Non-access stratum authentication method for LTE-R vehicle-ground communication based on proxy signature

Abstract

A kind of LTE-R vehicle-ground communication non-access stratum authentication method based on proxy signature, its main operation steps are: A, global subscriber identification card registration: the global subscriber identification card needs to complete registration in its home user server before use, Obtain proxy signature rights; B. Initial authentication process at the non-access layer: when the vehicle-mounted mobile unit first accesses the network, use the proxy signature algorithm to realize the confidentiality transmission of the International Mobile Subscriber Identity Code and the pre-authentication function, and then use the dynamically updateable The master key completes subsequent authentication; C. Non-access stratum re-authentication process: When the vehicle-mounted mobile unit accesses the network again or its location is updated, if it has a valid and valid master key and terminal temporary identity, it can directly communicate with the mobile The management entity performs re-authentication to avoid the participation of a third party; D. Terminate the session. This method can effectively realize the security real-time authentication of the vehicle-ground wireless communication in the LTE-R system, and consumes less resources and has high security.

Description

Technical field [0001] The invention relates to a wireless communication non-access layer entity authentication method of a railway system. In particular, it relates to a proxy signature-based LTE-R vehicle-ground communication non-access layer authentication method. Background technique [0002] In 2009, the International Union of Railways (UIC) has clearly adopted LTE-R (Long Term Evolution for Railway) as the wireless communication technology for the new generation of railway systems. LTE-R follows the basic structure of SAE / LTE, adopts an all-IP flat network architecture, has the characteristics of high data transmission rate, low access delay and multi-network compatibility, but also inherits the inherent security defects of the Internet, and In the transitional phase, the coexistence of multiple networks, and the unprecedented openness of wireless interfaces and core network segments, have brought more security challenges to the LTE-R system. [0003] The entities related t...

AI Technical Summary

Problems solved by technology

[0006] (2) Lack of pre-authentication, it is difficult to resist attacks such as denial of service

Therefore, attackers can launch a denial of service attack by forging and sending a large number of false access request packets, blocking the authentication process and even causing the home user server to be paralyzed

[0007] (3) The remote request and transmission overhead of the authentication vector is large

The authentication information is generated locally, but when the OBU stays in the same MME jurisdiction network domain for a long time, K ASME There is a risk of leakage