Certifying method and its device for radio network end-to-end communication

Abstract

Being in use to implement authentication end-to-end in Kerberos model of wireless network, the method includes following steps: (1) the party to a contract of service sends authentication request (AR) to entity authentication center (EAC); AR includes id of public identity of service provider corresponding to services requested by the party to a contract; (2) EAC makes out authentication response corresponding to AR based on information contained in AR; (3) if authentication response validates AR, then EAC sends out service request carrying certification that the party to a contract of service has passed authentication, and credence entitled to the use the service; (4) the party to a contract of service makes out service response to the service request; (5) if service response is successful, corresponding service starts to carry out between the party to a contract of service and the service provider.

Description

technical field [0001] The present invention relates to the field of wireless communication, and more specifically relates to a method and a device for applying the Kerberos model to wireless network end-to-end communication authentication. Background technique [0002] In end-to-end communication of wireless network services, in order to protect communication content, a communication authentication scheme has been developed. The method for end-to-end communication authentication of wireless network services in the related art will be described below with reference to FIG. 1 . [0003] FIG. 1 is a schematic diagram of an end-to-end communication authentication framework 100 in a related art wireless mobile network. This framework is applicable to different mobile network standards, and its role is to establish mutual trust relationships between different types of entities. A truly universal authentication framework. In addition to the three types of business entities invol...

AI Technical Summary

Problems solved by technology

[0027] 1. Since the user and the AS request authentication through passwords, password guessing attacks cannot be well prevented;

[0028] 2. In a wireless network, when the service requester is a mobile terminal, the transmission of shared keys and tickets over the air interface is easy to be intercepted and cracked; and

[0029] 3. It is necessary to apply for a ticket twice to obtain the service, which is too burdensome for the mobile terminal

[0030] Therefore, the Kerberos model of the above-mentioned related technologies cannot be well applied to wireless networks, and people need to provide a solution that can solve the problems in the above-mentioned related technologies

Images