Space Information Network (SIN) enables universal Internet connectivity for any object, even in remote and extreme environments where deploying a cellular network is difficult. Access authentication is crucial for ensuring user access control in SIN and preventing unauthorized entities from gaining access to network services. However, due to the complex communication environment in SIN, including exposed links and higher signal delay, designing a secure and efficient authentication scheme presents a significant challenge. In this paper, we propose a secure communication protocol for SIN with periodic k-time anonymous authentication (named PkT-SIN) that allows satellite users to anonymously authenticate to ground stations at most k times in each single time period. An efficient handover mechanism is designed to ensure seamless communication for satellite users to communicate with different satellites and ground stations, taking into account the dynamic topology of SIN. As a core component of PkT-SIN, we propose a novel primitive, periodic k-time keyed-verification anonymous credential (PkT-KVAC), that enables users to derive k tokens from a credential for anonymous and unlinkable authentication. On the other hand, a verifier can always recognize a reused token from a dishonest user. PkT-KVAC is of independent contribution to anonymous authentication in pay-per-use business scenarios. Formal security proofs confirm that PkT-SIN and PkT-KVAC have desired security features. The supremacy of their computing features is demonstrated through comprehensive comparison and rigorous performance analysis.

中文翻译：

---

PkT-SIN：具有定期 k 次匿名身份验证的空间信息网络安全通信协议


空间信息网络 (SIN) 可以为任何物体提供通用的互联网连接，即使在难以部署蜂窝网络的偏远和极端环境中也是如此。访问认证对于确保 SIN 中的用户访问控制并防止未经授权的实体访问网络服务至关重要。然而，由于SIN通信环境复杂，包括暴露的链路和较高的信号延迟，设计安全高效的认证方案提出了重大挑战。在本文中，我们提出了一种具有周期性 k 次匿名身份验证的 SIN 安全通信协议（称为 PkT-SIN），允许卫星用户在每个时间段内最多向地面站进行 k 次匿名身份验证。考虑到SIN的动态拓扑结构，设计了高效的切换机制，确保卫星用户与不同卫星和地面站的无缝通信。作为 PkT-SIN 的核心组件，我们提出了一种新颖的原始、定期 k 次密钥验证匿名凭证（PkT-KVAC），它使用户能够从凭证中派生 k 令牌，以进行匿名且不可链接的身份验证。另一方面，验证者总是可以识别来自不诚实用户的重复使用的令牌。 PkT-KVAC对按次付费业务场景的匿名认证做出了独立贡献。正式的安全证明证实 PkT-SIN 和 PkT-KVAC 具有所需的安全功能。通过全面的比较和严格的性能分析，证明了它们的计算特性的优越性。