空间信息网络安全协议综述
|
摘要
针对空间信息网络安全协议展开综述。首先介绍了建设空间信息网络安全的意义,其次论述了国内外对空间信息网络安全协议的研究现状,然后重点对空间通信协议规范-安全协议(SCPS-SP)的核心关键技术——认证及加密算法进行详细分析。在此基础上,指出SCPS-SP在应用过程中遇到的挑战,并给出解决的思路和相关的建议。
This paper summarized the space information network security protocol.Firstly,we introduced the significance of construction of space information network security.Secondly,we discussed the research status at home and aboard of the space information network security protocol.Then we analyzed authentication and encryption algorithms in detail,which are the key technologies of space communication protocol specification-security protocol(SCPS-SP).On this basis,we indicated the challenges which SCPS-SP faced in the application,and gave some ideas and suggestions for solution.
This paper summarized the space information network security protocol.Firstly,we introduced the significance of construction of space information network security.Secondly,we discussed the research status at home and aboard of the space information network security protocol.Then we analyzed authentication and encryption algorithms in detail,which are the key technologies of space communication protocol specification-security protocol(SCPS-SP).On this basis,we indicated the challenges which SCPS-SP faced in the application,and gave some ideas and suggestions for solution.
引文
[1]LIU X Y,MA J F,ZHONG Y T,et al.A new architecture of space information network security network[J].Network Security,2009(6):13-15.(in Chinese)刘小跃,马建峰,钟焰涛,等.空间信息网安全组网新架构[J].网络安全技术与应用,2009(6):13-15.
[2]PENG C Y.Research on key security technologies in space networks[D].Changsha:National University of Defense Technology,2010.(in Chinese)彭长艳.空间网络安全关键技术研究[D].长沙:国防科技大学,2010.
[3]SHEN R J.Some thoughts of Chinese integrated space-ground network system[J].Engineering Science,2006,8(10):19-30.(in Chinese)沈荣骏.我国天地一体化航天互联网构想[J].中国工程科学,2006,8(10):19-30.
[4]CCSDS[OL].[2016-03-18].http://public.ccsds.org/default.aspx.
[5]CCSDS.Space Communications Protocol Specification(SCPS)-Security Protocol:CCSDS 713.5-B-1[S].1999.
[6]ECSS.ECSS-Standards active and discontinued[S/OL].[2016-03-18].http://www.ecss.nl/forums/ecss/templates/default.htm.
[7]NASA Space Network Security Standard[S/OL].[2016-03-18].http://standards.gsfc.nasa.gov.
[8]TAN Y J,REN J S.Summarize on security technology development in space networks[J].Microprocessor,2014(6):1-3.(in Chinese)谭延军,任劲松.空间网络安全技术发展综述[J].微处理机,2014(6):1-3.
[9]COPPERSMITH D.Data encryption standard(DES)and its strength against attacks[J].IBM Journal of Research and Development,1994,38(3):243-250.
[10]GAO X L,WANG J,ZHANG Q.A study on the security architecture of TT&C networks[J].Journal of Spacecraft TT&C Technology,2013,32(4):294-301.(in Chinese)郜晓亮,王剑,张权.测控网安全防护体系研究[J].飞行器测控学报,2013,32(4):294-301.
[11]国家自然科学基金委空间信息网络基础理论与关键技术重大研究计划[EB/OL].[2016-03-28].http://www.nsfc.gov.cn.
[12]BAI Y F,CHEN X M,AN J S,et al.Introduction to CCSDS AOS Protocols and its Applications[J].Journal of Spacecraft TT&C Technology,2011,30(Z1):16-21.(in Chinese)白云飞,陈晓敏,安军社,等.CCSDS高级在轨系统协议及其应用介绍[J].飞行器测控学报,2011,30(Z1):16-21.
[13]KENNY G,ACHILLEOS N,CARR E,et al.A testbed for simulating and exploring secure communications between terrestrial and space environments[EB/OL].[2016-03-28].http://citeseer.ist.psu.edu.
[14]CCSDS.The Application of CCSDS Protocols to Secure Systems:CCSDS.350.0-G-2[S].2006.
[15]ZHANG D H,LI H X.Analysis of the advantage of the encryption policy for the air to air communication based on SCPS-SP[J].China New Technologies and Products,2011(22):4-5.(in Chinese)张德慧,李海霞.基于SCPS-SP的空问通信加密策略优势分析[J].中国新技术新产品,2011(22):4-5.
