A multi-dimensional multiple access and lightweight continuous authentication combined design system
By combining multidimensional multiple access and lightweight continuous authentication, the system solves the authentication problem of resource-constrained devices in wireless communication, achieves fast and accurate multi-device authentication, and improves system security and communication performance.
Patent Information
- Authority / Receiving Office
- CN · China
- Patent Type
- Patents(China)
- Current Assignee / Owner
- SUZHOU UNIV
- Filing Date
- 2023-05-11
- Publication Date
- 2026-05-12
AI Technical Summary
Lightweight continuous authentication for resource-constrained devices in wireless communication faces challenges such as high computational requirements, large network overhead, and unreliable authentication performance. Traditional methods struggle to achieve efficient and secure authentication in dynamic environments.
The system employs a joint design of multidimensional multiple access and lightweight continuous authentication. Through joint optimization in the time, frequency, and power domains, it utilizes pseudo-random binary sequences and channel reciprocity to achieve fast and accurate user authentication.
It achieves efficient continuous authentication across multiple devices, improves the system's service quality and security, reduces communication latency and computational overhead, and enhances authentication accuracy.
Smart Images
Figure CN116866912B_ABST
Abstract
Description
Technical Field
[0001] This invention relates to the field of network security, specifically to a joint design system for multidimensional multiple access and lightweight continuous authentication. Background Technology
[0002] Due to the public broadcast nature of radio signal propagation and the widespread use of resource-constrained devices, such as IoT devices, wireless communication presents numerous vulnerabilities for attackers. Traditional cryptographic methods face increasing difficulty in deploying on resource-constrained devices and require cumbersome key management and verification processes. Therefore, lightweight continuous authentication is crucial for seamless attack prevention in wireless communication environments.
[0003] Different physical layer security methods can provide lightweight continuous authentication due to their lower computational and network overhead, as well as lower energy consumption. However, channel-related characteristics can be affected by noise and time variations, leading to unreliable authentication performance in dynamic communication environments. Fingerprint-based embedding techniques utilize physical layer characteristics to superimpose tags onto transmitted signals for verification. It exhibits high uncertainty and randomness, but requires an information recovery process before verification, resulting in significant latency. Physical layer key generation techniques rely on channel reciprocity but also suffer from low key generation rates. Blockchain-based continuous authentication schemes do not rely on a trusted third party to manage keys and certificates. However, the inherently high computational and processing overhead and latency of blockchain technology make these schemes undesirable for emerging machine communication and resource-constrained devices. Summary of the Invention
[0004] To overcome the aforementioned shortcomings, the purpose of this application is to propose a joint design system for multidimensional multiple access and lightweight continuous authentication, which can achieve efficient continuous authentication and guarantee the quality of service of the network.
[0005] To achieve the above objectives, this application adopts the following technical solution:
[0006] A joint design system for multidimensional multiple access and lightweight continuous authentication is presented. This joint design system, based on non-orthogonal multiple access technology, explores multiple domains accessed by devices.
[0007] The multiple domains include the time domain, frequency domain, and power domain.
[0008] In the time domain, lightweight continuous authentication is achieved by generating pseudo-random binary sequences and directly verifying the user's access time slot sequences at the base station;
[0009] In the frequency domain, sub-channels are allocated to users to maximize system throughput, while lightweight continuous authentication is achieved by judging whether the sub-channels and time slot sequences are consistent with the predefined ones.
[0010] In the power domain, transmit power is allocated to users to maximize system throughput, while the base station distinguishes multiplexed users with different access time slot sequences by different arrival powers.
[0011] Preferably, the lightweight continuous authentication includes time slot sequence generation, i.e., generating pseudo-random binary sequences that depend on channel reciprocity for all communications between the user and the base station.
