| 引用本文： |
-
芮立,张雄伟,杨吉斌,徐伟光.面向无人机网络的切换认证研究综述[J].信息安全学报,已采用 [点击复制]
- rui li,zhang xiongwei,yang jibin,xu weiguang.A Survey on Handover Authentication for Unmanned Aerial Vehicle Networks[J].Journal of Cyber Security,Accept [点击复制]
|
|
| 摘要: |
| 低空经济与6G空天地一体化网络的融合正推动无人机向超视距长航程任务拓展，网络切换已成为维持业务连续性的关键环节。然而，高频切换面临严峻的效率与安全挑战。在三维高动态机动场景下，冗长的认证信令交互极易引发业务中断。同时，低空物理暴露与异构网络互信缺失进一步加剧了设备物理俘获、信令重放以及状态失步等安全威胁。在机载资源受限的条件下，平衡安全防护强度与切换时延已成为制约无人机规模化部署的核心技术瓶颈。为明晰技术演进脉络，本研究系统综述了无人机网络切换认证机制。首先，分析高动态切换的时空特征，提炼连续性、轻量化与可扩展性等核心需求，并基于涵盖物理俘获攻击的扩展Dolev-Yao威胁模型构建多维安全目标，以此确立协议的评估基准。随后，对比评估了对称密码、公钥密码与物理不可克隆函数（PUF）三类底层安全机制的性能表现与适用场景。在此基础上，本文提出一种以切换过程中的安全状态同步为核心的多维分类框架。针对具备先验信任的域内场景，本文探究了安全状态的边缘复制机理。依据空口凭证的安全属性来源，可将现有架构划分为基于非对称密码的边缘代理授权、基于预共享密钥的安全上下文转移，以及基于PUF的激励-响应对同步三类。针对缺乏统一信任根的跨域场景，本文依据信任根部署模式，将全局信任协同方案划分为层级信任同步与去中心化共识同步两类。此外，结合统一评估指标，量化比较了典型方案的计算开销、通信负载与安全属性。最后，本文指出了现有机制在显式认证时延与并发接入扩展性方面的架构局限。在此基础上，展望了人工智能辅助的隐式信任与持续验证、高并发接入下的轻量级批量切换认证、通感一体化赋能的无缝切换辅助认证，以及面向切换认证协议的数字孪生动态验证等四个演进方向，以期为低空网络的安全运行提供坚实的理论支撑。 |
| 关键词: 低空经济 无人机网络 切换认证 域内切换 跨域切换 |
| DOI： |
| 投稿时间：2026-05-26修订日期：2026-08-24 |
| 基金项目:国家自然科学基金资助项目（No.62371469） |
|
| A Survey on Handover Authentication for Unmanned Aerial Vehicle Networks |
|
rui li, zhang xiongwei, yang jibin, xu weiguang
|
| (Army Engineering University) |
| Abstract: |
| The integration of the low-altitude economy and 6G space-air-ground integrated networks drives unmanned aerial vehicles (UAVs) toward beyond-visual-line-of-sight and long-endurance missions, making network handovers crucial for service continuity. However, highly dynamic 3D maneuvers easily cause service interruptions due to lengthy au-thentication signaling. Simultaneously, low-altitude physical exposure and heterogeneous network distrust exacerbate threats like physical device capture, signaling replay, and state desynchronization. Balancing security strength and handover latency under constrained airborne resources remains a core bottleneck restricting large-scale UAV deploy-ment. To clarify this technological evolution, this paper systematically surveys UAV network handover authentication mechanisms. First, it analyzes spatiotemporal characteristics of highly dynamic handovers, extracts continuity, light-weight, and scalability requirements, and constructs multidimensional security goals utilizing an extended Dolev-Yao threat model incorporating physical capture attacks, establishing a rigorous protocol evaluation benchmark. Subse-quently, it evaluates the performance and applicable scenarios of three underlying security mechanisms: symmetric cryptography, public-key cryptography, and physical unclonable functions (PUFs). Based on this, we propose a mul-tidimensional classification framework centered on security state synchronization during handovers. For intra-domain scenarios with prior trust, we explore edge replication mechanisms of security states. Based on air-interface credentials'' security attribute sources, architectures are categorized into asymmetric cryptography-based edge proxy authorization, preshared key-based security context transfer, and PUF-based challenge-response pair synchronization. For cross-domain scenarios lacking unified trust roots, global trust synergy schemes are divided into hierarchical trust and decentralized consensus synchronization based on trust root deployment modes. Furthermore, typical schemes are quantitatively compared regarding computational overhead, communication load, and security attributes. Finally, identifying architectural limitations regarding explicit authentication latency and concurrent access scalability, this paper envisions four evolutionary directions: AI-assisted implicit trust and continuous verification, lightweight batch handover authentication under high-concurrency access, seamless handover assisted authentication empowered by integrated sensing and communication, and digital twin dynamic verification for authentication protocols, providing theoretical support for securing low-altitude networks. |
| Key words: low-altitude economy unmanned aerial vehicle networks handover authentication intra-domain handover cross-domain handover |
