Cryptographic key generation and distribution method and system based on Diameter server

Abstract

The invention provides a key generating and distributing method based on a Diameter server and a system, belonging to the mobile communication filed. In order to solve the problems of the prior art of the unsafe distribution of the key of a movable node and the high fee, the invention provides a key generating and distributing method based on a Diameter server. The method comprises the following steps that: an MN sends a mark of an NAR to a PAR; after receiving the mark, the PAR sends the mark of the NAR and a mark of the MN to the Diameter server; after the Diameter receives the marks, a uniform random number is firstly generated and a share key is generated according to the uniform random number; the Diameter server sends the share key to the NAR and sends the uniform random number to the MN; after the MN receives the uniform random number, a share key is generated. The invention also provides a key generating and distributing system based on the Diameter server. The technical proposal adopted the invention avoids the domino effect and improves the security of the share key.

Description

technical field [0001] The invention relates to the field of mobile communication, in particular to a Diameter server-based key generation and distribution method and system. Background technique [0002] The MIP6 protocol provides a method that allows the mobile node to communicate using the home IP address while roaming in the IPv6 network. It requires the mobile node to register the care-of address with the home agent when it moves to a foreign network. When the mobile node switches from a foreign access router to another router, it needs to obtain COA (Care-Of Address, care-of address) again and register with the home agent. The solution in the MIP6 basic agreement is to obtain a new COA after the mobile node moves to a new access router. [0003] The MIP6 basic protocol has the following problems: [0004] (1) The mobile node obtains the COA after moving to a new router, and the communication between the mobile node and the correspondent node will be interrupted befo...

AI Technical Summary

Problems solved by technology

NAR gets switch root key from PAR causes domino effect

Once an AR in the domain is breached, the switch key of the MN after passing through the AR will be easily obtained;

[0027] Expensive to deploy: PAR is responsible for authentication meaning that all ARs need to have authentication capabilities

Deploying such a network is very expensive

Images