EBAA: An efficient broadcast authentication scheme for ADS-B communication based on IBS-MR
EBAA: An efficient broadcast authentication scheme for ADS-B communication based on IBS-MR
复制标题
DOI：
10.1016/j.cja.2014.04.028
复制
发表时间：
2014-06
影响因子：
5.7
通讯作者：
Haomiao Yang;R. Huang;Xiaofeng Wang;Jiangyi Deng;Rui-dong Chen
中科院分区：
文献类型：
--
作者：
Haomiao Yang;R. Huang;Xiaofeng Wang;Jiangyi Deng;Rui-dong Chen
广播式自动相关监视（ADS-B）系统可以广播基于卫星的飞机位置、标识等，目前，该系统正逐步取代雷达，成为下一代空中交通管理（ATM）系统的支柱。然而，由于ADS-B系统采用广播式数据链路，且缺乏设计的安全措施，因此存在严重的网络安全问题。尤其是，由于ADS-B消息未经认证，因此很容易通过欺骗或插入虚假消息将假飞机插入系统。不幸的是，ADS-B消息的认证尚未得到很好的研究。基于消息恢复的基于身份签名（IBS-MR），提出了一种有效的ADS-B消息广播认证方案。安全性分析表明，该方案能够实现ADS-B广播消息的真实性和完整性，以及广播方私钥的自适应演化。性能评估结果表明，该方案对于资源有限的典型航电设备具有较高的计算效率。此外，该方案可从签名中恢复广播消息，通信开销小，适用于低带宽ADS-B数据链路。
Automatic dependent surveillance-broadcast (ADS-B) systems can broadcast satellite-based aircraft position, identification, etc., periodically, and are now on track to replace radar to become the backbone of next-generation air traffic management (ATM) systems. However, ADS-B systems suffer severe cyber-security problems due to the broadcast-type data link and the lack of designed-in security measures. Especially, since ADS-B messages are unauthenticated, it is easy to insert fake aircraft into a system via spoofing or insertion of false messages. Unfortunately, the authentication for ADS-B messages has not yet been well studied. In this paper, based on identity-based signature with message recovery (IBS-MR), an efficient broadcast authentication scheme for ADS-B messages is proposed. The security analysis demonstrates that the scheme can achieve authenticity and integrity of ADS-B broadcast messages, as well as adaptive evolution of broadcasters’ private keys. The performance evaluation shows that the scheme is computationally efficient for typical avionics devices with limited resources. Furthermore, the scheme achieves low communication overhead since broadcast messages can be recovered from signatures, and thus it is suitable for low-bandwidth ADS-B data link.