Communication network authentication method and device, network element, user equipment, product and medium

Abstract

The invention provides a communication network authentication method and device, a network element, user equipment, a product and a medium, and relates to the technical field of network security. The method comprises the following steps: randomly generating a random number RAND; selecting a first key and a first key identifier corresponding to the first key from at least two groups of key data corresponding to the UE, the key data being configured by the HN for a USIM card corresponding to the UE, and each group of key data comprising a key and a key identifier corresponding to the key; generating an authentication token AUTN according to the RAND, the first key and the first key identifier; and sending authentication request information to the UE, wherein the authentication request information comprises the RAND and the AUTN. According to the scheme of the invention, the problem that the network authentication of the existing communication network has a security risk due to a single key is solved.

Description

Technical Field

[0001] This invention relates to the field of network security technology, and in particular to a communication network authentication method, device, network element, user equipment, product, and medium. Background Technology

[0002] With the rapid development of internet technology, the cybersecurity risks of information systems are increasing, and the threats and challenges they face are becoming more severe. Cryptographic security, as the cornerstone of information security, is a key means of ensuring the data security of network information systems. Cryptographic technology is not only a core technology of network information systems, but also an important guarantee for their secure operation.

[0003] However, existing network authentication and key agreement (AKA) protocols for communication networks have security risks such as single key, inability to update keys, and insufficient isolation. Summary of the Invention

[0004] The purpose of this invention is to provide a communication network authentication method, device, network element, user equipment, product, and medium, which solves the security risk problem caused by the single key in the network authentication of existing communication networks.

[0005] To achieve the above objectives, embodiments of the present invention provide a communication network authentication method applied to a first network element, wherein the first network element is a network element in the home network (HN) of a user equipment (UE), and the method includes:

[0006] Randomly generate random numbers (Random, RAND);

[0007] From at least two sets of key data corresponding to the UE, select a first key and a first key identifier corresponding to the first key. The key data is configured by the HN for the Universal Subscriber Identity Module (USIM) card corresponding to the UE. Each set of key data includes: a key and a key identifier corresponding to the key.

[0008] An authentication token (AUTN) is generated based on the RAND, the first key, and the first key identifier.

[0009] The authentication request information is sent to the UE, and the authentication request information includes the RAND and the AUTN.

[0010] Optionally, generating the authentication token AUTN based on the RAND, the first key, and the first key identifier includes:

[0011] Generate the first sequence number (SQN) corresponding to the UE;

[0012] Generate a Message Authentication Code (MAC) based on the first key identifier, the RAND, the first key, and the first SQN;

[0013] First information is generated based on the first key, the RAND, and the first SQN;

[0014] The AUTN is generated based on the first information, the first key identifier, and the MAC.

[0015] Optionally, the method further includes:

[0016] The system receives synchronization authentication failure information sent by the UE, the synchronization authentication failure information carrying the synchronization authentication token AUTS and the RAND;

[0017] Parse the AUTS to obtain the first key identifier, the third SQN, and the first Message Authentication Code for Synchronization (MAC-S);

[0018] Verify the legitimacy of the AUTS and the RAND based on the first key identifier, the third SQN, and the first MAC-S;

[0019] If the verification is successful, the SQN corresponding to the UE is updated to the third SQN according to the third SQN.

[0020] Optionally, verifying the legitimacy of the AUTS and the RAND based on the first key identifier, the third SQN, and the first MAC-S includes:

[0021] From the key data, obtain the first key corresponding to the first key identifier;

[0022] The second MAC-S is determined based on the first key, the RAND, the first key identifier, and the third SQN;

[0023] If the first MAC-S and the second MAC-S are the same, the verification is deemed successful.

[0024] Optionally, sending authentication request information to the UE includes:

[0025] The authentication request information is sent to the UE through a second network element, which is a network element in the UE's Service Network (SN).

[0026] To achieve the above objectives, embodiments of the present invention provide a communication network authentication method applied to a UE, comprising:

[0027] Receive authentication request information sent by the first network element, wherein the authentication request information includes RAND and AUTN;

[0028] The validity of the AUTN is verified based on at least two sets of key data corresponding to the RAND and the UE. The key data is configured by the UE's HN for the USIM card corresponding to the UE. Each set of key data includes: a key and a key identifier corresponding to the key.

