A method for realizing terminal secondary authentication

Abstract

The invention discloses a method for realizing secondary authentication of a terminal, which includes that after checking that the primary authentication has passed, the terminal initiates a secondary authentication request to the AAA server through the EAP channel of the 5G network, and the secondary authentication request is used to trigger the The AAA server determines the secondary authentication data corresponding to the terminal, and sends the secondary authentication data to the terminal in the form of a message; the terminal uses the secondary authentication data according to the application scenario where it is located The data is authenticated, and a response is generated and returned to the AAA server to determine the secondary authentication result of the terminal. A method for implementing secondary authentication of terminals provided by the present invention can provide customized secondary authentication services for terminals that require secondary authentication in different application scenarios, and guide industry users to deploy bandwidth, delay, and connection in line with their own application scenarios. AAA servers with the same number of requirements, to prevent attackers from stealing user privacy at the network layer.

Description

Technical field [0001] Embodiments of the present invention relate to the field of communication safety, and more particularly to a method of implementing terminal secondary authentication. Background technique [0002] 5G technology is the development direction of new generation information communication technology, not only has stronger performance, but also has a richer application scenario, from traditional people to human communication, covering the intelligent interconnection between people and things It is a key infrastructure for the future economic and social digital transformation. [0003] Based on the main certification, the 5G technology can provide network slices to the industry, allowing industry deployment AAA (AuthenticationAuthorizationAccounting, verification, authorization, and accounting) servers to perform secondary certification to complete industry-specific access authentication. Among them, the main certification refers to the authentication authenticatio...

AI Technical Summary

Problems solved by technology

However, since the 3GPP protocol only provides an optional end-to-end secondary authentication EAP channel, and how to implement the secondary authentication through the secondary authentication EAP channel, the existing technology has not given it, so industry users do not know how To deploy an AAA server that meets the bandwidth, delay, and number of connections of its own application scenarios

Images