计算机科学 ›› 2025, Vol. 52 ›› Issue (11A): 241200183-7.doi: 10.11896/jsjkx.241200183

• 信息安全 • 上一篇    下一篇

轻量级航空宽带通信系统安全认证协议

陈洪苇, 岳猛   

  1. 中国民航大学安全科学与工程学院 天津 300300
  • 出版日期:2025-11-15 发布日期:2025-11-10
  • 通讯作者: 岳猛(myue_23@163.com)
  • 作者简介:sayosmething@163.com)
  • 基金资助:
    国家自然科学基金(62172418);天津市自然科学基金(21JCZDJC00830);国家重点研发项目(2022YFB3904503)

Lightweight Aeronautical Broadband Communications System Security Authentication Protocol

CHEN Hongwei, YUE Meng   

  1. School of Safety Science and Engineering,Civil Aviation University of China,Tianjin 300300,China
  • Online:2025-11-15 Published:2025-11-10
  • Supported by:
    National Natural Science Foundation of China(62172418),Natural Science Foundation of Tianjin China(21JCZDJC00830) and National Key R&D Program of China(2022YFB3904503).

摘要: 当前,航空通信系统正面临着频段饱和的挑战,且缺少相关的安全标准和防御措施,存在航空通信数据易被非法窃取和篡改的问题。为增强航空通信系统的安全性,优化地空通信的效率,提出了一种基于对称加密的轻量级航空宽带通信系统安全认证协议。该协议旨在确保飞机与地面网关能够相互验证身份,实现数据的安全传输。通过预先共享根密钥和校验消息验证码的方式,此协议的平均报文开销为59字节,在保持轻量级的同时,有效地规避了现有航空通信系统中公钥体制认证方案所面临的证书管理难题,为身份认证过程提供了坚固的网络安全屏障。通过Scyther工具的形式化建模验证和系统抓包分析测试,证实了此协议在带宽受限的航空通信环境中的高效适用性和可靠性。

关键词: 安全认证协议, 航空宽带通信系统, 对称加密, 密钥协商, 网络安全

Abstract: Currently,aeronautical communications system is facing the challenge of spectrum saturation and lack relevant security standards and defense measures,which makes aeronautical communications data vulnerable to illegal interception and tampering.To enhance the security of aeronautical communications system and optimize the efficiency of ground-to-air communications,a lightweight aeronautical broadband communications system security authentication protocol based on symmetric encryption has been proposed.This protocol aims to ensure that aircraft and ground gateway can mutually authenticate identities and securely transmit data.By relying on pre-shared root keys and message authentication code verification operations,the protocol has an average message overhead of 59 bytes,effectively circumventing the certificate management issues faced by existing aeronautical communications system with public key authentication schemes while maintaining its lightweight nature,and providing a robust network security barrier for the identity authentication process.Through formal modeling verification with the Scyther tool and system packet analysis testing,the protocol’s high efficiency and reliability in bandwidth-limited aeronautical communications environments have been confirmed.

Key words: Security authentication protocol, Aeronautical broadband communications system, Symmetric encryption, Key agreement, Cybersecurity

中图分类号: 

  • TP393
[1]新华社.今年我国民航旅客运输量有望创历史新高[EB/OL].(2024-12-04)[2024-12-24].https://www.gov.cn/lianbo/bumen/202408/content_6968117.htm.
[2]Airbus.Global Market Forecast 2024-2043[EB/OL].(2024-12-03)[2024-12-24].https://www.airbus.com/sites/g/files/jlcbta136/files/2024-07/GMF%202024-2043%20Presentation_4DTS.pdf.
[3]ZHU Y B,WANG Z P.LDACS development status and challenges [J].Acta Aeronautica et Astronautica Sinica,2024,45(6):029161.
[4]GRAUPL T,MÄURER N,SCHNELL M.LDACS A/G Specification[R].German Aerospace Center(DLR),SESAR2020 PJ14-W2-60 D3.1.230,2023.[Accessed 01/11/2023].
[5]MÄURER N,BILZHAUSE A.A Cybersecurity Architecturefor the L-band Digital Aeronautical Communications System(LDACS)[C]//2018 IEEE/AIAA 37th Digital Avionics Systems Conference(DASC).London,UK:IEEE,2018:1-10.
[6]MÄURER N,GRÄUPL T,GENTSCH C,et al.Comparing Different Diffie-Hellman Key Exchange Flavors for LDACS[C]//2020 AIAA/IEEE 39th Digital Avionics Systems Conference(DASC).San Antonio,TX,USA:IEEE,2020:1-10.
[7]MÄURER N,GENTSCH C,GRÄUPL T,et al.Formal Security Verification of the Station-to-Station based Cell-attachment Procedure of LDACS[C]//2021the 18th SECRYPT.2021:603-610.
[8]EWERT T,MÄURER N,GRÄUPL T.Improving UsableLDACS Data Rate via Certificate Validity Optimization[C]//2022 Integrated Communication,Navigation and Surveillance Conference(ICNS).Dulles,VA,USA:IEEE,2022:1-9.
[9]MÄURER N,GRÄUPL T,SCHMITT C.Efficient Control-Channel Security for the Aeronautical Communications System LDACS[C]//2023 IEEE 24th International Symposium on a World of Wireless,Mobile and Multimedia Networks(WoWMoM).Boston,MA,USA:IEEE,2023:407-412.
[10]MÄURER N,GRÄUPL T,SCHMITT C,et al.PMAKE:Physical Unclonable Function-based Mutual Authentication Key Exchange Scheme for Digital Aeronautical Communications[C]//2021 IFIP/IEEE International Symposium on Integrated Network Management(IM).Bordeaux,France:IEEE,2021:206-214.
[11]KHAN S,GABA G S,GURTOV A,et al.Enhancing Cybersecurity for LDACS:a Secure and Lightweight Mutual Authentication and Key Agreement Protocol[C]//2023 IEEE/AIAA 42nd Digital Avionics Systems Conference(DASC).Barcelona,Spain:IEEE,2023:1-10.
[12]SANTANA-ANDREO A,SARAZA-CANFLANCA P,CAS-TRO-LOPEZ R,et al.Reliability improvement of SRAM PUFs based on a detailed experimental study into the stochastic effects of aging[J].AEU - International Journal of Electronics and Communications,2024,176:155147.
[13]KIM H.5G core network security issues and attack classification from network protocol perspective[J].Journal of Internet Services and Information Security,2020,10(2):1-15.
Viewed
Full text


Abstract

Cited

  Shared   
  Discussed   
No Suggested Reading articles found!