_GCC	地面管控中心发出的指挥权限信息签名
f(x)	多接收者协议中的n阶多项式
(a₀,a₁,…,a_n-1)	f(x)的各项系数
w_crypt	地面控制中心生成的加密指挥权限

安全属性与功能	VERMA^[22]	QU^[23]	SHARMILA^[24]	HUNDERA^[25]	文中方案
双向认证	√	√	√	√	√
指挥权限安全	×	×	×	×	√
指令安全	×	×		×	√
多实体代理	×	×	×	×	√
抵抗重放攻击	√	√	√	√	√
抵抗假冒攻击	√	√	√	√	√
抵抗中间人攻击	√	√	√	√	√
强不可伪造性	√	√	√	√	√

方案	指挥权限下发过程的通信开销	指令安全下发过程的通信开销
VERMA^[22]	896 m	2 816 n
QU^[23]	1 152 m	4608 n
SHARMILA^[24]	512 m+896
HUNDERA^[25]	1 152 m+640	2 680 n
文中方案	256 m+896	2 176 n+2 176

运算类型	地面管控中心计算开销	无人机等计算开销
T_M	3.265	8.006
T_P	46.274	16.382
T_e	4.111	11.672

方案	地面管控中心计算开销	移动指挥中心计算开销
VERMA^[22]	mT_M=3.265m	4T_M=32.024
QU^[23]	mT_M=3.265m	2T_M+T_P=132.394
SHARMILA^[24]	(m+1)(T_M+T_e)=7.376m+7.376	T_M+3T_e+2T_P=275.786
HUNDERA^[25]	mT_M=3.265m	4T_M=32.024
文中方案	(2m+1)T_M=6.53m+3.265	4T_M=32.024