[0012] Preferably, the lightweight continuous certification includes the following steps:
[0013] 1) Channel measurement, i.e., the first A user sends an "authentication request" message to the base station. Upon receiving the message, the base station immediately sends an "acknowledgment" message back to the user and collects channel data as follows: ,in It is the amount of data measured in the channel, the first After a user receives a "confirmation" message, channel data is collected and obtained. ;
[0014] 2) Quantization: The extracted channel estimate is quantized into a bit vector. The quantization boundaries for dividing the channel estimate into bit vectors are given, and the base station and the... Each user can obtain a vector. and , The number of quantization bits;
[0015] 3) Pseudo-random binary sequence generation, due to the base station and the... The channel measurement time between users is extremely short. and They will be highly similar but may not be completely identical. In order to be at the base station and the... Each user generates the same pseudo-random binary sequence for authentication, and the base station uses a hash function. Generate a verification vector and transmit it to the user;
[0016] 4) Lightweight continuous authentication, where each user transmits information corresponding to their own pseudo-random binary sequence to the base station in the time domain, where '1' represents a busy period and '0' represents an idle period. Continuous authentication for each user at the base station is performed as follows:
[0017]
[0018] in, It is the first The actual access time slot sequence of each user and These represent the authentication device being used by a legitimate user and by a fraudster, respectively, at a given point in time. occur Access to the device will be denied. The pseudo-random binary sequence generated by relying on the time-varying channel characteristics provides a high degree of randomness and uniqueness for the access time slot sequence of different users.
[0019] Preferably, the generation of pseudo-random binary sequences includes:
[0020] Base stations use hash functions Generate a verification vector and transmit it to the user.
[0021]
[0022] Base stations use the same hash function based on Generate a vector The pseudo-random binary sequence is:
[0023]
[0024] in, Is it using seeds? , , A function to generate pseudo-random binary sequences.
[0025] , ,
[0026] in, , The process of generating pseudo-random binary sequences involves generating sequences at both the user and base station. and If they match, they will be directly used as a pseudo-random binary sequence; otherwise, they will be split into two vectors and the verification will continue until the same part is obtained as a pseudo-random binary sequence.
[0027] Preferably, in this joint design system, the frequency domain also includes sub-channel allocation for multidimensional multiple access and lightweight continuous authentication for all devices, and the allocation process includes:
[0028] Model the network as a graph ,in, It is a vertex set. It is a finite set of edges, where the edges directly connecting two users are designed as follows:
[0029]
[0030] in, Represents the transpose of a vector, user and The definition of a direct edge between them represents the similarity of their visited time slot sequences; the more similar the time slot sequences, the better. The smaller.
[0031] Preferably, the joint design system further includes: shifting the sub-channel allocation problem to the design of the maximum path problem.
[0032]
[0033] in, Representing the One path, and The number of paths designed for a vertex is equal to the number of sub-channels. , Indicates the number of vertices. This is the maximum number of devices that can access a sub-channel.
[0034] The sub-channel allocation problem is solved based on a pre-defined algorithm.
[0035] Preferably, the steps for solving the preset algorithm in this joint design system are as follows:
[0036] 1) Input the relevant parameters, including the access time slot sequence for all users. ,picture , , And order ;
[0037] 2) Select the starting and ending points of all paths, and calculate the minimum... The vertex is taken as the starting point, denoted as . The edge between the starting point and the starting point The largest vertex is taken as the endpoint;
[0038] 3) Solving the maximum path problem means finding... Path, Path contains vertices, such that Maximum. Based on the existing start and end points of each path, continuously select vertices from the remaining vertex set such that all vertices of the path are connected by edges. The sum is maximized until the number of vertices in the path equals the sum of the vertices in the path. ,in The integer symbol;
[0039] 4) Allocate sub-channels for all paths, i.e., assign sub-channels to all users. Sub-channels are allocated based on the channel gain of all users in each path. The allocated channels can be represented as follows: ,in, For the first The user in the first The channel allocation principle is that users in each path choose the same sub-channel to maximize the cumulative channel gain.
[0040] 5) Continuous authentication: After sub-channel allocation, users access the network based on their time slot sequence and the allocated sub-channel, while the base station uses the actual access time slot sequence. and sub-channel Continuous authentication is performed. If the accessed time slot sequence and sub-channel are correct, the user will be authenticated as a legitimate user; otherwise, the user will be identified as a fraudster.
[0041] 6) Output the sub-channel allocation and authentication results, output The assigned sub-channels And the certification results.
