Design and Optimization of Distributed Authentication Mechanism for Equipment Support Information Network

Abstract

Because of the threats existing in the identity authentication for equipment support information network, a cluster-based distributed authentication mechanism and an optimal design method for distributed CA are proposed. Compared with many traditional clustering methods, the clustering method in this paper divides the nodes into one cluster whose information exchange is frequent and whose tasks are the same, which reduces the communication spending between the clusters, improves the network efficiency effectively and realizes the convenient management for the nodes. The threshold signature scheme for distributed CA in the distributed authentication mechanism is designed based on SM2 elliptic curve digital signature algorithm. The optimal design for distributed CA is to set the optimal value of the threshold for distributed CA to enhance the security and the availability of distributed authentication service. The definition of the Secure Service Success Probability (SSSP) of Distributed CA is given based on the definition of the Service Success Probability (SSP) of Distributed CA. The optimal value of the threshold for distributed CA is the value which makes the SSSP of Distributed CA reach the maximum. The relation between the SSSP of Distributed CA and the threshold value is given. The optimal value of the threshold is got according to the relation. The proposed method provides the reference for the design and optimization of distributed authentication mechanism for equipment support information network.