Abstract:The space-ground integrated network (SGIN) has attracted growing attention due to its advantages of high-capacity, low-latency and global coverage. To guarantee the security requirements of SGIN, anonymous authentication is an essential approach to addressing severe threats such as unauthorized access and impersonation attack, while payment is another common method in service-oriented applications in order to encourage companies to participate and also prevent insider attackers from enjoying services without paying. Existing anonymous authentication protocols for SGIN either require users to involve in heavy computation especially in dynamic scenarios, or do not consider cross-domain authentication. In this paper, we first introduce the concept of cross-company satellite services, and then address the cross-domain authentication and billing issues in SGIN, i.e., we propose a decentralized anonymous authentication scheme supporting fast handover and also achieve fairness for the billing procedures. To reduce the authentication delays, the authentication process is delegated from ground to satellites, such that users can arbitrarily switch the satellite networks belonging to different companies. Specifically, users can be anonymously authenticated by showing the knowledge of a secret bound with a randomized verifiable credential and connect to different satellite networks through a fast handover authentication protocol building on a blockchain. Even all companies collude, they cannot forge a valid identity credential and access records for a user. In addition, we provide a fair billing mechanism that can prevent malicious users and greedy satellite companies from manipulating the network accessing fees based on a well-designed smart contract. Finally, we demonstrate that the proposed scheme is secure and efficient through security analysis and performance evaluation.

Balancing Efficiency and Security for Network Access Control in Space-Air-Ground Integrated Networks

EATH: an Efficient Aggregate Authentication Protocol for Smart Grid Communications

ESAC: an Efficient and Secure Access Control Scheme in Vehicular Named Data Networking

Secure Authentication Enhancement Scheme for Seamless Handover and Roaming in Space Information Network

Secure and Efficient Token Based Roaming Authentication Scheme for Space-Earth Integration Network

Delegating Authentication to Edge: A Decentralized Authentication Architecture for Vehicular Networks

Decentralized Anonymous Authentication With Fair Billing for Space-Ground Integrated Networks

A Secure, Efficient, and Accountable Edge-Based Access Control Framework for Information Centric Networks

Label-free Deep Learning Driven Secure Access Selection in Space-Air-Ground Integrated Networks

On-Demand Anonymous Access and Roaming Authentication Protocols for 6G Satellite–Ground Integrated Networks

Mandatory Content Access Control for Privacy Protection in Information Centric Networks

Session-based Access Control in Information-Centric Networks: Design and Analyses.

Pre-authentication and Group Management Based Secure Handover for Space-Earth Integration Network

Toward Secure and Lightweight Access Authentication in SAGINs

A Secure and Efficient Authentication Protocol for Satellite-Terrestrial Networks

AI-Oriented Two-Phase Multifactor Authentication in SAGINs: Prospects and Challenges

AI-Oriented Two-Phase Multi-Factor Authentication in SAGINs: Prospects and Challenges

Catch Me if You Can: A Secure Bilateral Access Control System with Anonymous Credentials

A Distributed Authentication and Authorization Scheme for In-Network Big Data Sharing

Enforcing Access Control in Information-Centric Edge Networking

Security Enhanced Authentication Protocol for Space-Ground Integrated Railway Networks