AK context cache method for wireless communication system

Abstract

Through AK context is buffered on mobile terminal, and authenticator, when moving to different base stations, mobile terminal can store AK context within its lifetime. At the same time, when moving back to the base station, which obtained and buffered the AK context effective till now, mobile terminal can continues using the AK context (mainly, packet sequence number of anti replay attack of up / down going link message) without need of authenticating again. The invention also raises efficiency of switching and moving system greatly, improves seamless communication performance between different sectors provided by system.

Description

Technical field [0001] The present invention belongs to the field of wireless communication technology, and in particular relates to a method for AK context caching in a wireless communication system. Background technique [0002] IEEE802.16 is a point-to-multipoint wireless data access technology standard defined by the IEEE organization. The system defined by IEEE802.16 consists of a base station (BS) and multiple mobile terminals (MS). The base station and the MS communicate in units of radio frames. Due to the openness and mobility of the wireless mobile communication system, the communication of the mobile terminal is easily monitored, and the system is also vulnerable to attacks, such as counterfeiting the identity of the mobile terminal and stealing the network. Therefore, almost all wireless communication systems have a complete set of security measures, including authentication and encryption. Authentication refers to confirming the identity of a mobile terminal to ensur...

AI Technical Summary

Problems solved by technology

[0019] Disadvantages of prior art 1: during the handover process, no re-authentication, just updating AK according to BSID changes, and reinitializing CMAC_PN_U and CMAC_PN_D have security risks

[0024] Disadvantages of prior art 2: when a terminal switches between multiple base stations, the sequence number of the current up / downlink message anti-replay attack packet needs to be transferred between base stations, the processing is slightly complicated, and the delay of switching may be increased. Time

[0027] Disadvantages of prior art 3: in the existing environment, the condition of the BS equipment room is poor (compared with the physical location of the network element where the authenticator is located, it is generally the central equipment room), and the space and equipment environment are severe, which affects the design of the single board and is not suitable for placement A large number of storage devices, etc. (including cache, etc.)

Images