Research On The Access Control Mechanism Of Satellite-terrestrial Networks

The Satellite-Terrestrial networks(STNs)is one of the most popular research directions in the field of communications in recent years.Due to the integration of terrestrial and non-terrestrial networks,The STNs can fully utilize the respective characteristics of terrestrial and non-terrestrial networks to ensure service availability,continuity and scalability.It is a global wireless network with massive access capabilities,low latency,and high reliability,and is also a feasible solution for 6G networks.However,The STNs,like other wireless networks,are vulnerable to various network attacks such as unauthorized access and eavesdropping.It needs to use the access control mechanism to realize the trusted access of the device in an untrusted communication environment and ensure the security of data communication.In addition,The STNs inherently have the characteristics of high latency of communication links and limited computing and storage resources,so how to make full use of satellite computing and storage capabilities to design a safe and efficient lightweight device access authentication scheme has become the primary problem that STNs needs to solve.The deployment of ultra-dense mega-constellations and the highly dynamic nature of satellite network topologies will cause devices to frequently handover between different satellite access points.Therefore,designing a secure and efficient lightweight handover authentication method has become a major challenge for the STNs access control mechanism.The access control mechanism of STNs should not only optimize the authentication efficiency,but also consider the cost of access control.How to balance the relationship between authentication efficiency and access cost is an issue that STNs need to pay attention to.This paper starts from the characteristics and architecture of STNs,and focuses on the optimization of initial access authentication,handover authentication and access cost overhead of the STNs access control mechanism,and realizes the trusted access and handover of devices.The main contributions of this paper are as follows:(1)A secure and efficient identity authentication protocol based on ECC is proposed,which can fully consider the new characteristics of satellite computing and storage capacity growth,and move the device authentication function forward to the satellite access point.This protocol only needs one communication interaction to realize device authentication access,which significantly improves the efficiency of device access authentication.Through strict formal security analysis,it is proved that the proposed authentication protocol is secure,and through informal security analysis,it is proved that the proposed protocol has security properties such as mutual authentication and user anonymity,and can resist various network attacks.(2)This paper proposes a hierarchical group key distribution mechanism,which supports the rapid handover authentication between access devices within and between the mutual trust satellite groups by forming a mutual trust satellite group,thereby improving the efficiency of handover authentication.In addition,this mechanism also supports satellite access points to form mutual trust satellite groups according to service types,service scenarios,and security levels,and generate handover credentials based on these to assign them to access devices,enabling configurable,flexible,and fast device cross-domain handover authentication.(3)In this paper,the cost optimization problem of STNs access control mechanism is proposed,and the partition model of mutual trust satellite group is defined with handover overhead and key distribution cost as optimization goals.The evaluation and measurement method of handover cost and key distribution cost is given,and an improved genetic algorithm is proposed to efficiently solve the complex and high-dimensional mutual trust satellite group partition problem,and realize the global optimization of STNs access authentication efficiency and access cost.On the Iridium constellation,the optimization scheme is verified in this paper,and the results show that the optimization scheme has better performance in improving authentication efficiency and saving authentication cost.