[0042] Preferably, in this joint design system, user access in the frequency domain must meet the following conditions:
[0043] 1) Users with similar access time slot sequences are assigned to different sub-channels to minimize multi-user interference; and
[0044] 2) The maximum number of users in a sub-channel is less than the maximum number of devices that can access the sub-channel.
[0045] Preferably, in this joint design system, transmit power is allocated to all users in the power domain:
[0046] No. The user in the first The transmit power in each channel is:
[0047]
[0048] It is the power backoff stage of the target received power. For the target power, The path loss attenuation factor represents the segmented transmission power control. This includes distance-related path loss and log-normal shadow loss.
[0049] Preferably, the decoding order of the base station starts from the lowest... The equipment has the highest Otherwise, a large amount of transmission power will be consumed on devices with fewer access periods.
[0050] Beneficial effects
[0051] Compared with existing technologies, the joint design system of multidimensional multiple access and lightweight continuous authentication proposed in this application can achieve efficient multi-device continuous authentication, and has significant advantages in authentication accuracy and communication performance. Lightweight continuous authentication can be achieved by generating pseudo-random binary sequences and directly verifying the user's access time slot sequence at the base station, without incurring lengthy communication and computation processes. A device is only authenticated as a legitimate user when both its access time slot sequence and sub-channel correspond to the pre-arranged pseudo-random binary sequence, thus improving the system's service quality and security. Attached Figure Description
[0052] Figure 1 A flowchart illustrating a joint design scheme for multidimensional multiple access and lightweight continuous authentication according to an embodiment of this application;
[0053] Figure 2 This is a schematic diagram of the interruption probability in an embodiment of the present application with power backoff levels of 5, 3, and 1;
[0054] Figure 3 A diagram illustrating the comparison of the total rate achieved by different schemes;
[0055] Figure 4 This is a schematic diagram comparing the authentication performance of an embodiment of this application with a physical layer authentication scheme based on kernel learning. Detailed Implementation
[0056] The above-described solution will be further illustrated below with reference to specific embodiments. It should be understood that these embodiments are for illustrative purposes only and are not intended to limit the scope of this application. The implementation conditions used in the embodiments may be further adjusted according to the conditions of specific manufacturers, and the implementation conditions not specified are generally those in routine experiments.
[0057] This application discloses a joint design system for multidimensional multiple access and lightweight continuous authentication. Based on non-orthogonal multiple access technology, this joint design system explores multiple domains of device access, expressing the access time slot sequences, sub-channels, and power allocation of multiple users as a joint optimization problem. Specifically, in the time domain, lightweight continuous authentication can be achieved by generating pseudo-random binary sequences and directly verifying the user's access time slot sequences at the base station, a process that does not incur long delays or high overhead. In the frequency domain, the network is modeled as a graph, solving the maximum path problem in the graph, allocating sub-channels to users to maximize system throughput, and simultaneously achieving lightweight continuous authentication by determining whether the sub-channels and time slot sequences are consistent with predefined parameters. In the power domain, transmit power is allocated to users to maximize system throughput, while the base station distinguishes multiplexed users with different access time sequences using different arrival powers. This implementation provides a fast network access and continuous authentication scheme, which can be widely applied in continuous authentication scenarios for multiple devices in wireless communication environments. In this implementation, the time slot sequence is sometimes also referred to as a time series.
[0058] This joint design system includes lightweight continuous authentication time slot sequence generation, multidimensional multiple access (MMI) access, lightweight continuous authentication subchannel allocation, and MMI power control to achieve continuous and efficient authentication for multiple devices. The system utilizes both time and frequency domains for user access authentication; a device is considered legitimate only if its access time slot sequence and subchannel allocation match a pre-agreed unique pseudo-random binary sequence agreed upon by it and the base station. The system constructs a joint optimization problem involving access time slot sequences, subchannels, and power allocation, which is decomposed and transformed into a maximum path problem to maximize the system's total achievable rate. The system includes multiple access users and a base station, each with the same time slot sequence.
