Key generation and distribution method for wireless communication system

Abstract

The invention relates to the technical field of communication security, and more particularly to a key generation and distribution method for a wireless communication system. The key generation and distribution method comprises the steps that: a terminal and an access point generate physical layer keys based on wireless communication channel features of the two parties; an authentication center generates authentication data and a non-access-layer key by means of a root key associated with identity of the terminal and an access-layer authentication key; the terminal authenticates the access point and the authentication center by utilizing the root key, the access-layer authentication key and the received authentication data of the authentication center; the authentication center authenticates the terminal by utilizing the root key, the access-layer authentication key and received terminal authentication data; the terminal and the access point each generates a secondary access-layer encryption and integrity protection key; and the terminal and the access point can update a primary access-layer key and the access-layer authentication key synchronously at any time, and realizes updating and continuous authentication of the access-layer keys. The key generation and distribution method utilizes the uniqueness, reciprocity and time-varying property of the wireless channel, generates the physical layer keys at the terminal and the access point separately, introduces the physical layer keys into the access-layer keys and the authentication keys, realizes dual authentication of identity and path, and can prevent the attack pattern of acquiring the access-layer keys from a non-access layer.

Description

technical field [0001] The invention belongs to the technical field of communication security, and in particular relates to a key generation and distribution method oriented to a wireless communication system. Background technique [0002] At present, the IP-based mobile communication network has made the core network more open, and application developers and interactive services will have more access to the core network and databases, and the application of IP technology enables thieves to The software and hardware transformation of the equipment, imitation, camouflage, and tampering of the core network network nodes, to achieve the purpose of illegal monitoring or stealing data. Secondly, in the current mobile communication system, the access layer key or its generation parameters are generated by the core network nodes through the terminal identity information and distributed to the access point, so the core network nodes store the access layer key or its generation param...

AI Technical Summary

Problems solved by technology

[0004] Based on the above-mentioned problems in the prior art, there is an urgent need for a key generation and distribution method for wireless communication systems, which can resist the "transparent forwarding" of pseudo-base stations and pseudo-terminals, and make it similar to stealing access network keys by the core network. The attack method cannot be carried out in the wireless communication network system

Images