Distributed access authentication management method in LEO satellite network

Abstract

The invention discloses a distributed access authentication management method in an LEO satellite network. By adoption of an identity-based cryptosystem, the public and private key pair of a user and a satellite node is rapidly generated by utilization of the private key of a key generation centre; furthermore, identity information is appointed in an identification field, so that role differentiation in a system is realized; simultaneously, on the basis of a chain distributed storage technology of a blockchain, a trusted chain taking the key generation centre and a satellite as trust main bodies is constructed; the identity authentication function for rapid access authentication and inter-satellite rapid switching of users can be realized; the method is suitable for dynamic topology and frequent switching of a satellite-to-earth link in the LEO satellite network; on the other hand, the distributed storage technology of the blockchain is adopted in the method; the trusted chain is used as a consensus mechanism; related information, such as user registration, cancel, login, logout and switching, can be recorded; the accuracy, the integrity, the consistency, the retrospective property and the non-tampering property of user logs can be ensured; and thus, bottleneck restriction of centre nodes on the access function and the authentication property can be avoided.

Description

technical field [0001] The present invention relates to encryption and decryption, identity authentication and distributed database technology, in particular, a database applicable to LEO satellite networks that can realize security authentication, fast switching, and distributed recording and storage of information such as registration, logout, login, logout, and switching. method. Background technique [0002] The identity-based cryptosystem (IBC) was first proposed by Shamir in 1984. Its biggest advantage is that each node can use its own identity to generate a public key, which can be calculated by the key generation center (KGC) accordingly. Private key, when a user needs to securely send information to another user, he only needs to use the receiver's identity to calculate its public key and use it for encryption, and the receiver uses KGC to calculate and return to his own private key for decryption , avoiding the overhead of key management and digital certificate is...

AI Technical Summary

Problems solved by technology

On the other hand, the authentication method used in the traditional satellite network generally has a large calculation and communication overhead, and it is not suitable for the LEO satellite network with the characteristics of dynamic topology and frequent switching of communication links. Motorola Corporation of the United States Take the Iridium system as an example, the user can see a satellite for about 10 minutes, so it is necessary to develop a method that can quickly perform authentication, and at the same time, when frequent link switching occurs, it can realize user nodes between different satellites Fast Switching Security Authentication Method

Images