Method and system for security authentication and card exchanging process for application service

Abstract

The invention provides a method and a system of safety authentication and card renewal for application service, which are utilized for an enhanced generic authentication architecture (GBA_U) based on universal integrated circuit cards. The method comprises that IP multimedia private identities of last used user cards are stored in a mobile terminal, after the user accesses to the service application, that whether the process of the generic authentication architecture needs to be carried out again or not before security negotiation is confirmed according to the following conditions: whether the user terminal is locally provided with the user key information or not, and whether the user card is renewed or not. The compared results between the user identity of the current card and the storeduser identity in the mobile terminal show that the method and the system of the invention can enable the user equipment with / without an IP multimedia service identity module to be adaptable to service encryption and safety authentication based on the GBA_U architecture, and card renewals are judged according to the user identity read from the card, thereby avoiding authentication failures due to the card renewal when the user accesses to the service application.

Description

technical field [0001] The invention relates to a general authentication architecture technology, in particular to a method and system for security authentication and card replacement processing of application services based on the GBA_U architecture. Background technique [0002] With the development of many services, both operators and users need a reliable authentication mechanism to ensure legal service use and correct billing. Especially in 3G services, many applications require mutual authentication between the user terminal equipment (UE) and the application server, so it is necessary to define a general authentication architecture (GAA). GAA aims to provide a general authentication mechanism, which can be used for both existing services and new services in the future, so as to avoid providing a unique authentication mechanism for each new service. A common mechanism for different applications avoids the differences between various mechanisms, so that the problem of ...

AI Technical Summary

Problems solved by technology

[0009] However, there are other UEs in practical applications, such as SIM cards (subscriber identity module cards, or user identification cards) or UICC cards that only support USIM applications and other user equipment that do not contain IP multimedia service modules. When NAF is applied, since they do not have the IP multimedia service identifier IMPI, they will not be able to establish the shared key Ks_ext_NAF to complete the user authentication required by the network side, so that this type of user equipment cannot apply the GBA_U authentication framework

Images