Authentication information processing method, terminal and network equipment

Abstract

The embodiment of the invention discloses an authentication information processing method, a terminal and network equipment. The method comprises the following steps that a terminal performs encryption and integrity protection on first indication information containing an error message type based on an encryption key and an integrity key respectively under the condition that network authenticationfails; the encryption key and the integrity key are obtained based on a shared key; different error message types correspond to the first indication information in the same format; the terminal sendsthe encrypted first indication information to a first network device, wherein the encrypted first indication information is sent to the first network device through a second network device.

Description

Technical field [0001] The present invention relates to wireless communication technology, in particular to an authentication information processing method, terminal and network equipment. Background technique [0002] In the mobile communication system, the user equipment (UE, User Equipment) and the network side are authenticated through the authentication and key agreement (AKA, Authentication and Key Agreement) protocol. The authentication methods between the UE and the network side in the 5G system include the following two authentication methods: 5G-AKA and EAP-AKA'. The former is based on the Long Term Evolution (LTE) authentication protocol evolved packet system authentication and key agreement (EPS-AKA, Evolved Packet System-Authentication and Key Agreement) development, while the latter is the Internet Engineering Task Force (IETF) , The authentication protocol defined by The Internet Engineering Task Force is used for the UE in the 4G network to use Wireless-Fidelity ...

AI Technical Summary

Problems solved by technology

The two authentication methods of 5G-AKA and EAP-AKA′ are subject to correlation attacks because UE may send two different types of error messages when authentication network fails

[0003] In the related technology to solve the association attack, when the UE fails to authenticate the network, the information encrypted by the public key of the trial network is used to indicate the error message type, because this message is encrypted, the attacker cannot get the content of this message, so the attacker cannot launch a correlation attack

However, although this method can solve the problem of correlation attack, it requires operators to deploy public key infrastructure (PKI, Public Key Infrastructure); and this method uses asymmetric algorithm for encryption, which consumes a lot of computing resources, which is very important for It is not applicable to IoT terminals that require a long battery life

Images