Device and method for decrypting NAS (Network Attached Storage) signaling in LTE (Long Term Evolution) protocol monitoring analysis

Abstract

The invention provides a device for decrypting an NAS (Network Attached Storage) signaling in LTE (Long Term Evolution) protocol monitoring analysis. The device comprises three parts: an NAS message decrypting parameter extracting module, an NAS message decrypting parameter storage maintaining module and an NAS message decrypting executing module. According to the technical scheme of the invention, the information related to UE (User equipment) safety is extracted from specific information on a S1-MME, S10 or S6a interface and is used for establishing, educing and maintaining the related parameters, such as a key, and the like, needed for decrypting the NAS information. Under the conditions of being free from changing the related configuration of an LTE network and configuring the data related to UE decryption for an LTE network protocol monitoring analysis system in advance, an operation of the protocol monitoring analysis system for decrypting the captured encrypted NAS information can be realized.

Description

technical field [0001] The invention belongs to the application field of communication network protocol monitoring and analysis technology. Background technique [0002] As an evolution technology of 3G (Third Generation), LTE can not only provide higher data rate and capacity, larger coverage, but also reduce service delay and system operating cost, which is beneficial for operators to launch more real-time, High-speed services, thereby attracting more high-end users. Compared with the UMTS system, the network structure and protocols of the LTE system have also undergone great changes. The schematic diagram of the LTE network structure is shown in figure 1 shown. [0003] The wireless access part of the LTE system is composed of a node called Enhanced Node B (Enhanced Node B), and the core network part is mainly composed of a Mobility Management Entity (MME), an S-GW (Serving Gateway) entity, and a packet data network gateway ( Packet DataNetwork Gateway, PDNGateway) ent...

AI Technical Summary

Problems solved by technology

[0009] Such a technical solution cannot be applied to the monitoring and analysis of LTE network protocols because of the following defects: Compared with the UMTS network system, the network structure, interface, and protocol of the LTE network system have undergone great changes. By extracting the information, the decryption of the message can be realized, and the LTE network system has a more complete security mechanism than the UMTS network system, so the existing approximate solution cannot realize the decryption of the encrypted message during the monitoring and analysis of the LTE network protocol

Images