[0059] The following description, in conjunction with the accompanying drawings, will illustrate a joint design system for multidimensional multiple access and lightweight continuous authentication proposed in this application.
[0060] like Figure 1 The diagram shown is a flowchart of a joint design system according to an embodiment of this application. The joint design system includes the following steps when running:
[0061] 1) Lightweight Continuous Authentication (LCA) slot sequence generation: that is, generating pseudo-random binary sequences (PRBS) that depend on channel reciprocity for all communications between users and base stations.
[0062] 1-1 In order to achieve accurate continuous authentication, the pseudo-random binary sequence should meet the following requirements: 1) A pair of transceivers should generate the same pseudo-random binary sequence; 2) The pseudo-random binary sequence should be unknown to any other device and difficult to predict by a cheater; 3) The pseudo-random binary sequence should be dynamically refreshed.
[0063] The 1-2 Lightweight Continuous Certification consists of 4 steps:
[0064] 1) Channel measurement. A user sends an "authentication request" message to the base station. Upon receiving the message, the base station immediately sends an "acknowledgment" message back to the user and collects channel data as follows: ,in This refers to the amount of data measured in the channel. After a user receives a "confirmation" message, channel data is collected and obtained. .
[0065] 2) Quantization. The extracted channel estimate is quantized into a bit vector. The quantization boundaries for dividing the channel estimate into bit vectors are given, and the base station and the... Each user can obtain a vector. and , This represents the number of quantization bits.
[0066] 3) Pseudo-random binary sequence generation. Due to the base station and the... The channel estimation time between users is extremely short. and They will be highly similar but may not be completely identical. In order to be at the base station and the... Each user generates the same pseudo-random binary sequence for authentication, and the base station uses a hash function. Generate a verification vector and transmit it to the user.
[0067]
[0068] Base stations 1-3 use the same hash function based on Generate a vector The pseudo-random binary sequence is:
[0069]
[0070] in Is it using seeds? , , This is a function that generates pseudo-random binary sequences. Furthermore, , ,in , This shows that the generation process of pseudo-random binary sequences involves processing data generated at both the user and base station locations. and If they match, they will be directly used as a pseudo-random binary sequence; otherwise, they will be split into two vectors and the verification will continue until the same part is obtained as a pseudo-random binary sequence.
[0071] 4) Lightweight continuous authentication. Each user transmits information corresponding to their own pseudo-random binary sequence to the base station in the time domain, where '1' indicates a busy period and '0' indicates an idle period. Continuous authentication for each user at the base station is performed as follows:
[0072]
[0073] in It is the first The actual access time slot sequence of each user and These represent the authentication device being used by a legitimate user and the device being used by a fraudster, respectively. If at a given point in time... occur Access to the device will be denied. The pseudo-random binary sequence generated based on time-varying channel characteristics provides a high degree of randomness and uniqueness for the access time slot sequences of different users.
[0074] 2) Subchannel allocation for Multidimensional Multiple Access (MDMA) and Lightweight Continuous Authentication: Design subchannel allocation for MDMA and lightweight continuous authentication for all devices.
[0075] User access in the frequency domain must meet the following requirements:
[0076] 1) Users with similar access time slot sequences are assigned to different sub-channels to minimize multi-user interference.
[0077] 2) The maximum number of users in a sub-channel is less than the maximum number of devices that can access the sub-channel. For example... Figure 2 As shown, the network is modeled as a graph. ,in It is a vertex set. It is a finite set of edges. Edges directly connecting two users are designed as follows:
[0078]
[0079] in, Represents the transpose of a vector, user and The definition of a direct edge between them represents the similarity of their visited time slot sequences. The more similar the time slot sequences, the better. The smaller the value, the better. Then the sub-channel allocation problem is shifted to designing the maximum path size.
[0080]
[0081] in, This represents which path. and For vertices, the number of paths that need to be designed is equal to the number of sub-channels. , Indicates the number of vertices. This represents the maximum number of devices that can access a sub-channel. A joint design algorithm of multidimensional multiple access and lightweight continuous authentication is used to solve the sub-channel allocation problem. This algorithm is greedy; starting from an empty path, it uses any path that can be added to the sub-channel to solve the problem. The steps of the algorithm are as follows:
[0082] 1) Input relevant parameters. Input the access time slot sequence for all users. ,picture , , And order .
