Method and device for realizing the extended authentication protocol in the wireless network

Abstract

The related method for realizing EAP certification in wireless network comprises: on authentication device, generating corresponding EIK according to obtained MSK in EAP process; then, sending EIK message to BS to generate complete EIK text. This invention improves security for wireless communication network business, both on preventing illegal attack to provider, and providing reliable business for user.

Description

technical field [0001] The present invention relates to the technical field of wireless communication, and in particular, to an authentication technology in a wireless communication network. Background technique [0002] In the wireless communication network, according to the 802.16 protocol, the mobile terminal must establish the same AK (authorization key) context to communicate with the base station. The AK context includes: AK, AKID (authorization key identifier), AK Sequence Number (Authorization Key Sequence Number), AK Lifetime (Authorization Key Lifetime), PMK Sequence Number (Dual Master Key Sequence Number), HMAC / CMAC_KEY_U (Uplink Message Integrity Protection Key), HMAC / CMAC_PN_U (Uplink Message Integrity Protection Key) link message anti-replay attack packet sequence number, referred to as PN_U), HMAC / CMAC_KEY_D (downlink message integrity protection key), HMAC / CMAC_PN_D (downlink message anti-replay attack packet sequence number, referred to as PM_D), KEK (Key ...

AI Technical Summary

Problems solved by technology

[0046] 1. The parameter information required in the EAP authentication process passed between entities is limited, and EAP authentication cannot be completed well, for example, only authorization policy support information is carried in steps 23 and 24;

[0047] 2. Regarding the two EAP authentication processes currently proposed, the above process cannot distinguish the current EAP authentication method (single EAP authentication or two EAP authentications), and cannot complete the entire EAP authentication process well.

[0048] Therefore, the corresponding EAP authentication cannot be reliably implemented in the existing wireless communication network, and the security performance of the network cannot be well guaranteed.

Images