Security certificate method of femtocell base station and femtocell wireless communication system

Abstract

The invention provides a security certificate method of a femtocell base station and a femtocell wireless communication system. The method comprises the following steps that: a certification authority issues a private key of an SG to the SG and issues a certificate to an SIM card, and the certificate comprises a public key corresponding to the private key; the SIM card generates a first random number to carry out base station certification on the femtocell base station; after the base station certification is passed, the SIM card generates a second random number and carries out gateway certification on the SG based on the private key and the public key; after the gateway certification is passed, the SG establishes an IPsec channel between the femtocell base station and the SG. According to the method and the system, the certificate is not needed to be solidified in the femtocell base station, thus when the certificate is needed to be replaced, only carrying out off-line non-real-time updating on the private key in the SG and the SIM card which is internally installed with a new certificate is required, thus a problem of replacing the certificate is solved, and the convenience of certificate replacement is realized.

Description

technical field [0001] The invention relates to a safety authentication method for a femtocell base station and a femtocell wireless communication system, and belongs to the technical field of femtocells. Background technique [0002] A femtocell base station, also called a home base station (abbreviation: HBS), is a small, low-power cellular base station, mainly used in indoor places such as homes and offices. Its role is to provide users with voice and data services as a supplement to the indoor coverage of the cellular network. The femtocell base station uses IP protocol and adopts a flat base station architecture, and can access the core network of mobile operators through existing broadband means such as digital subscriber line (DSL), coaxial cable (Cable) or optical fiber. [0003] Different from traditional macro base stations, femtocell base stations are connected to the core network of mobile operators through untrusted links of fixed network operators, which leads...

AI Technical Summary

Problems solved by technology

[0005] There are at least the following problems in the prior art: the certificate equipped on the femtocell base station is not pluggable, and is fixed in the hardware terminal of the femtocell base station

When the certificate needs to be replaced due to certificate leakage, etc., it is difficult to realize the certificate replacement in the environment of non-uniform software and hardware interfaces.

That is, to replace the certificate, you need to use the software upgrade interface of the femtocell base station, but at this stage, the interface has not yet formed a mandatory specification, and different manufacturers have different degrees of openness to this

However, it is also impossible to adapt to the equipment of different manufacturers through the management platform of the femtocell base station due to the large number of models.

Images