Combination authentication method and system of internet protocol multimedia subsystem (IMS) single sign on

Abstract

The invention discloses a combination authentication method of internet protocol multimedia subsystem (IMS) single sign on. The combination authentication method of IMS single sign on includes the following steps. A service provider (SP) sends a response message to IMS user equipment (UE), wherein the response message carries identification authentication request information AuthnRequest and address information of an L_identity provider/application server (IdP/AS). The IMS UE sends a hyper text transport protocol (HTTP) service request message to the L-IdP/AS based on the address information of the L_IdP/AS, wherein the HTTP service request message carries the AuthnRequest. The L_IdP/AS sends a challenge response message to the IMS UE. The IMS UE performs self authentication through an authentication method based on a single sign on (SSO) framework in a single sign on_ application packaging standard (SSO_APS). After authentication of the IMS UE succeeds, the L_IdP/AS performs authentication on identification of the IMS UE. If the authentication is successful, L_IdP/AS and the IMS UE set up a safety alliance. The invention further provides a combination authentication of IMS SSO. Fusion and intercommunication between the SSO framework and a free alliance framework in the SSO_APS can be achieved.

Description

technical field [0001] The invention relates to network communication security technology, in particular to a combined authentication method and system for IMS single sign-on. Background technique [0002] Now in the 3GPP organization, there is a research project for the Unified IP Multimedia Subsystem (IMS, IP Multimedia Subsystem) UE using SIP Digest (Session Initiation Protocol Digest) in a non-Universal Integrated Circuit Card (UICC, Universal Integrated Circuit Card) environment. ) authentication mechanism realizes the single sign-on (SSO, Single Sign On) function of its access application server (AS, Application Server), and one of the SSO architectures in SSO_APS can realize this function, and the architecture is usually provided by a unified IMS user (such as IMS UE or IP Multimedia Service Subsystem user), user home network server (HSS, Home Subscriber Server), AS, and identity authentication provider entity (IdP); wherein, the IMS UE is connected to the IdP through...

AI Technical Summary

Problems solved by technology

[0006] On the one hand, in the SSO_APS architecture, the IMS UE interacts with the SSO server for authentication to obtain the shared key K 0 , can provide a secure session key for subsequent access to RP applications, and can easily complete the single-point authentication process, which enhances the security of authentication and message delivery, but increases the complexity and inconvenience of IMS UE operations

Images