Verification method and device using shared secret key, public key and private key

Abstract

A verification method and device using shared key, public key and private key. The verification method using a shared key includes: the first network element receives a registration request message from the second network element, the registration request message includes user identification, first network identification information and second network identification information, and the first network element The second network identification information is obtained by processing the first network identification information with a shared key, where the shared key is a key used between the first network element and the second network element; The first network element uses the shared key to verify the registration request message; the first network element sends a registration response message to the second network element. The corresponding verification method and device using public key and private key are also disclosed. When the home network receives the registration request from the visited network, it uses the shared key to verify the registration request message, which can prevent counterfeiting attacks from the visited network.

Description

technical field [0001] The present application relates to the field of communication technology, and in particular to a verification method and device using a shared key, a public key and a private key. Background technique [0002] Such as Figure 1a and Figure 1b As shown in , roaming scenarios under the architecture of the fifth generation (5th generation, 5G) mobile communication system are defined. When the terminal device registers with the visited network, the access and mobility management function (AMF) entity of the visited network sends an authentication initial request to the authentication server function (authentication server function, AUSF) entity of the home network. After receiving the initial authentication request sent by the AMF, the AUSF sends an authentication request message to a unified data management (UDM) entity of the home network to request an authentication vector. After receiving the authentication request message sent by the AUSF, the UDM ...

AI Technical Summary

Problems solved by technology

[0005] However, if figure 2 As shown in the 5G key architecture, there is no authentication mechanism between the AMF of the serving network and the UDM of the home network

This makes the communication between the AMF of the serving network and the UDM of the home network potentially vulnerable to spoofing attacks

Images