[16]LIU Y,DONG Y,LI Z H.Discussion of data security about space-earth all-in-one networking and analysis of CCSDS SCPS[J].Chinese Space Science and Technology,2004,24(1):31-36.(in Chinese)刘泳,董勇,李泽慧.空间通信协议分析与一体化网络安全问题探讨[J].中国空间科学技术,2004,24(1):31-36.
[17]LI J Y.The design and implementation of SCPS-SP/IPSec protocol conversion[D].Harbin:Heilongjiang University,2013.(in Chinese)李敬媛.SCPS-SP/IPSec协议转换的方案设计与实现[D].哈尔滨:黑龙江大学,2013.
[18]DUAN X F,AN H Z,XIE S M.Space communication security protocols[J].Communications Technology,2009,42(12):101-103.(in Chinese)段小芳,安红章,谢上明.空间通信安全协议研究[J].通信技术,2009,42(12):101-103.
[19]CCSDS.Encryption Algorithm Trade Survey:CCSDS.350.2-G-1[S].2008.
[20]YANG Y H.Research on the authenticated encryption technology in CCSDS[D].Shenyang:Shenyang Aerospace University,2011.(in Chinese)杨亚辉.CCSDS认证加密技术研究[D].沈阳:沈阳航空航天大学,2011.
[21]MCGREW D,VIEGA J.The security and performance of the galois/counter mode(GCM)of operation[J].Lecture Notes in Computer Science,2004,3348:343-355.
[22]LI H X.Research on data encryption/decryption strategy of CCSDS space communication system[D].Shenyang:Shenyang Ligong University,2011.(in Chinese)李海霞.CCSDS空间通信系统中数据加密/解密策略研究[D].沈阳:沈阳理工大学,2011.
[23]LIAO Y,GUO X Q.A design method of multi-level security and anti-replay function of SCPS-SP[P].2015.(in Chinese)廖勇,郭修琼.一种SCPS-SP多安全等级及抗重放功能的设计方法[P].2015.
[24]LI H,FAN X X,MI J N,et al.Analysis of security technologies in integrated space-air-ground networks[J].Journal of CAEIT,2014,9(6):592-597.(in Chinese)李华,范鑫鑫,秘建宁,等.空天地一体化网络安全防护技术分析[J].中国电子科学研究院学报,2014,9(6):592-597.
[25]CCSDS.Next generation space internet(NGSI)-end-to-end security for space mission communications:CCSDS 733.5-O-1[S].2003.
[26]LIANG L,LU S W.Design and implementation of gateway between CCSDS standard and TCP/IP protocols[J].Computer Engineering,2006,32(4):134-136.(in Chinese)梁莉,鲁士文.CCSDS标准和TCP/护协议间的网关设计与实现[J].计算机工程,2006,32(4):134-136.
[2]PENG C Y.Research on key security technologies in space networks[D].Changsha:National University of Defense Technology,2010.(in Chinese)彭长艳.空间网络安全关键技术研究[D].长沙:国防科技大学,2010.
[3]SHEN R J.Some thoughts of Chinese integrated space-ground network system[J].Engineering Science,2006,8(10):19-30.(in Chinese)沈荣骏.我国天地一体化航天互联网构想[J].中国工程科学,2006,8(10):19-30.
[4]CCSDS[OL].[2016-03-18].http://public.ccsds.org/default.aspx.
[5]CCSDS.Space Communications Protocol Specification(SCPS)-Security Protocol:CCSDS 713.5-B-1[S].1999.
[6]ECSS.ECSS-Standards active and discontinued[S/OL].[2016-03-18].http://www.ecss.nl/forums/ecss/templates/default.htm.
[7]NASA Space Network Security Standard[S/OL].[2016-03-18].http://standards.gsfc.nasa.gov.
[8]TAN Y J,REN J S.Summarize on security technology development in space networks[J].Microprocessor,2014(6):1-3.(in Chinese)谭延军,任劲松.空间网络安全技术发展综述[J].微处理机,2014(6):1-3.
[9]COPPERSMITH D.Data encryption standard(DES)and its strength against attacks[J].IBM Journal of Research and Development,1994,38(3):243-250.
