Device and method for decrypting NAS signaling in LTE protocol monitoring and analysis

Abstract

The present invention provides a decryption device for an NAS signalling in LTE protocol monitoring and analysis, comprised of three parts: a decryption parameter extracting module for an NAS message, a decryption parameter storage and maintenance module for the NAS message, and a decryption executing module for the NAS message. By means of the technical solution in the present invention, information about the security of UE is extracted from certain messages at the S1-MME, S10 or S6a interface, and is used to establish, derive, and maintain the associated parameters required for decrypting the NAS message. The decryption operations can be performed by a protocol monitoring and analysis system on the encrypted NAS messages captured, without changing the related configuration of the LTE network or configurations of the data related to UE decryption beforehand on the LTE network protocol monitoring and analysis system.

Description

technical field [0001] The invention belongs to the application field of communication network protocol monitoring and analysis technology. Background technique [0002] As an evolution technology of 3G (Third Generation), LTE can not only provide higher data rate and capacity, larger coverage, but also reduce service delay and system operating cost, which is conducive to operators to launch more real-time, high-speed speed business, thereby attracting more high-end users. Compared with the UMTS system, the network structure and protocols of the LTE system have also undergone great changes. The schematic diagram of the LTE network structure is shown in figure 1 shown. [0003] The wireless access part of the LTE system is composed of a node called EnhancedNodeB (EnhancedNodeB), and the core network part is mainly composed of a mobile management entity (MobilityManagementEntity, MME), an S-GW (ServingGateway) entity, and a packet data network gateway (PacketDataNetworkGatew...

AI Technical Summary

Problems solved by technology

[0009] Such a technical solution cannot be applied to the monitoring and analysis of LTE network protocols because of the following defects: Compared with the UMTS network system, the network structure, interface, and protocol of the LTE network system have undergone great changes. By extracting the information, the decryption of the message can be realized, and the LTE network system has a more complete security mechanism than the UMTS network system, so the existing approximate solution cannot realize the decryption of the encrypted message during the monitoring and analysis of the LTE network protocol

Images