Message authentication method

Abstract

Present invention discloses a message authenticating method used in termination MS and base station BS. It contains MS transmitting authenticating request message to BS, BS transmitting authenticating reversion message including BS digit certificate and private key sign to MS after received said authenticating request message and authenticating, MS authenticating said message according to digit certificate and private key signature after receiving said authenticating reversion message, judging whether passing authenticating, and dropping said message from BS judging out it not passing authenticating. Said invention raises RSA authenticating security.

Description

technical field [0001] The invention relates to a technique for improving the security of a wireless communication system, in particular to a message authentication method between MS and BS. Background technique [0002] In a communication system, security is an important indicator to evaluate the performance of a communication system, especially in a wireless communication system, due to the characteristics of openness and mobility of a wireless communication system, the security of a wireless communication system is particularly important . With the development of cryptography and cryptanalysis, the security of the wireless communication system can be improved by encrypting the data transmitted on the air interface (air interface for short) of the wireless communication system. [0003] IEEE 802.16d / e series protocols define protocol standards for wireless broadband fixed and mobile access air interfaces. In order to ensure the security of air interface data transmission...

AI Technical Summary

Problems solved by technology

[0015] It can be seen from the above process that although the RSA authentication rejection message returned by the BS to the MS includes the signature of the BS private key, after receiving the RSA authentication rejection message, the MS cannot use the private key of the BS because it does not have the digital certificate of the BS. The signature authenticates the message, so that when the attacker sends an RSA authentication rejection message to the MS, the MS cannot identify the false RSA authentication rejection message through authentication; and, because there is no digital certificate of the BS, the MS will After rejecting the message, the BS cannot be authenticated. When the attacker pretends to be the BS and sends the RSA authentication rejection message to the MS, the MS cannot authenticate the identity of the sender, thus preventing the MS from accessing the network normally and reducing the risk of RSA authentication. safety

Images