Identification web page service network system and its authentication method

Abstract

The present invention discloses a system for a status identification net page operation network and authority identification method thereof. The system for a status identification net page operation network comprises a HSS, a BSF, an entity of network business application function / authority identification service / single-point authentication, a SP and an UE. The authority identification method comprises following steps: a communication process of the UE and the SP includes a GBA authority identification process and an ID-WSF authority identification process; during the GBA authority identification process, a guiding service functional entity generates a guiding affair mark and a period of validity of root secret-key, transmitts them to the UE, both the guiding service functional entity andthe UE generates the root secret-key; during the ID-WSF authority identification process, an AS entity or an AS module generates a credit certificate required by user terminals for accessing a SSOS entity or a SSOS module; the single-point authentication entity / module generates declaration of authority identification and transmitts it to the UE, or the single-point authentication entity / module generates declaration of authority identification and the corresponding link thereof, a corresponding relationship table of the declaration of authority identification and the corresponding link is saved, and the link for declaration of authority identification is transmitted to the UE.

Description

technical field [0001] The present invention relates to the technical field of the Internet, the technical field of Next Generation Networks (NGN, Next Generation Networks) and the technical field of the Third Generation Partnership Project (3GPP, The Third Generation Partnership Project), in particular to an identity identification web service network system (ID-WSF , Identity Web Service Framework) and its authentication method. Background technique [0002] Such as figure 1 As shown, 3GPP defines a generic authentication architecture (GBA, Generic Bootstrapping Architecture), and the generic authentication architecture is usually composed of an IP multimedia service subsystem (IMS, IP Multimedia Core Network Subsystem) user terminal (UE, UserEquipment), a bootstrapping service function Entity (BSF, Bootstrapping Server Function), user home network server (HSS, Home Subscribe Server), subscriber location function entity (SLF, Subscriber Locator Function) and network servi...

AI Technical Summary

Problems solved by technology

[0028] The technical problem to be solved by the present invention is to provide an identity identification webpage business network system and its authentication method, which overcomes the inability to use the GBA authentication method in the process of authenticating the ID-WSF UE in the prior art, and the communication security low disadvantage

Images