混沌映射与中国剩余定理增强的切换认证方案

doi:10.19665/j.issn1001-2400.20240313

Abstract

Abstract:

As the next generation of the high-speed railway mobile communication system in China,the safety of 5G-R is crucial for ensuring railway operation safety.Aiming at the problems of 5G-R network handover authentication process,such as vulnerability to desynchronization attack,lack of forward security and high computing cost,an enhancement scheme based on chebyshev chaotic mapping and the Chinese remainder theorem for high-speed railway handover authentication is proposed.First,based on chebyshev chaotic mapping semigroup,a key negotiation mechanism is designed to realize bidirectional identity authentication between source base station which can effectively resist pseudo-base stations and desynchronization attacks and target base station during handover authentication.Then,by using the secret sharing principle of the Chinese remainder theorem,the session key of the train and target base station is derived,which ensures the secure transmission of link count value next-hop chaining count during handover,and overcomes the shortage of forward security in handover authentication.Finally,the security of the proposed method is verified by using the BAN logic formalization theory and Scyther security analysis tool,and the proposed method is compared with similar protocols for security and efficiency analysis.The results show that the proposed scheme has higher security and better performance than the comparison method in terms of communication and computing overhead,and can effectively meet the requirements of 5G-R handover authentication security.

Key words: high-speed railway, 5G-R wireless communication, handover security, chaos map, key negotiation

CLC Number:

TP391

CHEN Yong, CHANG Ting, ZHANG Bingwang. Handover authentication enhancement scheme based on the chaos map and Chinese remainder theorem[J].Journal of Xidian University, 2024, 51(4): 192-205.

Figures/Tables 11

符号	说明	长度/bit
SK	s-gNB和t-gNB的密钥	128
K_gNB	gNB的密钥	128
ID	身份	128
SNID	服务网络身份
SQN	序列号	48
MAC,XMAC	消息认证码	256
RES,XRES	响应消息	64
T	时间戳	64
HRES^/HXRES^	响应消息	64
AUTN	认证令牌
Hash	哈希运算	256
NH	K_AMF派生的密钥	256
K_AMF	AMF导出的密钥	256
$K N G - R A N *$	UE和t-gNB间通信密钥	256
N	随机数	128
NCC	NH的计数器	3
KDF	键推导函数
PCI	物理单元标识	128
ARFCN-DL	绝对射频信道号下行链路
AUSF	HN中认证服务功能
UDM	统一数据管理
ARPF	身份认证存储和处理库	128

规则	符号	含义
消息含义规则R₁	$P \| ≡ P ↔ K Q, P ◁ X K P \| ≡ Q \| ~ X$	P相信P与Q之间具有共享密钥K,当P收到由共享密钥K加密的消息X之后,则P相信Q曾经发送过消息X。
随机数验证规则R₂	$P \| ≡ # (X), P \| ≡ Q \| ~ X P \| ≡ Q \| ≡ X$	如果P相信消息X具有新鲜性,且P相信Q曾经发送过消息X,则P相信Q相信X。
管辖权规则R₃	$P \| ≡ Q \| ⇒ X, P \| ≡ Q \| ≡ X P ≡ X$	如果P相信Q拥有对X的管辖权,且P相信Q相信X,则P相信X。
新鲜度规则R₄	$P \| ≡ # (X) P \| ≡ # (X, Y)$	如果一个消息的部分具有新鲜性,则消息整体也具有新鲜性。

方案	UE计算开销/ms	gNB计算开销/ms	总计算开销/ms
文献[5]	4T_H+T_AES≈9.40	2T_H+3T_AES≈23.80	6T_H+4T_AES≈33.20
文献[11]	6T_H+4T_Eca+2T_Ecm+3T_Exp≈152.79	4T_H+3T_Eca+T_Ecm+5T_Exp≈175.10	10T_H+7T_Eca+3T_Ecm+8T_Exp≈327.89
文献[15]	6T_Ecm+6T_H+5 $T A r t$ +6T_Mul≈143.52	6T_Ecm+5T_H+5 $T A r t$ +6T_Mul≈243.04	12T_Ecm+11T_H+10 $T A r t$ +12T_Mul≈386.56
文献[18]	7T_Ecm+6T_H+6 $T A r t$ +5T_Mul≈166.99	5T_Ecm+6T_H+4 $T A r t$ +4T_Mul≈120.03	12T_Ecm+12T_H+10 $T A r t$ +9T_Mul≈287.02
文中方案	14T_H+3T_Exp+2T_AES≈100.49	5T_H+T_Exp+2T_AES+6T_c≈154.65	19T_H+6T_c+4T_Exp+4T_AES≈255.14