[0029] If the verification is successful, an authentication response message is sent to the first network element.

[0030] Optionally, verifying the validity of the AUTN based on at least two sets of key data corresponding to the RAND and the UE includes:

[0031] Parse the AUTN to obtain the first key identifier, MAC address, and first information;

[0032] From the key data, obtain the second key corresponding to the first key identifier;

[0033] The second SQN is determined based on the RAND, the second key, and the first information;

[0034] Based on the second key, the RAND, the first key identifier, and the second SQN, generate the desired Message Authentication Code (XMAC).

[0035] If the preset conditions are met, the verification is deemed successful.

[0036] The preset conditions include at least one of the following:

[0037] The XMAC is the same as the MAC;

[0038] The second SQN is greater than the third SQN, and the third SQN is the SQN stored locally by the UE.

[0039] Optionally, if the second SQN is less than or equal to the third SQN, the method further includes:

[0040] The first MAC-S is determined based on the first key identifier, the second key, the RAND, and the third SQN;

[0041] AUTS is determined based on the third SQN, the first key identifier, and the first MAC-S;

[0042] A synchronization authentication failure message is sent to the first network element, the synchronization authentication failure message carrying the AUTS and the RAND.

[0043] Optionally, sending synchronization authentication failure information to the first network element includes:

[0044] The synchronization authentication failure information is sent from the second network element to the first network element, where the second network element is a network element in the UE's SN.

[0045] To achieve the above objectives, embodiments of the present invention provide a communication network authentication device applied to a first network element, wherein the first network element is a network element in the home network (HN) of a user equipment (UE), and the device includes:

[0046] The data acquisition module is used to randomly generate random numbers (RAND).

[0047] The key selection module is used to select a first key and a first key identifier corresponding to the first key from at least two sets of key data corresponding to the UE. The key data is configured by the HN for the USIM card corresponding to the UE. Each set of key data includes: a key and a key identifier corresponding to the key.

[0048] The first generation module is used to generate an authentication token AUTN based on the RAND, the first key, and the first key identifier.

[0049] The request sending module is used to send authentication request information to the UE, the authentication request information including the RAND and the AUTN.

[0050] Optionally, the first generation module includes:

[0051] The first generation submodule is used to generate the first sequence number SQN corresponding to the UE;

[0052] The second generation submodule is used to generate a message authentication code (MAC) based on the first key identifier, the RAND, the first key, and the first SQN.

[0053] The third generation submodule is used to generate first information based on the first key, the RAND and the first SQN;

[0054] The fourth generation submodule is used to generate the AUTN based on the first information, the first key identifier, and the MAC.

[0055] Optionally, the device further includes:

[0056] The first receiving module is used to receive the synchronization authentication failure information sent by the UE, wherein the synchronization authentication failure information carries the synchronization authentication token AUTS and the RAND.

[0057] The first parsing module is used to parse the AUTS to obtain the first key identifier, the third SQN, and the first synchronization message authentication code MAC-S.

[0058] The first verification module is used to verify the legality of the AUTS and the RAND based on the first key identifier, the third SQN, and the first MAC-S.

[0059] The first update module is used to update the SQN corresponding to the UE to the third SQN according to the third SQN if the verification is successful.

[0060] Optionally, the first verification module includes:

[0061] A key acquisition submodule is used to acquire the first key corresponding to the first key identifier from the key data;

[0062] The first processing submodule is used to determine the second MAC-S based on the first key, the RAND, the first key identifier, and the third SQN;

[0063] The second processing submodule is used to determine that the verification is successful if the first MAC-S and the second MAC-S are the same.

[0064] Optionally, the request sending module includes:

[0065] The request sending submodule is used to send the authentication request information to the UE through a second network element, wherein the second network element is a network element in the UE's serving network SN.

[0066] To achieve the above objectives, embodiments of the present invention provide a communication network authentication device applied to a UE, comprising:

[0067] The request receiving module is used to receive authentication request information sent by the first network element, wherein the authentication request information includes RAND and AUTN;

[0068] The second verification module is used to verify the validity of the AUTN based on at least two sets of key data corresponding to the RAND and the UE. The key data is configured by the UE's HN for the USIM card corresponding to the UE. Each set of key data includes: a key and a key identifier corresponding to the key.

[0069] The response sending module is used to send an authentication response message to the first network element if the authentication is successful.