[0083] 2) Select the starting and ending points of all paths, and calculate the minimum... The vertex is , recorded as The edge between the starting point and the starting point The largest vertex is taken as the endpoint.
[0084] 3) Solve the maximum path problem. This involves finding... Path, Path contains vertices, such that Maximum. Based on the existing start and end points of each path, continuously select vertices from the remaining vertex set such that all vertices of the path are connected by edges. The sum is maximized until the number of vertices in the path equals the sum of the vertices in the path. ,in The integer symbol.
[0085] 4) Allocate sub-channels for all paths. This involves assigning sub-channels to all users. Sub-channels are allocated based on the channel gain of all users in each path. The allocated channels can be represented as follows: .in, For the first The user in the first The gain on the sub-channel. The channel allocation principle is: users in each path choose the same sub-channel to maximize their cumulative channel gain.
[0086] 5) Continuous authentication. After sub-channel allocation, users access the network based on their time slot sequence and the allocated sub-channel, while the base station uses the actual access time slot sequence. and sub-channel Continuous authentication is performed. If the accessed time slot sequence and sub-channel are correct, the user will be authenticated as a legitimate user; otherwise, they will be identified as a fraudster.
[0087] 6) Output the sub-channel allocation and authentication results. The assigned sub-channels And the certification results.
[0088] 3) Power control for multidimensional multiple access: Base stations require different arrival powers to distinguish multiplexed users with different access time series (i.e., time slot sequences), so access power control is necessary.
[0089] The decoding order of the 3-1 base station always starts from the lowest... The equipment has the highest Otherwise, a large amount of transmission power will be consumed on devices with fewer access periods.
[0090] 3-2nd The user in the first The transmit power in each channel is:
[0091]
[0092] It is the power backoff stage of the target received power. For the target power, The path loss attenuation factor represents the segmented transmission power control. This includes distance-related path loss and log-normal shadow loss.
[0093] Next, computer simulation experiments will be used to verify the joint design scheme of multidimensional multiple access and lightweight continuous authentication proposed in this application.
[0094] A. Experimental conditions:
[0095] Consider an uplink multi-carrier non-orthogonal multiple access (MC-NOMA) system. The base station employs power-domain non-orthogonal multiple access (NOMA) technology, and the user... Data is transmitted using superposition coding (SC) on each sub-channel. The base station applies successive interference cancellation (SIC) to decode the superimposed signal on each sub-channel, assuming the base station knows the system's complete channel state information (CSI). The number of devices connected to the base station... The maximum number of channels is 36, the number of sub-channels is 12, and the carrier frequency is 3.5 GHz. The minimum communication rate for each user is set to bps / Hz.
[0096] B. Experimental Procedure:
[0097] The following procedure is used to simulate and verify the joint design scheme of multidimensional multiple access and lightweight continuous authentication.
[0098] 1) Channel allocation;
[0099] 2) Channel measurement;
[0100] 3) Pseudo-random binary sequence generation;
[0101] 4) Lightweight continuous certification for the equipment;
[0102] 5) Construct the network diagram;
[0103] 6) Set the relevant parameters, =36, =12;
[0104] 7) Select the start and end points for all paths;
[0105] 8) Solve the maximum path problem;
[0106] 9) Assign sub-channels to all paths;
[0107] 10) Continuous certification for multiple devices;
[0108] 11) Output the sub-channel allocation results and authentication results;
[0109] 12) Power control for multidimensional multiple access.
[0110] C. Experimental Results:
[0111] like Figure 2 As shown, Figure 2 The results describe a comparison of outage probabilities among different users accessing the same sub-channel. It can be seen that, in all cases, user 1 has the lowest outage probability. This is because user 1 is the most powerful device. The base station detects user 1's signal and first decodes it to obtain reliable signal detection. Furthermore, in... When the value is 5, the interruption probability for user 1 is the lowest because it is the same as... =3 and Compared to the case where user 1 is assigned a lower transmit power, the other two users are allocated less transmit power, resulting in less interference to user 1's signal. Conversely, in... When the value is 5, users 2 and 3 have the highest interruption probability because their transmission power is lower.
