Group authentication method for NB-IoT

Abstract

The invention discloses a group authentication method of the narrowband Internet of Things, which includes: when adding a proxy server network element in the core network of the narrowband Internet of Things, the MME and the proxy server perform two-way authentication and authentication, and after the mutual authentication is successful, the MME grants the proxy The server has the relevant authority for terminal access authentication; when the terminal and the core network perform the EPS-AKA access authentication process, the terminal sends the request message sent to the MME to the proxy server first, and the proxy server groups the requests of multiple terminals The information is aggregated into a group message in units of groups and sent to the MME. After the MME obtains the authentication vector of the group, the proxy server distributes the authentication vector of the group to the terminals in the group. After the terminal receives the authentication vector Respond to the authentication request for authentication. In view of the situation that a large number of terminals access the network at the same time, the number of signaling interactions between the MME and the home subscription server is reduced, and the possibility of congestion between the MME and the HSS is reduced.

Description

technical field [0001] The present invention relates to the technical field of mobile communication, in particular to a group authentication method of narrowband internet of things (NB-IoT). Background technique [0002] The latest NB-IoT network of the Internet of Things is simplified on the basis of LTE. In the NB-IoT protocol, the authentication mechanism used is the EPS-AKA authentication mechanism of LTE. The EPS-AKA authentication mechanism is also the security basis of the NB-IoT network, which ensures the communication security of the terminal, completes the two-way authentication between the terminal and the network, and negotiates the keys used in the signaling channel and data channel. When each terminal accesses the network, it must pass EPS-AKA authentication to ensure that both the terminal and the MME are legal. [0003] In the EPS-AKA authentication process, the terminal, the mobile management entity MME and the home server HSS are mainly involved, and ther...

AI Technical Summary

Problems solved by technology

When a large number of NB-IoT terminal devices access the network at the same time, each device needs complete EPS-AKA authentication every time it is connected, which will lead to signaling congestion between MME and HSS

When this happens, there is still room for improvement in the certification process

Images