基于广播代理重加密的低空无人机运行数据安全共享方案OA
Secure sharing scheme for low-altitude UAV operational data based on broadcast proxy re-encryption
在开放动态的低空智联网中,无人机(UAV)运行数据共享面临着数据窃听、重放攻击和未授权访问等安全威胁,可能严重危及低空运行安全,保障该数据安全共享至关重要.现有方案利用身份基广播加密实现点对多点数据安全共享.然而,该类方案往往需预设共享组容量,限制了共享灵活性;此外,在解密过程中,共享者需为组内其他成员执行额外的数学运算,导致解密计算负担较重.因此,提出一种基于广播代理重加密的低空无人机运行数据安全共享方案.所提方案利用身份基广播加密与对称加密技术构建一种混合加密机制,通过密文重加密将点对点共享转化成点对多点共享.在点对多点共享过程中,所提方案支持用户仅持有固定长度的私钥即可实现无状态的数据群组共享且无需预设组容量,兼顾共享安全性、灵活性和高效性.实验结果表明:在点对点共享中,所提方案加解密计算开销固定不变;在点对多点共享中,相比次优方案,所提方案重加密密钥生成时间开销降低40%以上,重加密密文解密运行时间约为固定的3.6 ms.
In the open and dynamic low-altitude intelligent network,unmanned aerial vehicle(UAV)operational data sharing faces security threats such as data eavesdropping,replay attacks,and unauthorized access,which may seriously jeopardize low-altitude operation security.It is crucial to guarantee the secure sharing of UAV operational data.Existing schemes utilize identity-based broadcast encryption to achieve point-to-multipoint data security sharing.Nevertheless,the sharing flexibility is sometimes restricted by these schemes'requirement to preset the sharing group capacity.Moreover,in the decryption process,the sharer needs to perform additional mathematical operations for other group members,which leads to a heavy burden of decryption computation.In this paper,we propose a secure sharing scheme for low-altitude UAV operational data based on broadcast proxy re-encryption.Through ciphertext re-encryption,the suggested technique creates a hybrid encryption mechanism that converts point-to-point sharing into point-to-multipoint sharing by utilizing identity-based broadcast encryption and symmetric encryption.In point-to-multipoint sharing,the scheme supports stateless data group sharing with fixed-length private keys and without preset group capacity,taking into account the security,flexibility,and efficiency of sharing.Experimental results show that in point-to-point sharing,the encryption and decryption computation overhead is fixed;in point-to-multipoint sharing,compared with the suboptimal scheme,the re-encryption key generation overhead is reduced by more than 40%,and the re-encryption ciphertext decryption algorithm costs about 3.6 milliseconds.
周泽全;季晓海;罗喜伶;毛剑;王珺珺
北京航空航天大学 电子信息工程学院,北京 100191||北京航空航天大学 杭州创新研究院,杭州 310000||空地一体新航行系统技术全国重点实验室,北京 100191北京航空航天大学 电子信息工程学院,北京 100191||北京航空航天大学 杭州创新研究院,杭州 310000||空地一体新航行系统技术全国重点实验室,北京 100191北京航空航天大学 电子信息工程学院,北京 100191||北京航空航天大学 杭州创新研究院,杭州 310000||空地一体新航行系统技术全国重点实验室,北京 100191北京航空航天大学 杭州创新研究院,杭州 310000||北京航空航天大学 网络空间安全学院,北京 100191北京航空航天大学 电子信息工程学院,北京 100191
航空航天
无人机数据共享数据安全加密算法密文
unmanned aerial vehicledata sharingdata securityencryption algorithmciphertext
《北京航空航天大学学报》 2026 (9)
3089-3099,11
浙江省"尖兵"研发攻关计划(2022C01055)国家自然科学基金(62172027)浙江省自然科学基金(LZ23F020013) Zhejiang Provincial"JIANBING"Research and Development Project(2022C01055)National Natural Science Foundation of China(62172027)Zhejiang Provincial Natural Science Foundation of China(LZ23F020013)
评论