Method and system for multicast and broadcast service authentication and authorization

Abstract

This invention provides a method and a system for realizing authentication authorization of MBS service including: a user terminal sends a MBS service authentication request to the MBS server including safety information used in verifying validity of user terminal identity, MBS enquires if it holds the safety information, if so, it judges if it is legal, if not, the MBS sends an authentication request to AAA server or a server of a third party to ask for verifying if the user terminal is a signed user and if the authentication request information to the AAA server or the third party server bythe MBS is legal, which reduces time of authority authentication of MBS service and prevents illegal attack effectively.

Description

technical field [0001] The invention relates to the field of wireless communication, in particular to a method and system for realizing multicast broadcast service authentication in a wireless network. Background technique [0002] Multicast broadcast service (Multicast & Broadcast Service) MBS service refers to the service in which the air interface sends the same information content to some or all end users in a wireless network, which is conducive to realizing network resource sharing and improving the utilization rate of network resources. In the CDMA 3GPP network, there are descriptions for MBS service authentication and authentication. However, in wireless networks, how to realize MBS service authentication and authentication, effectively ensure that MBS services are only for authorized users, and prevent MBS services from being stolen. Wireless network standards Haven't set foot yet. [0003] Such as figure 1 As shown, in the CDMA 3GPP network, the MBS server pre-st...

AI Technical Summary

Problems solved by technology

[0005] 1. The MBS server and the user terminal need to interact with four messages to complete the MBS service authentication, which takes a long time for authentication and wastes broadband resources;

[0006] 2. In message interaction, without message integrity protection and verification, user terminal authentication will fail: when an attacker fakes a user terminal and sends a service request message containing digest A" to the MBS server, the MBS server receives this After receiving the message, the MBS server generates a digest A' according to the pre-stored authentication key MRK, which will cause the two digests A' and A" to not match, so that the service request sent by the legitimate user terminal cannot pass the verification, so that the user terminal cannot Access to the network; similarly, the attacker can also send a tampered service request message, which contains the digest A", which will also cause the digest to not match, so that the service request sent by the legitimate user terminal cannot pass the verification, and the user terminal cannot access the network

Images