A New ADS-B Authentication Framework Based on Efficient Hierarchical Identity-Based Signature with Batch Verification

Abstract

Automatic Dependent Surveillance-Broadcast (ADS-B) has become a crucial part of next generation air traffic surveillance technology and will be mandatorily deployed for most of the airspaces worldwide by 2020. Each aircraft equipped with an ADS-B device keeps broadcasting plaintext messages to other aircraft and the ground station controllers once or twice per second. The lack of security measures in ADS-B systems makes it susceptible to different attacks. Among the various security issues, we investigate the integrity and authenticity of ADS-B messages. We propose a new framework for providing ADS-B with authentication based on three-level hierarchical identity-based signature (HIBS) with batch verification. Previous signature-based ADS-B authentication protocols focus on how to generate signatures efficiently, while our schemes can also significantly reduce the verification cost, which is critical to ADS-B systems, since at any time an ADS-B receiver may receive lots of signatures. We design two concrete schemes. The basic scheme supports partial batch verification and the extended scheme provides full batch verification. We give a formal security proof for the extended scheme. Experiment results show that our schemes with batch verification are tremendously more efficient in batch verifying n signatures than verifying n signatures independently. For example, the running time of verifying 100 signatures is 502ms and 484ms for the basic scheme and the extended scheme respectively, while the time is 2500ms if verifying the signatures independently.

SOS - Securing Open Skies

“…However, HIBS requires the correct reception of 23 messages to evaluate the authenticity of the information. Thus, the packet loss would be more disruptive in the proposal by [9] than in the SOS scheme. This is still true also in case packet losses happen in burst, given that SOS could provide, under reasonable assumptions, intermittent connectivity with the community server.…”

“…Even if the proposal is valuable, authors are converting a broadcast communication channel in a unicast communication channel, thus heavily modifying the logic and the functioning of the ADS-B technology. Authors in [9] propose a three-level Hierarchical Identity Based Signature (IBS) (HIBS) scheme, in which each aircraft, associated to a given airlines recognized by a root authority (as ICAO or EUROCONTROL) is able to sign its ADS-B OUT messages by using keys generated according to its identity. Upon reception of a given signed message, a ground controller is able not only to identify the generating aircraft, but also its relationship with a given airline, approved by the root authority.…”

“…In this section we evaluate the performance of SOS and the contribution in [9] in the presence of a malicious active adversary.…”

Towards a secure automatic identification system (AIS)

“…Our research uses concepts of and results in Certificate-less Identity-Based Cryptography (IBC) [39], [38]; pseudonyms [40], [31], [41]; ADS-B [38], [35], [36], [42]; VANETs [43], [44], [45]; and MANETs [39], [46], [47].…”

Research on Identity Authentication Method Based on Negative Logic System

“…Hu et al point out the privacy protection using images and identity information [3]. And some other researchers propose the identity based encryption [4][5][6][7][8][9][10]. Of which, the identity based encryption is a new tendency for identity authentication.…”