mptcp authentication method and system for private network

Abstract

The present application discloses a private network MPTCP authentication method and system, wherein the method includes: the public data network gateway PGW sends the ISDN number of the user equipment UE and the IP address allocated for the UE to multiple channels in advance. Gateway MP_GW; when an MPTCP link is established between the UE and the MP_GW, during the MPTCP three-way handshake process, the UE and the MP_GW use the ISDN number and the The IP address generates an encryption key, uses the encryption key to encrypt the session key to be sent to the other party, and uses the ISDN number and the IP address to decrypt the received session key to obtain the other party’s session key. By adopting the invention, the potential safety hazards existing in the MPTCP protocol can be effectively overcome.

Description

technical field [0001] The invention relates to mobile communication technology, in particular to a private network multiplex transmission control protocol (MPTCP) authentication method and system. Background technique [0002] In the private network application scenario, the introduction of the MPTCP protocol can effectively solve the smoothness and reliability of switching between networks. [0003] figure 1 Schematic diagram of the network after introducing MPTCP for the private network. like figure 1 As shown, the newly added network element multi-channel gateway (MP_GW) supports MPTCP, supports custom interfaces with the public data network gateway (PGW) of the core network, and establishes MPTCP links between UE and MP_GW, including multiple TCP subflows . [0004] At the same time, the MPTCP protocol has flaws in its security, and may be attacked by a man-in-the-middle to steal the session keys of both parties, and further initiate operations such as sub-flow addi...

AI Technical Summary

Problems solved by technology

Since the MPTCP three-way handshake message will carry the session keys of both hosts in plain text, there is a greater risk of man-in-the-middle attacks, such as figure 2 As shown in , the Attacker intercepts the three-way handshake message between the hosts on both sides, and can initiate the subsequent process of sub-flow deletion and sub-flow addition, which poses a threat to security.

Images