[0112] like Figure 3 As shown, Figure 3The document describes the achievable total rate of the MDMA-LCA scheme proposed in this application compared to the Orthogonal Multiple Access (OMA)-LCA scheme and the NOMA scheme under different conditions. The NOMA scheme does not consider user authentication and suffers from extremely high security risks in wireless communication environments. Figure 3 As can be seen, in all cases, the proposed scheme outperforms the OMA-LCA scheme in terms of the total achievable rate of the system. This is because the higher performance is achieved by using SIC to multiplex multiple devices on the same frequency resource. However, since the MDMA-LCA scheme proposed in this application incorporates an LCA process based on identifying the time series of multi-user access, its achievable total rate is somewhat lower than that of the NOMA scheme. Figure 3 This shows that the loss in overall speed is acceptable while providing enhanced security services. Furthermore, in When the sum of all possible outcomes is 1, the overall success rate is the highest because... =5 and With a power rating of 3, all users are equipped with the highest possible transmit power.
[0113] like Figure 4 The diagram illustrates the authentication performance. The proposed scheme exhibits a sharp decrease in false negative rate after several time slots, while the kernel-learning-based physical layer authentication (KLPLA) scheme and the watermark-based physical layer authentication (WPLA) scheme remain stable. The proposed scheme utilizes each user's access time slot sequence and sub-channels to perform continuous authentication immediately at the base station. Although it suffers from a high false negative rate in the first few time slots, it achieves lightweight security. However, after several time slots, the false negative rate becomes very low, indicating that the proposed scheme provides an effective implementation for simultaneously and continuously identifying multiple users in a wireless communication environment.
[0114] The examples above are only for illustrating the technical concept and features of this application, and are intended to enable those skilled in the art to understand the content of this application and implement it accordingly. They should not be used to limit the scope of protection of this application. All equivalent changes or modifications made in accordance with the spirit and essence of this application should be included within the scope of protection of this application.
Claims
1. A joint design system for multidimensional multiple access and lightweight continuous authentication, characterized in that, The joint design system, based on non-orthogonal multiple access technology, explores multiple domains accessed by the device. The multiple domains include the time domain, frequency domain, and power domain. In the time domain, lightweight continuous authentication is achieved by generating pseudo-random binary sequences and directly verifying the user's access time slot sequences at the base station; In the frequency domain, sub-channels are allocated to users to maximize system throughput, while lightweight continuous authentication is achieved by judging whether the sub-channels and time slot sequences are consistent with the predefined ones. In the power domain, transmit power is allocated to users to maximize system throughput, while the base station distinguishes multiplexed users with different access time slot sequences by different arrival powers; The lightweight continuous authentication includes time slot sequence generation, that is, generating pseudo-random binary sequences that depend on channel reciprocity for all communications between the user and the base station; The lightweight continuous authentication includes the following steps: 1) Channel measurement, i.e., the first A user sends an "authentication request" message to the base station. Upon receiving the message, the base station immediately sends an "acknowledgment" message back to the user and collects channel data as follows: ,in It is the amount of data measured in the channel, the first After a user receives a "confirmation" message, channel data is collected and obtained. ; 2) Quantization: The extracted channel estimate is quantized into a bit vector. The quantization boundaries for dividing the channel estimate into bit vectors are given, and the base station and the... Each user can obtain a vector. and , The number of quantization bits; 3) Pseudo-random binary sequence generation, due to the base station and the... The channel measurement time between users is extremely short. and They will be highly similar but may not be completely identical; in order to be at the base station and the... Each user generates the same pseudo-random binary sequence for authentication, and the base station uses a hash function. Generate a verification vector and transmit it to the user; 4) Lightweight continuous authentication, where each user transmits information corresponding to their own pseudo-random binary sequence to the base station in the time domain, where '1' represents a busy period and '0' represents an idle period. Continuous authentication for each user at the base station is performed as follows: in, It is the first The actual access time slot sequence of each user and These represent the authentication device being used by a legitimate user and by a fraudster, respectively, at a given point in time. occur Access to the device will be denied. The pseudo-random binary sequence generated by relying on the time-varying channel characteristics provides a high degree of randomness and uniqueness for the access time slot sequence of different users. In the frequency domain, it also includes sub-channel allocation for multidimensional multiple access and lightweight continuous authentication for all devices. The allocation process includes: Model the network as a graph ,in, It is a vertex set. It is a finite set of edges, where the edges directly connecting two users are designed as follows: in, Represents the transpose of a vector, user and The definition of a direct edge between them represents the similarity of their visited time slot sequences; the more similar the time slot sequences, the better. The smaller; In the power domain, this includes allocating transmit power to all users: No. The user in the first The transmit power in each channel is: It is the power backoff stage of the target received power. For the target power, The path loss attenuation factor represents the segmented transmission power control. This includes distance-related path loss and log-normal shadow loss.
