設計身分認證及混和式公開金鑰之空軍空情前遞系統機制

Design of the User Authentication and Hybrid-Mode Public-Key Cryptosystem Based on Air Picture Forward System

蘇品長(Su, Pin-Chang) ； 阮于哲(Juan, Yu-Che) ； 王泰豐(Wang, Tai-Feng)

《國防管理學報》 42卷2期 (2021/11) Pp. 1-30

摘要

國防部運用國軍大型營區結合重大慶典、抗戰勝利來舉辦營區開放，以增進全民之國防知識及提升國軍正面形象，營區開放其表演項目又以我國戰機操演最受人矚目；在其飛行操演中地面指揮官能透過空情前遞系統提供之空情圖來及時掌握飛機動態，進而預知飛行動態與數據，以期達到運籌帷幄及提前部屬；用戶端因任務特性，需於戶外建立相關設備故其連線品質及效能較為受限，且僅使用單一帳號及密碼的認證方式來登入本系統，若其帳密遭竊將有機敏洩漏疑慮；本研究將基於橢圓曲線加密、隨機背包密碼系統及結合智慧卡，利用橢圓曲線密鑰小的優點與隨機背包密碼系統運算效能快，來強化空軍空情前遞系統的資訊安全及處理速度，加上國軍內部所使用的智慧卡建立更安全的身分認證，避免遭敵竊取重要資訊，並使空情前遞系統能達到機密性、完整性及不可否認性等安全標準。

關鍵字

身分認證 ； 混合式金鑰系統 ； 空情前遞系統

並列摘要

The Ministry of National Defense combine with the grandest festivals and the Victory over Japan by visiting important base of military to promote knowledges of the public's defense and raise the positive image for the national armed forces. The most popular performance of the base visiting is fighter jet drills. During the flight performance, the ground commander is able to grasp real-time aircraft dynamics from air plots provided by Air Picture Forward System, and predict flight dynamics and data to strategize and guide advanced deployment. Due to the task characteristics at the user end where relevant equipment has to be set up outdoors, its connection quality and performance are relatively limited, and only the authentication method of a single account and password can be allowed to login to the system. If the account be stolen, the confidential data may be leaked. This study is based on elliptic curve cryptography, random knapsack cryptosystem, and smart card. By using the advantages of the small elliptic curve key and fast computing performance of random knapsack cryptosystem enhances System's information security and processing speed, also with the smart card used internally in the national armed forces, it will establishe a more secure identity authentication, prevent the theft of important information from an enemy, and enabling Air Picture Forward System to attain safety standards including confidentiality, completeness, non-repudiation, etc.

並列關鍵字

Identity Authentication ； Hybrid Cryptosystem System ； Air Picture Forward System