中国民航大学学报 ›› 2013, Vol. 31 ›› Issue (3): 23-26.

• 民用航空 • 上一篇    下一篇

ACARS地-空数据链中数字证书的应用研究

吴志军,贾悦霖   

  1. (中国民航大学电子信息工程学院,天津300300)
  • 收稿日期:2012-06-06 修回日期:2012-10-09 出版日期:2013-06-23 发布日期:2013-10-08
  • 作者简介:吴志军(1965—),男,新疆库尔勒人,教授,博士,主要研究方向为网络与信息安全.

Research on digital certificate in ACARS ground-air datalink

WU Zhi-jun,JIA Yue-lin   

  1. (College of Electronic and Information Engineering,CAUC,Tianjin 300300,China)
  • Received:2012-06-06 Revised:2012-10-09 Online:2013-06-23 Published:2013-10-08

摘要:

ACARS(aircraft communication addressing and reporting system)即飞机通信寻址报告系统,它是当前民航部门使用的飞机与地面的主要通信方式之一。ACARS 地空数据链对航空飞行安全保障十分重要,但其安全性和重要性并非成正比。在分析其安全隐患的基础上,针对ACARS 中实体身份认证方法的不足,在地-空安全会话初始化中研究基于椭圆曲线加密ECC(elliptic curve cryptography)的数字证书认证方法,以及基于OpenSSL 的航空地-空数据链数字证书,设计和实现了用于签发和管理的证书授权机构。分析表明,将数字证书认证方法应用到ACARS中,会提高系统的安全性,并且不会对系统性能造成影响。

关键词: 飞机通信寻址报告系统, 数字证书, 认证, 椭圆曲线

Abstract:

Aircraft Communication Addressing and Reporting System (ACARS)is the main method of communication in civil aviation of China. ACARS air-ground datalink is quite important for aviation security,while the datalink system is not secure enough since lacking of adequate research on it. With regard to the shortcuts of entity authentication method in ACARS,and on the basis of analyzing the risks existing in the datalink,this paper studies the digital certificate authentication method based on the elliptic curve cryptography during the secure session initiation process between the ground and aircraft entity,then designs and implements a certificate authority for signing and managing certificates based on OpenSSL in aviation ground-air datalink,and finally completes the authentication between ground and aircraft before the secure session. Analyses show that the digital certificate authentication method used in ACARS improves the security of the system,without impacting on system performance.

Key words: aircraft communication addressing and reporting system(ACARS), digital certificate, authentication, elliptic curve

中图分类号: