AKA identity authentication system and method based on symmetric key pool and cross-relay

Abstract

The invention discloses an AKA identity authentication system and method based on a symmetric key pool and a cross-relay. The AKA identity authentication system comprises a member participating in AKAidentity authentication, a relay and a server, wherein the member, the relay and the server share a group key pool; the member and the relay are further respectively provided with private key pools for generating authentication keys, and the member and the relay independently share the private key pools with the server; the member and the relay negotiate a corresponding pointer address in an AKAidentity authentication process, and generates a first negotiation key between the member and the relay in combination with the respective group key pools; the member and the server also share the corresponding pointer address in the AKA identity authentication process and generate a second negotiation key between the member and the server in combination with the respective authentication keys. Byadoption of the AKA identity authentication system and method disclosed by the invention, the security of communication can be further improved.

Description

technical field [0001] The invention relates to the technical field of secure communication, in particular to private identity authentication and key agreement based on group data network. Background technique [0002] Authentication, that is, identity authentication is the basic technology to achieve information security. The system checks the user's identity to confirm whether the user has access and use rights to certain resources, and can also perform identity authentication between systems. [0003] With the development of quantum computers, classical asymmetric encryption algorithms will no longer be safe, and symmetric key algorithms will become popular in both authentication and encryption and decryption fields. For example, the AKA mechanism, one of the commonly used authentication methods based on symmetric key algorithms in the field of mobile communications, is currently used. The full name of AKA is "Authentication and KeyAgreement", that is, authentication and...

AI Technical Summary

Problems solved by technology

[0007] 1. In group communication, there is usually only one or a small number of key seeds involved in group key negotiation, which cannot keep the freshness of key seeds or the range of change is small, and it is easy to be cracked

[0008] 2. At present, the encryption method between members and relays in the group mainly relies on the group key for encryption. There is no key for separate communication between the two parties, and the transmission of important information is relatively not secure enough.

[0009] 3. The random number parameters in key generation in the AKA mechanism are exposed, which will increase the risk of the negotiated key being cracked

[0010] 4. Most of the messages sent and received in the authentication are sent in plain text or encrypted with a weak encryption method, which is easy to leak key information and reduce the security of authentication

Images