[0070] Optionally, the second verification module includes:

[0071] The first parsing submodule is used to parse the AUTN to obtain the first key identifier, MAC, and first information;

[0072] The first acquisition submodule is used to acquire the second key corresponding to the first key identifier from the key data;

[0073] The third processing submodule is used to determine the second SQN based on the RAND, the second key, and the first information;

[0074] The fifth generation submodule is used to generate the desired message authentication code XMAC based on the second key, the RAND, the first key identifier, and the second SQN;

[0075] The fourth processing submodule is used to determine whether the verification is successful if preset conditions are met;

[0076] The preset conditions include at least one of the following:

[0077] The XMAC is the same as the MAC;

[0078] The second SQN is greater than the third SQN, and the third SQN is the SQN stored locally by the UE.

[0079] Optionally, the device further includes:

[0080] The fifth processing submodule is used to determine the first MAC-S based on the first key identifier, the second key, the RAND, and the third SQN;

[0081] The sixth processing submodule is used to determine AUTS based on the third SQN, the first key identifier, and the first MAC-S;

[0082] The first sending submodule is used to send synchronization authentication failure information to the first network element, wherein the synchronization authentication failure information carries the AUTS and the RAND.

[0083] Optionally, the first transmitting submodule includes:

[0084] The information sending unit is used to send the synchronization authentication failure information to the first network element through the second network element, wherein the second network element is a network element in the SN of the UE.

[0085] To achieve the above objectives, embodiments of the present invention provide a network element, wherein the network element is a first network element, which is a network element in the home network (HN) of a user equipment (UE), and includes a processor and a transceiver, wherein the processor is used for:

[0086] Randomly generate random numbers (RAND);

[0087] From at least two sets of key data corresponding to the UE, select a first key and a first key identifier corresponding to the first key. The key data is configured by the HN for the USIM card corresponding to the UE. Each set of key data includes: a key and a key identifier corresponding to the key.

[0088] An authentication token AUTN is generated based on the RAND, the first key, and the first key identifier.

[0089] The authentication request information is sent to the UE, and the authentication request information includes the RAND and the AUTN.

[0090] Optionally, when the processor generates the authentication token AUTN based on the RAND, the first key, and the first key identifier, it specifically performs the following:

[0091] Generate the first sequence number SQN corresponding to the UE;

[0092] Generate a message authentication code (MAC) based on the first key identifier, the RAND, the first key, and the first SQN;

[0093] First information is generated based on the first key, the RAND, and the first SQN;

[0094] The AUTN is generated based on the first information, the first key identifier, and the MAC.

[0095] Optionally, the processor is further configured to:

[0096] The system receives synchronization authentication failure information sent by the UE, the synchronization authentication failure information carrying the synchronization authentication token AUTS and the RAND;

[0097] Parse the AUTS to obtain the first key identifier, the third SQN, and the first synchronization message authentication code MAC-S;

[0098] Verify the legitimacy of the AUTS and the RAND based on the first key identifier, the third SQN, and the first MAC-S;

[0099] If the verification is successful, the SQN corresponding to the UE is updated to the third SQN according to the third SQN.

[0100] Optionally, when the processor verifies the legality of the AUTS and the RAND based on the first key identifier, the third SQN, and the first MAC-S, it specifically performs the following:

[0101] From the key data, obtain the first key corresponding to the first key identifier;

[0102] The second MAC-S is determined based on the first key, the RAND, the first key identifier, and the third SQN;

[0103] If the first MAC-S and the second MAC-S are the same, the verification is deemed successful.

[0104] Optionally, when the processor sends authentication request information to the UE, it specifically performs the following:

[0105] The authentication request information is sent to the UE through a second network element, where the second network element is a network element in the UE's serving network SN.

[0106] To achieve the above objectives, embodiments of the present invention provide a user equipment (UE), including a processor and a transceiver, wherein the processor is used for:

[0107] Receive authentication request information sent by the first network element, wherein the authentication request information includes RAND and AUTN;

[0108] The validity of the AUTN is verified based on at least two sets of key data corresponding to the RAND and the UE. The key data is configured by the UE's HN for the USIM card corresponding to the UE. Each set of key data includes: a key and a key identifier corresponding to the key.

[0109] If the verification is successful, an authentication response message is sent to the first network element.

