Authentication method based on the end-to-end communication of the mobile network

Abstract

The related certification method bases on mobile network P2P communication to define a general certification frame fit to different mobile network standards that entities can build accredit relation, wherein it includes steps as negotiating certification way, mutual certifying and querying certification. This invention adds flexibility and security strategy for based-derived-key further mutual certification and one dialogue key for one time dialogue, and can simplify the re-certification process on some conditions.

Description

technical field [0001] The invention belongs to the technical field of network communication services, in particular to an authentication method based on mobile network end-to-end communication. Background technique [0002] When most application servers provide a service to mobile users, they should first establish a mutual trust relationship with users, such as between mobile users and authentication agents, mobile users and public key infrastructure (PKI-Public Key-Infrastructure) certificates Between institutions, between mobile users and content providing servers, etc. Generally, this trust relationship is established during the two-way authentication process between the mobile user and the application server. [0003] In the third-generation wireless communication standard, the general authentication framework (GAA-GeneralAuthentication Architecture) is a general structure used by various application business entities to verify user identity. users to check and verif...

AI Technical Summary

Problems solved by technology

[0010] 1. The NAF in the General Authentication Framework (GAA) can only be used as a functional entity in the mobile network, but not as a functional entity in the open network, so that the UE cannot fully use the service resources in the network;

[0011] 2. With the increasing storage and processing capabilities of mobile terminals, in addition to using services provided by other entities, they may also provide services themselves, and GAA cannot support this situation

As a result, the mobile terminal cannot upgrade its own functions and carry out business and provide services

[0012] 3. The mutual authentication mechanism between UE and BSF can only use authentication and key agreement protocol (AKA); it cannot select the appropriate authentication method for the authentication method supported by the business entity and the service security level requirements used or provided by the entity authentication mechanism

Some business entities may not support this single AKA authentication method, or the AKA authentication method cannot meet the security level requirements of the business, resulting in mutual authentication failure or failure to meet the business security requirements

[0013] 4. The private identity is carried in the re-authentication request, which is easy to leak the confidentiality of the UE identity;

[0014] 5. The mutual authentication process between UE and NAF based on the derived key is not specified in detail. If the two parties use the derived key to directly conduct business communication, the communication between the two parties may fail due to inconsistent use of the derived key, resulting in a decrease in the success rate of the communication between the two.

Images