Certificateless aggregation signature LTE-R network group authentication key negotiation method

Abstract

A certificateless aggregation signature LTE-R network group authentication key negotiation method comprises the following main operation steps: A, system establishment and participant registration: anentity participating in authentication completing registration at a key generation center, and obtaining public and private key information; B, initial access authentication: the user equipment beinguniformly accessed to LTE-before departure of a train; when R network is carried out, executing the certificateless signature algorithm to generate respective signatures, sending the signatures to the relay server, and the relay server executing the certificateless aggregation signature algorithm to realize rapid mutual authentication among the user equipment, the relay server and the roadside base station and negotiating to share the key; C, switching authentication: in the running process of the train, the user equipment being always stably connected with the relay server, and the relay server and the roadside base station realizing quick and frequent switching authentication by executing a certificateless signature algorithm; D, terminating the session. The method is high in authentication efficiency, low in signaling overhead and good in security.

Description

technical field [0001] The present invention relates to an LTE-R network group authentication key agreement method, in particular to an LTE-R network group authentication key agreement method without certificate aggregation signature. Background technique [0002] The non-critical communication business in LTE-R (Next Generation Railway Communication System) has nothing to do with train operation control, and its core goal is to provide passengers with high-quality communication and network services. However, mobile communication in the high-speed railway environment faces problems such as instantaneous access to the network by large-scale passenger groups and signaling congestion caused by frequent handovers, which seriously affects the user's communication and network service experience. [0003] The traditional LTE-R network architecture consists of two parts: Evolved Universal Terrestrial Radio Access Network (E-UTRAN) and Evolved Packet Core (EPC). Among them, the Evol...

AI Technical Summary

Problems solved by technology

[0005] (1) Communication switching authentication scenarios are complex

According to the above analysis, there are three situations when the user equipment (UE) performs communication handover authentication, and in the three cases, the authentication method, the parameters to be transmitted and the method of generating the key are not the same, and there is a lack of a unified handover authentication standard

[0006] (2) The remote authentication vector increases the communication delay

Since the EPS-AKA protocol uses a challenge-response authentication method based on a symmetric cryptosystem, the Mobility Management Entity (MME) needs to remotely request an authentication vector from the Home Subscriber Server (HSS) when authenticating the User Equipment (UE). In order to achieve mutual authentication between user equipment and the network, this method increases the consumption of communication bandwidth, and, in the LTE-R network, passenger users are in a high-speed mobile state, and frequent communication switching authentication is required, which will increase the consumption of authentication vectors , increasing the communication delay

[0007] (3) In the case of high-speed mobility, large-scale user group access authentication and frequent switching authentication are likely to cause signaling congestion

The EPS-AKA standard protocol is designed for single user equipment (UE) access network authentication and communication handover authentication. However, in the LTE-R network environment, passenger users are moving at high speed, and the number of users is large. Instantaneous communication switching authentication between base stations is prone to authentication signaling congestion, which affects user communication and network service experience

Images