Security authentication method for aviation broadband communication system

Abstract

The aviation broadband communication system comprises an airplane station, a ground station, a ground station controller and a security authentication gateway, the air-ground security authentication of the airplane accessing the security authentication gateway is carried out for the aviation broadband communication system, and the method comprises the following steps: the airplane initiates an authentication request to the security authentication gateway; the security authentication gateway verifies the identity of the airplane; carrying out aircraft identity legality judgment and key derivation; the security authentication gateway returns an aircraft authentication response; judging the legality of the identity of the gateway; the airplane sends key confirmation; the gateway confirms the session master key. According to the invention, an SM3 / SM4 algorithm authenticated by the State Cryptographic Administration is adopted, encryption and decryption operations are realized through PCI-E password card hardware, and a traditional communication security scheme depending on foreign algorithms is replaced. According to the invention, identity authentication and key negotiation functions are efficiently completed in a mode of pre-sharing the root key and an MAC verification mechanism, and the problem of complex certificate management of an existing security authentication scheme based on a PKI system is avoided.

Images