An Efficient Broadcast Authentication Scheme with Batch Verification for ADS-B Messages
An Efficient Broadcast Authentication Scheme with Batch Verification for ADS-B Messages
复制标题
DOI：
10.3837/tiis.2013.10.013
复制
发表时间：
2013-10
期刊：
影响因子：
--
通讯作者：
Haomiao Yang;Hyunsung Kim;Hongwei Li;Eunjun Yoon;Xiaofeng Wang;Xuefeng Ding
中科院分区：
文献类型：
--
作者：
Haomiao Yang;Hyunsung Kim;Hongwei Li;Eunjun Yoon;Xiaofeng Wang;Xuefeng Ding
自动相关监视广播（ADS-B）系统作为下一代空中交通管理（ATM）的基石，可以通过未加密的数据链路连续广播飞机位置、身份、速度和其他信息，为ATM生成共同的态势感知图像。然而，由于ADS-B信息是未经认证的，因此很容易通过欺骗或插入虚假信息将假飞机插入系统。遗憾的是，ADS-B消息的身份验证还没有得到很好的研究。本文提出了一种基于身份签名（IBS）的ADS-B消息批量验证的高效广播认证方案。安全性分析表明，该方案能够实现ADS-B消息的完整性和真实性、批量验证和密钥泄露弹性。性能评估表明，该方案在资源有限的典型航电设备上具有较高的计算效率，并且具有较低的通信开销，适合于低带宽ADS-B数据链路。
As a cornerstone of the next generation air traffic management (ATM), automatic dependent surveillance-broadcast (ADS-B) system can provide continual broadcast of aircraft position, identity, velocity and other messages over unencrypted data links to generate a common situational awareness picture for ATM. However, since ADS-B messages are unauthenticated, it is easy to insert fake aircrafts into the system via spoofing or insertion of false messages. Unfortunately, the authentication for ADS-B messages has not yet been well studied. In this paper, we propose an efficient broadcast authentication scheme with batch verification for ADS-B messages which employs an identity-based signature (IBS). Security analysis indicates that our scheme can achieve integrity and authenticity of ADS-B messages, batch verification, and resilience to key leakage. Performance evaluation demonstrates that our scheme is computationally efficient for the typical avionics devices with limited resources, and it has low communication overhead well suitable for low-bandwidth ADS-B data link.