Client registration and secret key sharing method, device and system based on GBA

Abstract

The present invention discloses a client registration and secret key sharing method, device and system based on GBA (Generic Bootstrapping Architecture). The method comprises the steps of: operating auser terminal with a third-party application client to send a client registration request to a guidance business server BSF (Bootstrapping Server Function), wherein the client registration request comprises a B-TID (Bootstrapping Transaction Identifier) and a first request signature value; and verifying the validness of the first request signature value in the client registration terminal according to the B-TID and the corresponding secret key, and after the verification is valid, providing safe registration information and service for the third-party application client after, and generatingan application secret key for the third-party application client.

Description

technical field [0001] The present invention relates to the field of communication technology and Internet technology, in particular to a method, device and system for client registration and key sharing based on Generic Bootstrapping Architecture (GBA). Background technique [0002] The 3GPP specification TS 33.220 defines a general security authentication mechanism applicable to mobile networks—GBA architecture (Generic Bootstrapping Architecture, general bootstrapping architecture), which is part of the GAA (Generic Authentication Architecture, general authentication architecture) framework. [0003] GBA provides a general mechanism for establishing an application key between UE (User Equipment, user terminal) and NAF (Network Application Function, network application server) based on AKA (Authentication and Key Agreement, authentication and key agreement mechanism). [0004] The GBA architecture is mainly divided into two processes: GBA initialization and application key...

AI Technical Summary

Problems solved by technology

[0025] The main purpose of the present invention is to provide a GBA-based client registration and key sharing method, device and system, aiming to provide a secure registration method, device and system for third-party application clients running in user terminals, Solve the problem that third-party application servers counterfeit and malicious requests consume the computing and storage resources of the guidance service server BSF and other third-party application servers, and then solve the problem that third-party application clients on the same user terminal can easily calculate other third-party The problem of applying the client's application key, so that the GBA architecture can be applied in the field of Internet technology more safely and effectively

Images