References 29

[1]	陈永, 詹芝贤, 刘雯. 下一代高速铁路LTE-R时间同步网协议脆弱性分析[J]. 铁道学报, 2023, 45(1):63-74.
	CHEN Yong, ZHAN Zhixian, LIU Wen. Vulnerability Analysis of Next-Generation High-Speed Railway LTE-R Time Synchronization Network Protocol[J]. Journal of the China Railway Society, 2023, 45(1):63-74.
[2]	崔新雨, 伍杰, 周一青, 等. 空天地一体化融合组网的挑战与关键技术[J]. 西安电子科技大学学报, 2023, 50(1):1-11.
	CUI Xinyu, WU Jie, ZHOU Yiqing, et al. Challenges and Key Technologies of Air-Space-Ground Integrated Network[J]. Journal of Xidian University, 2023, 50(1):1-11.
[3]	GUO Y, YU Y, SUN B, et al. TCP-E:AnEnhanced Congestion Control Algorithm for Reliable Communication in 5G-R[J]. Lecture Notes in Electrical Engineering, 2022,867:99-109.
[4]	王宇. 高速移动场景下的无线通信安全认证技术研究[D]. 成都: 西南交通大学, 2022.
[5]	LIU Y B, HUO L J, ZHOU G. TR-AKA:A Two-Phased,Registered Authentication and Key Agreement Protocol for 5G Mobile Networks[J]. IET Information Security, 2022, 16(3):193-207.
[6]	WANG Y, ZHANG W F, WANG X M, et al. Improving the Security of LTE-R for High-Speed Railway:from the Access Authentication View[J]. IEEE Transactions on Intelligent Transportation Systems, 2022, 23(2):1332-1346.
[7]	陈永, 刘雯, 常婷. 基于量子密钥的高速铁路异构网络安全切换[J]. 铁道学报, 2023, 45(11):78-89.
	CHEN Yong, LIU Wen, CHANG Ting. Safe Handoff Scheme for High-Speed Railway Heterogeneous Networks Based on Quantum Key[J]. Journal of the China Railway Society, 2023, 45(11):78-89.
[8]	赵越, 田波, 陈周国, 等. 基于预认证的高速列车快速安全切换机制[J]. 铁道学报, 2020, 42(6):64-69.
	ZHAO Yue, TIAN Bo, CHEN Zhouguo, et al. A Secure Fast Handoff Mechanism Based on Pre-Certification for High-Speed Trains[J]. Journal of the China Railway Society, 2020, 42(6):64-69.
[9]	崔琪楣, 赵文静, 顾晓阳, 等. 面向B5G网络的高效切换认证与安全密钥更新机制[J]. 通信学报, 2021, 42(12):96-108. doi: 10.11959/j.issn.1000-436x.2021240
	CUI Qimei, ZHAO Wenjing, GU Xiaoyang, et al. Efficient Handover Authentication and Security Key-Updating Mechanism for B5G Networks[J]. Journal on Communications, 2021, 42(12):96-108. doi: 10.11959/j.issn.1000-436x.2021240
[10]	LIU T, WU F, LI X, et al. A New Authentication and Key Agreement Protocol for 5G Wireless Networks[J]. Telecommunication Systems, 2021, 78(3):317-329.
[11]	GUPTA S, PARNE B L, CHAUDHARI N S, et al. SEAI:Secrecy and Efficiency Aware Inter-gNB Handover Authentication and Key Agreement Protocol in 5G Communication Network[J]. Wireless Personal Communications, 2022, 122(4):2925-2962.
[12]	CAO J, MA M, FU Y, et al. CPPHA:Capability-Based Privacy-Protection Handover Authentication Mechanism for SDN-Based 5G Hetnets[J]. IEEE Transactions on Dependable and Secure Computing, 2019, 18(3):1182-1195.
[13]	XIAO Y L, GAO S. 5GAKA-LCCO:A Secure 5G Authentication and Key Agreement Protocol with Less Communication and Computation Overhead[J]. Information(Switzerland), 2022, 13(5):1-22.
[14]	PARNE B L, GUPTA S, GANDHI K, et al. PPSE:Privacy Preservation and Security Efficient AKA Protocol for 5G Communication Networks[C]//Advanced Networks and Telecommunications Systems(ANTS). Piscataway:IEEE, 2020:1-6.
[15]	ZHANG Y, DENG R H, BERTINO E, et al. Robust and Universal Seamless Handover Authentication in 5G Hetnets[J]. IEEE Transactions on Dependable and Secure Computing, 2019, 18(2):858-874.
[16]	ROY P K, SAHU P, BHATTACHARYA A. Fasthand:A Fast Handover Authentication Protocol for Densely Deployed Small-Cell Networks[J]. Journal of Network and Computer Applications, 2022:103435.