[10]GAO X L,WANG J,ZHANG Q.A study on the security architecture of TT&C networks[J].Journal of Spacecraft TT&C Technology,2013,32(4):294-301.(in Chinese)郜晓亮,王剑,张权.测控网安全防护体系研究[J].飞行器测控学报,2013,32(4):294-301.
[11]国家自然科学基金委空间信息网络基础理论与关键技术重大研究计划[EB/OL].[2016-03-28].http://www.nsfc.gov.cn.
[12]BAI Y F,CHEN X M,AN J S,et al.Introduction to CCSDS AOS Protocols and its Applications[J].Journal of Spacecraft TT&C Technology,2011,30(Z1):16-21.(in Chinese)白云飞,陈晓敏,安军社,等.CCSDS高级在轨系统协议及其应用介绍[J].飞行器测控学报,2011,30(Z1):16-21.
[13]KENNY G,ACHILLEOS N,CARR E,et al.A testbed for simulating and exploring secure communications between terrestrial and space environments[EB/OL].[2016-03-28].http://citeseer.ist.psu.edu.
[14]CCSDS.The Application of CCSDS Protocols to Secure Systems:CCSDS.350.0-G-2[S].2006.
[15]ZHANG D H,LI H X.Analysis of the advantage of the encryption policy for the air to air communication based on SCPS-SP[J].China New Technologies and Products,2011(22):4-5.(in Chinese)张德慧,李海霞.基于SCPS-SP的空问通信加密策略优势分析[J].中国新技术新产品,2011(22):4-5.
[16]LIU Y,DONG Y,LI Z H.Discussion of data security about space-earth all-in-one networking and analysis of CCSDS SCPS[J].Chinese Space Science and Technology,2004,24(1):31-36.(in Chinese)刘泳,董勇,李泽慧.空间通信协议分析与一体化网络安全问题探讨[J].中国空间科学技术,2004,24(1):31-36.
[17]LI J Y.The design and implementation of SCPS-SP/IPSec protocol conversion[D].Harbin:Heilongjiang University,2013.(in Chinese)李敬媛.SCPS-SP/IPSec协议转换的方案设计与实现[D].哈尔滨:黑龙江大学,2013.
[18]DUAN X F,AN H Z,XIE S M.Space communication security protocols[J].Communications Technology,2009,42(12):101-103.(in Chinese)段小芳,安红章,谢上明.空间通信安全协议研究[J].通信技术,2009,42(12):101-103.
[19]CCSDS.Encryption Algorithm Trade Survey:CCSDS.350.2-G-1[S].2008.
[20]YANG Y H.Research on the authenticated encryption technology in CCSDS[D].Shenyang:Shenyang Aerospace University,2011.(in Chinese)杨亚辉.CCSDS认证加密技术研究[D].沈阳:沈阳航空航天大学,2011.
[21]MCGREW D,VIEGA J.The security and performance of the galois/counter mode(GCM)of operation[J].Lecture Notes in Computer Science,2004,3348:343-355.
[22]LI H X.Research on data encryption/decryption strategy of CCSDS space communication system[D].Shenyang:Shenyang Ligong University,2011.(in Chinese)李海霞.CCSDS空间通信系统中数据加密/解密策略研究[D].沈阳:沈阳理工大学,2011.
[23]LIAO Y,GUO X Q.A design method of multi-level security and anti-replay function of SCPS-SP[P].2015.(in Chinese)廖勇,郭修琼.一种SCPS-SP多安全等级及抗重放功能的设计方法[P].2015.
[24]LI H,FAN X X,MI J N,et al.Analysis of security technologies in integrated space-air-ground networks[J].Journal of CAEIT,2014,9(6):592-597.(in Chinese)李华,范鑫鑫,秘建宁,等.空天地一体化网络安全防护技术分析[J].中国电子科学研究院学报,2014,9(6):592-597.
[25]CCSDS.Next generation space internet(NGSI)-end-to-end security for space mission communications:CCSDS 733.5-O-1[S].2003.
[26]LIANG L,LU S W.Design and implementation of gateway between CCSDS standard and TCP/IP protocols[J].Computer Engineering,2006,32(4):134-136.(in Chinese)梁莉,鲁士文.CCSDS标准和TCP/护协议间的网关设计与实现[J].计算机工程,2006,32(4):134-136.