Loss-Tolerant Bundle Fragment Authentication for Space-Based DTNs
Loss-Tolerant Bundle Fragment Authentication for Space-Based DTNs
复制标题
DOI：
10.1109/tdsc.2014.2382601
复制
发表时间：
2015-11
影响因子：
7.3
通讯作者：
Xixiang Lv;Y. Mu;Hui Li
中科院分区：
文献类型：
--
作者：
Xixiang Lv;Y. Mu;Hui Li
捆绑包身份验证可确保捆绑包的真实性和完整性，对于空间延迟/中断容忍网络 (DTN) 至关重要。当需要捆绑片段服务时，以前直接使用数字签名的解决方案会遭受沉重的计算成本和带宽开销。本文利用纠删码和DTN的批量传输特性解决了Bundle Protocol的片段认证问题。采用纠删码来允许捆绑包的所有片段均等地共享一个签名，以容忍高延迟以及意外的连接丢失。遵循这个一般思想，我们提出了两种方法，这两种方法都可以有效地尽早过滤不真实的片段。第一个方法占用的带宽开销低得惊人，但当存在不真实的片段时，它会删除所有收到的捆绑片段，因为它无法定位不真实的片段。考虑到这个缺陷，我们提出了一种改进的方案，该方案能够通过特殊的哈希链来检测不真实的片段，然后仅删除这些不真实的片段。性能模拟表明，与之前的工作相比，我们的两种方案都显着降低了带宽开销和计算成本。
Bundle authentication, which ensures the authenticity and integrity of bundles, is critical in space Delay/disruption-Tolerant Networks (DTNs). When bundle fragment services are needed, the previous solutions directly using digital signatures suffer from heavy computational costs and bandwidth overheads. This paper addresses the issue of fragment authentication for Bundle Protocol by exploiting erasure codes and the batch transmission characteristic of DTNs. Erasure codes are adopted to allow all the fragments of a bundle to equally share only one signature, to tolerate high delays as well as unexpected loss of connectivity. Following this generic idea, we present two approaches, both of which are effective in filtering inauthentic fragments as early as possible. The first one takes a surprisingly low bandwidth overhead, while it makes all received fragments of a bundle to be removed when there is an inauthentic one, because of its failure in locating the inauthentic fragments. Considering this defect, we present an improved scheme which is able to detect inauthentic fragments thanks to a special hash chain and then only remove these inauthentic ones. The performance simulation demonstrates that both our schemes significantly reduce bandwidth overheads and computational costs as compared to the prior works.