Method and apparatus for detecting man-in-the-middle attack

Abstract

The embodiment of the invention relates to a method and apparatus for detecting a man-in-the-middle attack. The method comprises the following steps: an MeNB receives a first check request message sent by an SeNB, wherein the first check request message comprises first identification information and a first data packet count value; the MeNB generates a second check request message according to thefirst identification information, and sends the second check request message to a user terminal; the MeNB receives a first check response message generated by the user terminal according to the second check request message, wherein the first check response message comprises second identification information and a second data packet count value; when the first data packet count value is the same as the second data packet count value, the MeNB judges that there is no man-in-the-middle attack between the SeNB and the user terminal; and when the first data packet count value is different from thesecond data packet count value, the MeNB judges that the man-in-the-middle attack exists between the SeNB and the user terminal.

Description

technical field [0001] The invention relates to the communication field, in particular to a method and device for detecting man-in-the-middle attacks. Background technique [0002] With the rapid development of informatization and the increasing abundance of network resources, the limited air interface bandwidth makes the service capability of the main base station (Master eNB, MeNB for short) unable to meet the needs of users, and the expensive base station construction cost and high wireless Frequency also increases the difficulty of base station coverage indoors. Therefore, in order to improve the throughput of user plane data, the above problems can be solved by jointly networking a low-cost secondary base station (SeNB, SeNB) and MeNB, and sharing part of the traffic of MeNB by SeNB, wherein the primary base station is The macro base station (Marco eNB / cell), the secondary base station is a small base station (small cell), and the small base station includes pico cell / ...

AI Technical Summary

Problems solved by technology

[0005] It can be seen from the above that whether there is a man-in-the-middle attack between the UE and the eNB is detected through the air interface control plane signaling interaction, and in the scenario where the UE maintains dual connections with the MeNB and SeNB, there is no air interface control plane between the SeNB and the UE Signaling interaction makes it impossible for SeNB to detect whether there is a man-in-the-middle attack between SeNB and UE in this scenario

Images