Method for realizing intra-mobile entity authentication and cipher key negotiation using short message

Abstract

The invention provides a method for entity authentication and key consultation by short message, which belongs to security domain of motion network. The characteristic is: using the identity information in the short message and the last value of the Hasche chain in the TAA public key encryption as the key when doing the fisrt certification and call between the mobile termination of the credible authentication center TAA and the application server. After that, can just shift the length of the Hasche chain to be bigger than 0 to do the Hasche operation once more by the short message. Verify the termination identity comparing with the former Hasche value as the new key for identity. The invention has few expenses, simple operation, without bottleneck, the support of anonymous and secure merit.

Description

technical field [0001] The invention belongs to the field of mobile network security, and in particular relates to an authentication and key negotiation method realized by using short messages, which can be used between a mobile terminal and an application server or between a mobile terminal and a mobile terminal. Background technique [0002] Mobile network applications make full use of the mobility, convenience and individuality of the network and mobile terminals, overcome the limitations of traditional network applications in terms of space distance, save time, funds and other costs of network applications, and promote the global integration of the economy , providing users and merchants with a broader and more convenient transaction channel. Mobile network applications involve huge economic interests of individuals and society, so security is a key factor in the development of mobile network applications. Two-way authentication between mobile network application entiti...

AI Technical Summary

Problems solved by technology

The main problems of this scheme are: 1) what is provided is not end-to-end security, and the security gateway is a safe connection point; 2) the scheme increases the processing delay of the SMS system; 3) the security gateway is the bottleneck of the system, and any of its Performance or security issues may affect all users and applications; 4) Its key management and authentication protocols cannot directly establish a trust relationship between users and servers, and are not suitable for applications with many entities and diverse security requirements. Provide message non-repudiation and anonymity

Images