Method, device and system for key agreement

Abstract

The invention discloses a method, a device and a system for key agreement. The method comprises the following steps: a first key agreement device receives a first key agreement request sent by a first terminal, wherein the identification information of a second terminal is contained in the first key agreement request; the first key agreement device generates a random number R1 according to the received first key agreement request and sends a second key agreement request and the random number R1 to a second key agreement device corresponding to the second terminal according to the identification information of the second terminal; the second key agreement device generates a random number R2 and sends the random numbers R1 and R2 and a third key agreement request to the second terminal; the second terminal generates a session key according to the random numbers R1 and R2; the first key agreement device receives the random number R2 sent by the second key agreement device and sends the random numbers R1 and R2 to the first terminal; and the first terminal generates a session key according to the random numbers R1 and R2 and communicates with the second terminal on the basis of the session key. Accordingly, the invention can achieve the encrypted communication between the first terminal and the second terminal.

Description

technical field [0001] The invention relates to the technical field of mobile communication, in particular to a key negotiation method, device and system. Background technique [0002] With the widespread application of mobile communication systems, mobile communication is closely related to people's lives, and its security has always been concerned by people. In the existing mobile communication system, various protection mechanisms including user identity authentication and data confidentiality are provided. During the access authentication process of the terminal, the terminal and the network side negotiate to generate the private key of the terminal, and then the terminal uses the private key to pair The data sent to the network side is encrypted, and the network side uses the terminal's private key to decrypt the encrypted data after receiving it. [0003] The prior art provides a key agreement method, which mainly includes: the terminal sends an access authentication ...

AI Technical Summary

Problems solved by technology

[0005] In order to solve the problem of complex encrypted communication process in the prior art, the present invention provides a key agreement

Images