Method for realizing user and network authentication and key distribution based on public key

Abstract

The invention provides a method for realizing user and network authentication and key distribution based on a public key. The method comprises the following steps that: 1) a set of public key infrastructure (PKI) is installed in a communication network, and a certificate authentication centre issues a public key certificate to a communication entity in the network; 2) user equipment and a network mobility management entity perform mutual authentication by checking the public key certificates; 3) the user equipment and a network affiliation user server respectively generate a random number and a session key, wherein the session keys are deduced by the user equipment and the network affiliation user server according to the two random number; and the session keys deduced by the network affiliation user server is transmitted to the network mobility management entity; and 4) the user equipment and the network mobility management entity protect communication data through the session keys. The method can further solve the problem that the existing system easily leaks user identifies, that the authentication vector is easily captured, that the key K is shared for a long time and that a data sign is not supported, and enhance the safety of communication.

Description

technical field [0001] The invention is mainly applied in the communication field, and specifically relates to a public key-based method for realizing mutual authentication between a user and a network and key distribution in communication. Background technique [0002] LTE / SAE (Long Term Evolution / System architecture evolution) is 3GPP's evolution technology for UMTS (Universal Mobile Telecommunications System), which supports 100Mbps downlink and 50Mbps peak uplink under 20MHz spectrum bandwidth rate. The LTE / SAE network consists of user equipment, access network and core network. [0003] In the UMTS system, the mutual authentication between UE (User Equipment) and the network adopts AKA (Authentication and Key Agreement) authentication. The authentication process of the EPS (Evolved Packet System) system is basically the same as the AKA authentication process in UMTS. It adopts the Milenage algorithm, inherits the advantages of the quintuple authentication mechanism in...

AI Technical Summary

Problems solved by technology

[0014] The purpose of the present invention is to propose an improved authentication and key distribution method based on the public key system, which can further solve the existing mechanism of user identity leakage, authentication vector is easily intercepted, long-term shared key K and does not support The problem of data signature, improve the security performance of communication

Images