A Method for Realizing Security Guarantee in Evolved Access Network

Abstract

The invention discloses a method for realizing security assurance in an evolved access network. The UE and the evolved access network respectively maintain more than one counter, and the counter value is used to represent the data transmitted between the UE and the evolved access network The method includes: when the set condition is satisfied, the evolved access network initiates a data volume check to the UE, the UE or the evolved access network compares the counter value maintained by itself with the counter value provided by the opposite end, and the evolved access network Subsequent processing is performed according to the check result of whether there are counters with inconsistent values, so that the security of the evolved access network can be determined according to the check result. In addition, the information or signaling and messages transmitted between the UE and the evolved access network are integrity protected using the key shared between the UE and the evolved access network, and periodic local authentication is further realized through the integrity protection.

Description

technical field [0001] The present invention relates to the evolution access network technology, in particular to a method for realizing security guarantee in the evolution access network. Background technique [0002] In order to maintain the competitiveness of the access system of the 3rd Generation Partnership Project (3GPP, 3rd Generation Partnership Project), research on long-term evolution (LTE, Long Term Evolution) and system architecture evolution (SAE, System Architecture Evolution) in network evolution is ongoing . The goal of network evolution is to simplify the network structure and reduce the access time delay. [0003] figure 1 A schematic diagram of the LTE / SAE access network architecture is shown, as shown in figure 1 As shown, the aGW (E-UTRAN Access Gateway) is the access gateway of the Evolved Global Terrestrial Radio Access Network (E-UTRAN, Enhanced Universal Terrestrial Radio Access Network), located in a safe physical location, and the eNodeB or evo...

AI Technical Summary

Problems solved by technology

[0004] Since the channel of the air interface is an extremely unstable channel, the possibility of data packet loss on this channel is very high; in addition, due to the wireless characteristics of the air interface, an attacker can easily initiate packet insertion on the air interface , packet deletion and other attacks; in addition, the eNodeB is in an unsafe physical location and is extremely vulnerable to malicious attacks. Therefore, it is urgent to provide a security guarantee solution in E-UTRAN to ensure that the user terminal (UE, User Equipment) ) is consistent with the amount of uplink and downlink data between E-UTRAN

Images