Network access authentication method and its USIM card

Abstract

The invention relates to an authentication method and a USIM card for internet access, wherein, the USIM card is built in a group of authentication algorithm and authentication algorithm mark list which are the same as the side of the internet. The authentication method comprises: an access authentication requirement is launched by the terminal when the terminal logs in the internet or the position is updated; the side of the terminal and the side of the internet select the same one in a group of authentication algorithm with mutual message and agreement to undergo internet access authentication; the message is an authentication token issued by the side of the internet, the agreement is the corresponding relationship of a special place value of authentication management field in the authentication token and any authentication algorithm in a group of authentication algorithm. The method and the USIM card are based on the existing 3G network access authentication process and do not need to add new signaling or change the existing authentication agreement, with low realization cost; meanwhile, the method and the USIM card reduce the security risk of deciphering authentication key and authentication algorithm compared with the original network access authentication security system with single key and single algorithm.

Description

technical field [0001] The invention relates to the third-generation mobile communication technology, in particular to a network access authentication method supporting key negotiation and algorithm negotiation and a USIM card thereof. Background technique [0002] Network access authentication is an important feature of the third generation mobile communication (referred to as 3G) security system, which is completed by the USIM card on the mobile terminal side, VLR / SGSN and HLR / AuC. Its basic principle is based on the permanent authentication key K shared by the USIM card on the mobile terminal side and the HLR / AuC on the network side. As shown in Figure 1, in the third-generation mobile communication network access authentication process, the authentication is jointly completed by the built-in USIM of the mobile terminal, the network-side VLR / SGSN and HLR / AuC. The permanent authentication key K is respectively preset in the USIM card at the mobile terminal side and the HL...

AI Technical Summary

Problems solved by technology

[0013] There are certain security flaws in the authentication mechanism using this shared single permanent key K, because the attacker can intercept the authentication vector (AUTN, RAND) issued by the network and the USIM card response result RES through air interface monitoring. After obtaining a large number of authentication parameters and response results, there is always the threat of calculating the key K by attacking the algorithm

If there is an accidental disaster where the key K is broken or leaked, the harm will be very serious

Images