Method, system and mobile terminal of preventing playback attack

Abstract

The invention discloses an anti-replay attack method. The method comprises the following: when a mobile end (ME) of the user equipment confirms that a prior user card is different from a former user card, an authentication sequential number (SQN), which does not meet the requirement for authentication passing, is generated, and sends a SQN resynchronization request carrying the SQN to the network side; the network side generates a SQN synchronous with ME as the SQN of the network side, according to the received SQN resynchronization request. In addition, the invention also discloses an anti-replay attack system and a mobile end. The method, the system and the mobile end provided by the invention can avoid the replay attack.

Description

technical field [0001] The invention relates to authentication technology in a mobile communication system, in particular to an anti-replay attack method, system and mobile terminal (ME). Background technique [0002] In a mobile communication system, in order to ensure the security of operational services, the network side must authenticate the user equipment (UE) that is accessed, so that illegal UEs cannot obtain services provided by the network side and protect the interests of operators; UEs will also Verify whether the authentication information sent by the network side is valid, that is, the UE authenticates the network side to prevent the illegal network side from using the authentication information that the legal network side has used to replay the UE to make the UE believe that the illegal network side is legal . [0003] Usually, the authentication of the UE by the network side and the authentication of the network by the UE are included in one authentication pr...

AI Technical Summary

Problems solved by technology

In practical applications, the SQN of the UE may be stored in the user card or in the ME. For example, for users of the second generation mobile communication system (2G) that need to use the Internet Protocol Multimedia Subsystem (IMS) service, Since the user card does not support the IMS module, relevant parameters cannot be saved, such as keys and SQN, etc., the SQN required for registration of IMS service authentication can only be stored in the ME, but in the prior art, there is no right to store in the ME The generation and management of SQN are clearly explained

For this kind of user, because the SQN information of the user card is stored in the original ME, when the user card is moved from one ME to another ME, the SQN information of the user card will be lost, and the new replacement card may be obtained. If the SQN stored in the current ME of the original ME is X, and the SQN is Y in the current ME, and if Y is less than X, when the above authentication is performed, the value of the SQN will not be verified for the user card. Incremental update, but reduced, at this time, it may be attacked by replay, and the authentication of the illegal network side passes

Images