Improved AKA identity authentication system and method based on symmetric key pool and cross-relay

Abstract

The invention discloses an improved AKA identity authentication system and method based on a symmetric key pool and a cross-relay. The AKA identity authentication system comprises a member, a relay and a server which participate in AKA identity authentication. The system is characterized in that the member, the relay and the server share a group key pool; the member and the relay are further respectively provided with a private key pool used for generating an authentication key, and the member and the relay independently share the private key pool with the server; the member and the relay share a corresponding pointer address in an AKA identity authentication process, and then a first negotiation key between the member and the relay is generated by combining the respective group key poolsof the member and the relay; the member and the server share the corresponding pointer address in the AKA identity authentication process, and then a second negotiation key between the member and theserver is generated by combining the respective authentication keys of the member and the server. According to the system and the method, the safety of communication can be further improved.

Description

technical field [0001] The invention relates to the technical field of secure communication, in particular to private identity authentication and key agreement based on group data network. Background technique [0002] Authentication, that is, identity authentication is the basic technology to achieve information security. The system checks the user's identity to confirm whether the user has access and use rights to certain resources, and can also perform identity authentication between systems. [0003] With the development of quantum computers, classical asymmetric encryption algorithms will no longer be safe, and symmetric key algorithms will become popular in both authentication and encryption and decryption fields. For example, the AKA mechanism, one of the commonly used authentication methods based on symmetric key algorithms in the field of mobile communications, is currently used. The full name of AKA is "Authentication and Key Agreement", that is, authentication an...

AI Technical Summary

Problems solved by technology

[0007] 1. In group communication, there is usually only one or a small number of key seeds involved in group key negotiation, which cannot keep the freshness of key seeds or the range of change is small, and it is easy to be cracked

[0008] 2. At present, the encryption method between members and relays in the group mainly relies on the group key for encryption. There is no key for separate communication between the two parties, and the transmission of important information is relatively not secure enough.

[0009] 3. The random number parameters in key generation in the AKA mechanism are exposed, which will increase the risk of the negotiated key being cracked

And the verification of SQN's verification mechanism is scoped, not unique, and has a certain degree of contingency

[0010] 4. Most of the messages sent and received in the authentication are sent in plain text or encrypted with a weak encryption method, which is easy to leak key information and reduce the security of authentication

Images