关键词: 铁路时间同步协议, ECDH密钥协商算法, 身份校验码, 双向身份认证, BAN逻辑

Abstract: Aiming at the problems of missing authentication of the client of railroad time synchronization protocol and plaintext transmission of key messages, a more secure bidirectional authentication scheme is proposed for authentication and key establishment between time nodes. The scheme adopts asymmetric encryption mechanism and ECDH (elliptic curve DiffieHellman) algorithm to securely negotiate the shared key, applying the host’s current time as the sequence number to resist replay attacks, and completing the bidirectional authentication by the identity checking code generated from the shared key and the sequence number. The shared key and the identity check code generated from the sequence number complete the bidirectional authentication. Subsequently, the shared key is used to encrypt and protect the key messages, which solves the problem of plaintext transmission of key messages. This scheme not only solves the problem of missing client authentication, but also provides forward and backward security. Finally, BAN logic is used for formal verification, and the results show that the method in this paper is better than other methods in terms of security and authentication overhead, and can meet the requirements of security and realtime of twoway authentication of railroad time synchronization protocol.

Key words: railroad time synchronization protocol, ECDH key negotiation algorithm, identity check digit, twoway authentication, BAN logic