Method, device and system of verification of safety association between terminal equipment and user card

Abstract

The invention discloses a method, a device and a system of verification of safety association between terminal equipment and a user card. The method, the device and the system of the verification of the safety association between the terminal equipment and the user card are used for achieving two-way safety verification between the user card and the terminal equipment under the premise that functions of the user card are not expanded, wherein the method of the verification of the safety association between the terminal equipment and the user card comprises receiving a first verification request sent by the terminal equipment when the terminal equipment accesses a core network; searching for a first authentication key which corresponds to a user card identification in a corresponding relationship which is pre-stored between the user card identification and the first authentication key according to the user card identification carried by the verification request; carrying out encryption on a terminal identification and the user card identification carried in the verification request by using the first authentication key which is found, and obtaining a second to-be-verified terminal identification; confirming that the safety association verification between the terminal equipment and the user card passes when a first to-be-verified terminal identification and the second to-be-verified terminal identification are the same; and confirming that the safety association verification between the terminal equipment and the user card does not pass when the first to-be-verified terminal identification and the second to-be-verified terminal identification are not the same.

Description

technical field [0001] The invention relates to the technical field of mobile communication security, in particular to a method, device and system for verifying the security of terminal equipment and user cards. Background technique [0002] In the existing mobile communication network, there is no security mechanism between the terminal equipment and the subscriber card, and the user can place any subscriber card in any terminal equipment. The subscriber card includes a Subscriber Identity Module (SIM, Subscriber Identity Module) card Or a Universal Subscriber Identity Module (USIM, Universal Subscriber Identity Module) card, etc. This method of use does not have security problems in common application scenarios, but it may have security problems in unattended scenarios such as the Internet of Things. For example, an attacker can destroy the communication between the terminal device and the user card through physical contact. Contact information, so that the specific user ...

AI Technical Summary

Problems solved by technology

In the above first solution, it is necessary to add functional modules to the user card to establish a secure channel, making the functions of the user card more complicated; in the above second solution, due to the short key space of the PIN code, The attacker can try to perform brute force cracking, and can only perform one-way authentication of the terminal device to the user card, but cannot authenticate the user card to the terminal device

Images