Method for getting service key

Abstract

This invention discloses a method for obtaining service keys including: NAF determines services to be initiated to send a push service key request to BSF, which applies the key computation method to compute the obtained push service key based on the obtained push service key and returns it to the NAF to send the push information to UE, which computes to get the push service key. This invention can differentiate the service key initiated actively by NAF and that initiated by UE by altering the computation formula of the service key started up by UE or adding a push service authorization label parameter for the push service key so as to avoid that NAF not ordering the push service uses the service.

Description

Technical field [0001] The present invention relates to the field of authentication technology, in particular to a method for obtaining a service key applied in a service initiated by a network side. Background technique [0002] In the third-generation wireless communication standard, the General Authentication Framework (GAA) is a user identity verification structure used by multiple application service entities and provides a key for secure communication for users to access application services. Application services can be multicast / broadcast services, user certificate services, instant information provision services, etc., or agency services. [0003] Figure 1 is a schematic diagram of the GAA structure. As shown in Figure 1, GAA is usually composed of a user terminal (UE) 101, a guided authentication server entity (BSF) 102 that performs initial check and verification of user identity, a user home server (HSS) 103, and positioning The subscriber entity (SLF) 104 and the netw...

AI Technical Summary

Problems solved by technology

[0023] From the process shown in Figure 2 and Figure 3, it can be seen that the Ks used by the NAF to initiate the Push service is the same as that used by the UE when the UE initiates the service, and the calculation method of using Ks to calculate the NAF-related key is the same, and the resulting NAF-related The key is also the same, so the problem is: if the UE has initiated the service to the NAF before the NAF initiates the Push service to the UE, the NAF must have saved the NAF-related key used for communication with the UE. Therefore, when the NAF initiates the push service, it does not need to initiate a key request to the BSF, but directly uses the NAF-related key used by the UE to initiate the service for the push service, which will allow the NAF to use the Push service without subscribing to the Push service. service, or make NAF use the Push service to pretend to be a service initiated by the UE when subscribing to the push service. In the former case, it is obvious that the NAF will use network resources free of charge and cause losses to the operator; for the latter In this case, if the usage fee of the Push service is higher than the usage fee of the service initiated by the UE, it will also cause losses to the operator

In addition, if the service initiated by the UE to the NAF and the push service initiated by the NAF to the UE share the same key, the key leakage of one of the services will cause the other service to be attacked, which will also affect the user and the NAF itself. poses a threat and reduces network security

Images