Abstract:The Software Defined Network (SDN)-based space-ground integrated railway communication networks have attracted widespread attention from academia and industry. In such environments, the security of initial authentication and handover authentication for moving trains are two important challenges that need to be addressed. In this paper, a secure and efficient authentication key agreement scheme is proposed for the SDN-based space-ground integrated railway networks. Specifically, a lightweight mutual authentication mechanism based on the Number Theory Research Unit (NTRU) is proposed for the initial authentication process, which effectively prevents the unauthorized On-Board Unit (OBU) accessing networks. Then, according to the predictable path, we propose a key generation algorithm based on the hash chain and a fast key distribution mechanism based on the Chinese Remainder Theorem (CRT), which greatly reduce the calculation and communication burden of the key transmission process. On this basis, we adopt a hash-based message authentication code to achieve unified handover authentication in heterogeneous integrated railway networks. The Burrows-Abadi-Needham (BAN) logic proof and informal security analysis demonstrate that the proposed scheme can provide several robust security properties, including forward/backward security, universality, traceability, and resistance against quantum attacks. The performance evaluations show that our scheme outperforms other related schemes in computation cost, communication overhead, and performance under unknown attacks while guaranteeing higher security.

A Secure Authentication Mechanism for Multi-Dimensional Identifier Network.

An Inter-Domain Authentication Scheme For Pervasive Computing Environment

Inter-domain authentication scheme for Pervasive Computing Environments

Multi-domainsecurity Authentication Protocol Based on ID

An Access Authentication Scheme Based on Identity Label in Universal Network

AuMID: an Authentication Mechanism Based on Identity Tag under Future Internet Architecture

A Unified Authentication Scheme Based on Analytic Mechanism

A Design and Simulation for Authentication Framework Based on IIEDNS

Authentication Framework of IIEDNS Based on LDAP & Kerberos

Study of Intranet Single User Authentication System Nased on LDAP and PKI Technology

Label-based Security Management Mechanism for Universal Identifier Network

An Access Control Mechanism in Smart Identifier Network.

Establish the Intrinsic Binding in Naming Space for Future Internet Using Combined Public Key.

Towards Double Defense Network Security Based on Multi-Identifier Network Architecture

Quantum Identity Authentication Scheme Based on Measurement-Device-independent Quantum Key Distribution Protocol

Design and Implementation of Multi-Domain and Multi-System Identity Authentication Based on Certificate

Security Enhanced Authentication Protocol for Space-Ground Integrated Railway Networks

Research on Intrinsic Security in Future Internet Architecture

Framework for secure authentication of nodes in peer-to-peer network

A user identity authentication protocol under universal identifier-based network