2. The joint design system for multidimensional multiple access and lightweight continuous authentication as described in claim 1, characterized in that, The generation of pseudo-random binary sequences includes: Base stations use hash functions Generate a verification vector and transmit it to the user. Base stations use the same hash function based on Generate a vector The pseudo-random binary sequence is: in, Is it using seeds? , , A function to generate pseudo-random binary sequences. ， ， in, , The process of generating pseudo-random binary sequences involves generating sequences at both the user and base station. and If they match, they will be directly used as a pseudo-random binary sequence; otherwise, they will be split into two vectors and the verification will continue until the same part is obtained as a pseudo-random binary sequence.
3. The joint design system for multidimensional multiple access and lightweight continuous authentication as described in claim 1, characterized in that, Also includes: The subchannel allocation problem is shifted to the maximum path design problem. in, Representing the One path, and The number of paths designed for a vertex is equal to the number of sub-channels. , Indicates the number of vertices. This is the maximum number of devices that can access a sub-channel. The sub-channel allocation problem is solved based on a pre-defined algorithm.
4. The joint design system for multidimensional multiple access and lightweight continuous authentication as described in claim 3, characterized in that, Also includes: The steps for solving the problem using the preset algorithm are as follows: 1) Input the relevant parameters, including the access time slot sequence for all users. ,picture , , And order ; 2) Select the starting and ending points of all paths, and calculate the minimum... The vertex is taken as the starting point, denoted as . The edge between the starting point and the starting point The largest vertex is taken as the endpoint; 3) Solving the maximum path problem means finding... Path, Path contains vertices, such that Maximum; based on the existing start and end points of each path, continuously select vertices from the remaining vertex set such that all vertices of the path are connected by edges. The sum is maximized until the number of vertices in the path equals the sum of the vertices in the path. ,in The integer symbol; 4) Allocate sub-channels for all paths, i.e., assign sub-channels to all users; sub-channels are allocated based on the channel gain of all users in each path, and the allocated channels can be represented as follows: ,in, For the first The user in the first The channel allocation principle is that users in each path choose the same sub-channel to maximize the cumulative channel gain. 5) Continuous authentication: After sub-channel allocation, users access the network based on their time slot sequence and the allocated sub-channel, while the base station uses the actual access time slot sequence. and sub-channel Continuous authentication is performed. If the accessed time slot sequence and sub-channel are correct, the user will be authenticated as a legitimate user; otherwise, the user will be identified as a fraudster. 6) Output the sub-channel allocation and authentication results, output The assigned sub-channels And the certification results.
5. The joint design system for multidimensional multiple access and lightweight continuous authentication as described in claim 1, characterized in that, Users must meet the following conditions to access the frequency domain: 1) Users with similar access time slot sequences are assigned to different sub-channels to minimize multi-user interference; and 2) The maximum number of users in a sub-channel is less than the maximum number of devices that can access the sub-channel.
6. The joint design system for multidimensional multiple access and lightweight continuous authentication as described in claim 1, characterized in that, The decoding order of the base station starts from the lowest... The equipment has the highest Otherwise, a large amount of transmission power will be consumed on devices with fewer access periods.