Certifying method and its device for radio network end-to-end communication

Abstract

Being in use to implement authentication end-to-end in Kerberos model of wireless network, the method includes following steps: (1) the party to a contract of service sends authentication request (AR)to entity authentication center (EAC); AR includes id of public identity of service provider corresponding to services requested by the party to a contract; (2) EAC makes out authentication responsecorresponding to AR based on information contained in AR; (3) if authentication response validates AR, then EAC sends out service request carrying certification that the party to a contract of servicehas passed authentication, and credence entitled to the use the service; (4) the party to a contract of service makes out service response to the service request; (5) if service response is successful, corresponding service starts to carry out between the party to a contract of service and the service provider.

Description

technical field [0001] The present invention relates to the field of wireless communication, and more specifically relates to a method and a device for applying the Kerberos model to wireless network end-to-end communication authentication. Background technique [0002] In end-to-end communication of wireless network services, in order to protect communication content, a communication authentication scheme has been developed. The following will refer to figure 1 A method for end-to-end communication authentication of a wireless network service in the related art will be described. [0003] figure 1 Shown is a schematic diagram of an end-to-end communication authentication framework 100 in a wireless mobile network in the related art. This framework is applicable to different mobile network standards, and its function is to establish mutual trust relationship between different types of entities. It is a real A common authentication framework in the sense. In addition to t...

AI Technical Summary

Problems solved by technology

[0027] 1. Since the user and the AS request authentication through passwords, password guessing attacks cannot be well prevented;

[0028] 2. In a wireless network, when the service requester is a mobile terminal, the transmission of shared keys and tickets over the air interface is easy to be intercepted and cracked; and

[0029] 3. It is necessary to apply for a ticket twice to obtain the service, which is too burdensome for the mobile terminal

[0030] Therefore, the Kerberos model of the above-mentioned related technologies cannot be well applied to wireless networks, and people need to provide a solution that can solve the problems in the above-mentioned related technologies

Images