Authentication method for accessing mobile subscriber to core network through femtocell

Abstract

The invention discloses an authentication method for accessing a mobile subscriber to a core network through a femtocell, which mainly makes up for the defect that a complete authentication method for accessing the mobile subscriber to the core network is not provided in the 3GPP standard. Under the condition of not changing network equipment in the 3GPP standard, the conventional extensible authentication protocol and key agreement EAP-AKA and internet key exchange IKEv2 are improved. The authentication method comprises that: (1) a secure channel IPsec is established between the femtocell and a secure gateway; (2) the mobile subscriber is subjected to access authentication and pre-generates an important authentication parameter MK for a step (3); and (3) the mobile subscriber and the core network perform bidirectional authentication by using the IPsec established by the step (1) and the MK pre-generated by the step (2). Compared with the traditional authentication method using the EAP-AKA and the IKEv2, the authentication method optimizes authentication steps under the condition of not reducing security, reducing authentication overhead, has the advantages of security and quickness, and is suitable for scenes that the mobile subscriber accesses the core network through the femtocell.

Description

technical field [0001] The invention belongs to the technical field of communication security, and relates to an authentication method for a mobile user to access a core network through a home base station, which can be used in any scenario where a mobile user needs to access the core network through a home base station, such as home, school, laboratory, office, etc. . Background technique [0002] Femtocell, also known as femtocell, is a small, low-power cellular base station, mainly used in indoor places such as homes and offices. Its role is to provide users with voice and data services as a supplement to the indoor coverage of the cellular network. Femtocells use the IP protocol and adopt a flat base station architecture, which can access the core network of mobile operators through existing broadband means. The far end realizes the connection from the IP network to the mobile network by a dedicated gateway. From the perspective of network connection only, the femto b...

AI Technical Summary

Problems solved by technology

[0004] Different from traditional macro base stations, femtocells are connected to the core network of mobile operators through an untrusted link of the fixed network operator, so that the core network of the operator is directly connected to the public network, which will inevitably bring new possibilities to the network management of the operator. risks of

In addition, femtocells are deployed in an untrusted environment and are extremely vulnerable to attacks from malicious users. Using femtocells as a springboard further poses a serious threat to operators' core networks and user terminals

Therefore, 3GPP has carried out standardization work on home base station security, and proposed a series of home base station security solutions, including home base station device authentication and mobile user access authentication, but 3GPP has not given a complete mobile The authentication method for the user to access the core network through the home base station, and no other research organization or individual has proposed a complete authentication method at present

Images