一种改进的基于挑战/应答机制的短波接入认证系统研究与设计

挑战/应答方式是一种常用的安全性较高的动态身份认证技术,但窄带信道条件和高效率、高安全性要求限制了其在军事短波环境中的应用。基于短波终端和岸基短波台站已有的安全基础—预共享对称密钥,设计了一种改进的基于挑战/应答机制的短波接入双向认证系统。针对短波接入网实际应用,在认证过程中引入随机数和时间戳两种动态因子,在增强接入认证系统安全性的同时,有效减少了认证过程中的开销,实现通信双方相互认证的同时还能够完成会话和完整性密钥的协商。

Design of Short Wave Access Authentication System based on Symmetric Key

Challenge/response mode is a common dynamic identity authentication technology for its fairly high safety. However, the narrowband channel conditions and high- efficiency and high-security requirements limit its application in military short-wave environment. An improved short-wave access mutual authentication system based on challenge/response mechanism is designed in combination with the challenge/response and time synchronization mechanism ,this system is built on the existing security base between the short-wave terminal and shore-based shortwave stations—a shared symmetric key. For practical application of the short-wave access network, two dynamic factors—a random number and timestamp are introduced in the authentication process, thus to enhance the safety of access authentication system while reduce the overhead of authentication. And finally the mutual authentication of between two communication parties is realized, and the negotiation for the session and integrity key completed.