信息安全研究 ›› 2020, Vol. 6 ›› Issue (12): 1068-1073.

• 学术论文 • 上一篇    下一篇

北斗导航系统信息安全研究

王斯梁,冯暄,陈翼,蔡友保   

  1. 四川省计算机研究院
  • 收稿日期:2020-12-07 出版日期:2020-12-08 发布日期:2020-12-08
  • 通讯作者: 王斯梁
  • 作者简介:王斯梁 博士,高级工程师,研究方向为网络安全和密码应用。 westone_wang@163.com 冯暄 硕士,高级工程师,研究方向为信息系统设计和云计算安全。 xuan.feng@scsics.com 陈翼 高级工程师,研究方向为企业信息化管理和云计算。 Yi.chen@scsics.com 蔡友保 工程师,研究方向为科技项目申报和云计算。 caiyoubao@scsics.com

Research of Information Security in Beidou Navigation System

  • Received:2020-12-07 Online:2020-12-08 Published:2020-12-08

摘要: 目前北斗三代系统已完成部署,北斗系统将为全球用户提供导航定位和通信数传于一体的服务。北斗系统在我国已广泛应用于交通运输、国土资源、防灾减灾、农林水利、测绘勘探、应急救援等领域,但北斗系统信息安全相关技术标准体系尚未完善,密码应用方案较少。本文首先解析了北斗系统的组成及已发布的标准体系情况,分析了北斗系统各个环节存在的安全风险,然后参照等级保护要求提出了北斗系统的信息安全保障体系。针对北斗系统独有的短报文应用,给出了基于三层密钥机制和对称加密算法的加密方案,方案综合考虑了安全性和北斗终端的处理性能,能较好地应用于北斗民口的短报文加密领域。

关键词: 北斗导航系统, 信息安全保障体系, 短报文, 三层密钥机制, 加密方案

Abstract: At present, the third generation of Beidou has been deployed. Beidou system will provide navigation positioning and communication data transmission services for global users. Beidou has been widely used in transportation, land and resources, disaster prevention and mitigation, agriculture, forestry and water conservancy, surveying and mapping exploration, emergency rescue and other fields in China. However, the information security related technical standard system of Beidou system is not perfect, and the cipher application is few. This paper first analyzes the composition of Beidou system and the published technical standards. The security risks in each link of Beidou system are concluded in the paper. Then, the information security system of Beidou system is introduced according to the requirements of Classification Protection. Aiming at the unique short message application of Beidou system, an encryption solution based on three-layer key mechanism and symmetric encryption algorithm is proposed. Considering the security and the processing performance of Beidou terminal, the solution can be applied to the short message encryption field of Beidou in civil application.

Key words: Beidou navigation system, information security system, short message, three level schemes of key hierarchy, encryption solution