A method for realizing LTE-WLAN converged network access authentication protocol

Abstract

The invention discloses a method for realizing an LTE-WLAN converged network access authentication protocol. The problem that vulnerabilities are easy to attack in the prior art is solved, and mutual authentication among nodes is realized. The method includes the following steps: generating a symmetric key through an ECDH method to encrypt and decrypt node transmission parameters; encrypting an access point AP, verifying the AP at a HAAA server, and breaking the connection if there is inconsistency with the AP; in order to prevent the disclosure of the identity information of UE, generating a temporary ID used to authenticate the UE next time at the UE; and in order to prevent various attacks in the authentication process, designing mutual authentication between the UE and the AP and mutual authentication between the UE and WAAA. According to the invention, IMSI is invisible to attackers, the temporary ID is not sent in the form of message and is generated independently by UE and HSS, the user identity is protected, and various malicious attacks are prevented through generation of keys and selection of random numbers. The change in transmitted data can be detected as soon as possible during work. The authentication delay and bandwidth consumption are reduced. The method is used in secure access of a user to a converged network.

Description

technical field [0001] The invention belongs to the technical field of communication, and further relates to network fusion, in particular to a method for realizing an LTE-WLAN fusion network access authentication protocol. The invention can be used for access authentication when users switch under the LTE-WLAN network architecture, can effectively resist various attacks, and simultaneously reduces authentication time delay and bandwidth consumption. Background technique [0002] With the development of mobile Internet, LTE and WLAN are currently the first choice for users to access the network. LTE has flexible mobility and wide coverage, but high cost; WLAN has high data transmission rate and low cost, but poor mobile flexibility. WLAN and LTE Abundant bandwidth forms a powerful complement, and the integration of these two networks provides better services for users and operators. Access authentication is the prerequisite for users to access the wireless network. Various ...

AI Technical Summary

Problems solved by technology

However, this protocol does not realize the mutual authentication between UE and home network, because the user's response authentication is completed by WLANAAA

[0006] Among the above-mentioned access authentication protocols, the full-EAP-AKA protocol proposed by Kumar et al. needs to continuously upgrade the equipment due to the iterative generation of authentication vectors by the AP itself, which is too costly and requires a large amount of computing power; Yu, Binbin et al. In the modified EAP-AKA protocol, the response message sent by the UE is sent in plain text, which is vulnerable to man-in-the-middle attacks; the EAP-FAKA protocol proposed by Idrissi et al. has high security, but this protocol does not realize mutual authentication between the UE and the home network. Just a one-way authentication, vulnerable to attack

Images