Network access authentication method and its USIM card

Abstract

This invention relates to an authentication method for network access and its USIM card with a set of authentication keys in it same with the network side, in which, the method includes: a terminal starts up an access authentication request when the terminal logs onto the network or updates its position, the terminal side and the network side utilize mutual information and agreement to select same ones in the authentication key to access network authentication, in which, the message is the authentication token sent by the network side and the agreement is the corresponding relation of the special bit value of the authentication management domain and any authentication key in the set of keys, and it's not necessary to increase new signaling or change current authentication protocol to realize low cost based on the current 3G network access authentication process.

Description

technical field [0001] The invention relates to the third-generation mobile communication technology, in particular to a network access authentication method supporting key negotiation and algorithm negotiation and a USIM card thereof. Background technique [0002] Network access authentication is an important feature of the third generation mobile communication (referred to as 3G) security system, which is completed by the USIM card on the mobile terminal side, VLR / SGSN and HLR / AuC. Its basic principle is based on the permanent authentication key K shared by the USIM card on the mobile terminal side and the HLR / AuC on the network side. As shown in Figure 1, in the third-generation mobile communication network access authentication process, the authentication is jointly completed by the built-in USIM of the mobile terminal, the network-side VLR / SGSN and HLR / AuC. The permanent authentication key K is respectively preset in the USIM card at the mobile terminal side and the HL...

AI Technical Summary

Problems solved by technology

[0013] The authentication mechanism using this shared single permanent key K has certain security flaws, because the attacker can intercept the authentication vector (AUTN, RAND) issued by the network and the USIM card response result RES through air interface monitoring. After obtaining a large number of authentication parameters and response results, the threat of calculating the key K by attacking the algorithm always exists

If there is an accidental disaster where the key K is broken or leaked, the harm will be very serious

Images