[17]	SHARMA A, SHARMA I, JAIN A. A Construction of Security Enhanced and Efficient Handover AKA Protocol in 5G Communication Network[C]//2019 10th International Conference on Computing,Communication and Networking Technologies(ICCCNT).Piscataway:IEEE, 2019: 1-6.
[18]	KUMAR A, OM H. Design of A USIM and ECC Based Handover Authentication Scheme for 5G-WLAN Heterogeneous Networks[J]. Digital Communications and Networks, 2020, 6(3):341-353.
[19]	AAMIR M, LUCA B, SARDER F A, et al. IndustrialLot in 5G-and-beyond Networks:Vision,Architecture,and Design Trend[J]. IEEE Transactions on Industrial Informatics, 2022, 8(6):4122-4137.
[20]	TANG Q, ERMIS O, NGUYEN C D, et al. A Systematic Analysis of 5G Networks with A Focus on 5G Core Security[J]. IEEE Access. 2022,10:18298-18319.
[21]	HUANG J, QIAN Y. A Secure and Efficient Handover Authentication and Key Management Protocol for 5G Networks[J]. Journal of Communications and Information Networks, 2020, 5(1):40-49. doi: j.issn.2096-1081.2020.05.04
[22]	MO J, HU Z, SHEN W. A Provably Secure Three-Factor Authentication Protocol Based on Chebyshev Chaotic Mapping for Wireless Sensor Network[J]. IEEE Access, 2022,10:12137-12152.
[23]	BACCOURI S, FARHAT H, AZZABI T, et al. Lightweight Authentication Scheme Based on Elliptic Curve El Gamal[J]. Journal of Information and Telecommunication, 2024, 8(2):231-261.
[24]	张文芳, 孙海锋, 王宇, 等. 基于自更新哈希链的安全高效车-地鉴权方案[J]. 西南交通大学学报, 2020, 55(6):1171-1180.
	ZHANG Wenfang, SUN Haifeng, WANG Yu, et al. Security and Efficiency Enhanced Authentication Scheme Based on Self-Updated Hash Chain for Train-Ground Communication[J]. Journal of Southwest Jiaotong University, 2020, 55(6):1171-1180.
[25]	王宇, 张文芳, 王小敏, 等. 基于匿名代理签名的LTE-R车-地无线通信安全认证方案[J]. 铁道学报, 2020, 42(3):76-84.
	WANG Yu, ZHANG Wenfang, WANG Xiaomin, et al. A Train-Ground Security Authentication Scheme Based on Anonymous Proxy Signature for LTE-R System[J]. Journal of the China Railway Society, 2020, 42(3):76-84.
[26]	秦树增, 赵志鹏, 杨胜, 等. 5G-R承载CTCS-3级列控数据传输研究(2023)[J/OL]. 铁道标准设计,[2024-03-02].https://doi.org/10.13238/j.issn.1004-2954.202306070001.
	QIN Shuzeng, ZHAO Zhipeng, YANG Sheng, et al. Study on Transmission of CTCS-3 Train Control Data in 5G-R Network(2023)[J/OL]. Railway Standard Design,[2024-03-02].https://doi.org/10.13238/j.issn.1004-2954.202306070001.
[27]	CARMAN D W, KRUUS P S, MATT B J. Constraints and Approaches for Distributed Sensor Network Security[J]. Nai Labs Technical Report, 2000, 1(1):1-39.
[28]	ZHANG L, TANG S, ZHU S. An Energy Efficient Authenticated Key Agreement Protocol for SIP-Based Green VoIP Networks[J]. Journal of Network and Computer Applications, 2016,59:126-133.
[29]	吴端坡, 金心宇, 蒋路茸, 等. 高速铁路网络环境下掉话率分析[J]. 浙江大学学报(工学版), 2015, 49(4):705-710.
	WU Duanpo, JIN Xinyu, JIANG Lurong, et al. Dropped-Call Probability in High Speed Railway Environment[J]. Journal of Zhejiang University(Engineering Science), 2015, 49(4):705-710.

方案	身份认证性	身份隐私性	前后向安全性	中间人攻击	抗伪基站攻击	抵御DoS攻击	去同步攻击
文献[5]	√	√	×	×	×	×	×
文献[11]	√	×	√	√	√	√	×
文献[15]	√	×	×	×	×	√	√
文献[18]	√	×	√	×	×	√	√
文中方案	√	√	√	√	√	√	√

方案	UE接收总比特数	UE发送总比特数	总能量消耗/μJ
文献[5]	896	512	1 101
文献[11]	1573	2 635	1 885
文献[15]	2 752	3 648	2 828
文献[18]	544	1 024	1 304
文中方案	963	608	1 151

Handover authentication enhancement scheme based on the chaos map and Chinese remainder theorem

RichHTML

PDF (PC)

Like

Knowledge

Abstract

Cite this article

share this article

Figures/Tables 11

References 29

Related Articles 1

Metrics

Comments

Recommended 0

方案	消息数量/条	通信开销/bit
文献[5]	7	1 152
文献[11]	12	4 320
文献[15]	5	4 906
文献[18]	9	4 508
文中方案	13	3 368