卫星网络密钥管理模型设计与仿真.docVIP

第 21卷第 13期 系 统 仿 真 学 报 ?V ol. 21 No. 13 2009年 7月 Journal of System Simulation Jul., 2009 卫星网络密钥管理模型设计与仿真 纪豫宣 1,2, 马恒太 1, 郑 刚 1, 涂勇策 1,2 (1.中国科学院软件所综合信息系统国家级重点实验室,北京 100190; 2. 中国科学院研究生院,北京 100190 摘 要:密钥管理系统为网络中的各节点提供密钥的分配和更新服务, 是实施网络安全服务, 保证 信息安全的基础。针对卫星网络的结构和通信特点, 设计了一种新的包含会话密钥、主密钥和公 钥的密钥管理模型 。 首先, 设计了公钥更新协议, 并对其安全性进行了分析; 其次, 通过对比分析, 对会话密钥更新和主密钥更新的策略进行了设计,并对其安全性以及效率进行了详细分析。最后, 在卫星网络仿真环境下实现了密钥更新过程。结合仿真测试数据,与 IBM 混合密钥管理模型进行 比较, 并给出了设计密钥更新策略时的重要参考依据 。 关键词:卫星网络;密钥管理;模型;协议;仿真 中图分类号 :TP391.9 文献标识码 :A 文章编号:1004-731X (2009 13-4153-06 Design and Simulation of Key Management Model for Satellite Networks JI Yu-xuan1,2, MA Heng-tai1, ZHENG Gang1, TU Yong-ce1,2 (1. National Key Laboratory of Integrated Information System Technology, Institute of Software, Chinese Academy of Sciences, Beijing 100190, China; 2. Graduate University of Chinese Academy of Sciences, Beijing 100190, China Abstract: Key management system is in charge of key distribution and updating services for the networks. It is fundamental in providing secure services and ensuring information security. Based on the structure and communication features of satellite networks, a key management model was proposed which includes certificates, primary keys and session keys. Firstly, a protocol was designed for updating certificates of satellites and its security was studied. Secondly, a policy was designed for updating primary and session keys and its efficiency and security were analyzed by contrasts with other options. Lastly, the key updating processes were implemented under simulated satellite network environment. Based on test data, further contrast between our model and IBM’s hybrid key management model was proposed and important suggestions in designing key updating policies were given. Key words: satellite networks; key management; model; protocol; simulation 引 言 卫星通信网络是由各种通信卫星和星座组成的, 具有星 间和星地通信链路的网络系统,它能把部署在不同轨道的、 执行不同任务的各类卫星和地面系统联系起来, 在远距离信 息传输服务中发挥着重要作用。 为了保证消息的保密性、 完 整性、真实性以及通信效率,就需要一整套密钥管理机制, 为卫星通信提供消息加密、 认证