[0110] Optionally, when the processor verifies the validity of the AUTN based on at least two sets of key data corresponding to the RAND and the UE, it specifically performs the following:

[0111] Parse the AUTN to obtain the first key identifier, MAC address, and first information;

[0112] From the key data, obtain the second key corresponding to the first key identifier;

[0113] The second SQN is determined based on the RAND, the second key, and the first information;

[0114] Generate the desired message authentication code XMAC based on the second key, the RAND, the first key identifier, and the second SQN;

[0115] If the preset conditions are met, the verification is deemed successful.

[0116] The preset conditions include at least one of the following:

[0117] The XMAC is the same as the MAC;

[0118] The second SQN is greater than the third SQN, and the third SQN is the SQN stored locally by the UE.

[0119] Optionally, if the second SQN is less than or equal to the third SQN, the processor is further configured to:

[0120] The first MAC-S is determined based on the first key identifier, the second key, the RAND, and the third SQN;

[0121] AUTS is determined based on the third SQN, the first key identifier, and the first MAC-S;

[0122] A synchronization authentication failure message is sent to the first network element, the synchronization authentication failure message carrying the AUTS and the RAND.

[0123] Optionally, when the processor sends synchronization authentication failure information to the first network element, it is specifically used to:

[0124] The synchronization authentication failure information is sent from the second network element to the first network element, where the second network element is a network element in the UE's SN.

[0125] To achieve the above objectives, embodiments of the present invention provide a network element, including a transceiver, a processor, a memory, and a program or instructions stored in the memory and executable on the processor; when the processor executes the program or instructions, it implements the communication network authentication method applied to the first network element as described above.

[0126] To achieve the above objectives, embodiments of the present invention provide a user equipment, including a transceiver, a processor, a memory, and a program or instructions stored in the memory and executable on the processor; when the processor executes the program or instructions, it implements the communication network authentication method applied to the UE as described above.

[0127] To achieve the above objectives, a computer program product is provided, including computer instructions that, when executed by a processor, implement the steps of the communication network authentication method applied to a first network element as described above, or implement the steps of the communication network authentication method applied to a UE as described above.

[0128] To achieve the above objectives, embodiments of the present invention provide a readable storage medium storing a program or instructions thereon, which, when executed by a processor, implement the steps in the communication network authentication method applied to the first network element as described above, or the steps in the communication network authentication method applied to the UE as described above.

[0129] The beneficial effects of the above-described technical solution of the present invention are as follows:

[0130] The method of this invention allows the first network element to select a key from at least two sets of key data for authentication with the UE. This enables key rotation based on a key selection strategy, preventing the security risks associated with using only a single key for authentication and effectively improving the security of AKA authentication in the communication network. Furthermore, if a key is compromised, the first network element can replace the key according to the key selection strategy, achieving a risk diversification effect. Attached Figure Description

[0131] Figure 1 This is a flowchart of a communication network authentication method according to an embodiment of the present invention;

[0132] Figure 2 A schematic diagram illustrating the generation of AV for Unified Data Management (UDM) in this embodiment of the invention;

[0133] Figure 3 A schematic diagram illustrating the generation of XMAC by the UE in an embodiment of the present invention;

[0134] Figure 4 This is a schematic diagram of the communication network authentication process according to an embodiment of the present invention;

[0135] Figure 5 This is a schematic diagram of the authentication synchronization failure recovery process according to an embodiment of the present invention;

[0136] Figure 6 A schematic diagram illustrating the generation of AUTS by the UE in an embodiment of the present invention;

[0137] Figure 7 This is a flowchart of a communication network authentication method according to another embodiment of the present invention;

[0138] Figure 8 This is a structural diagram of the communication network authentication device according to an embodiment of the present invention;

[0139] Figure 9 This is a structural diagram of a communication network authentication device according to another embodiment of the present invention;

[0140] Figure 10 This is a structural diagram of the first network element in an embodiment of the present invention;

[0141] Figure 11 This is a structural diagram of a user equipment according to an embodiment of the present invention;

[0142] Figure 12 This is a structural diagram of the first network element according to another embodiment of the present invention;

[0143] Figure 13 This is a structural diagram of a user equipment according to another embodiment of the present invention. Detailed Implementation

[0144] To make the technical problems, technical solutions and advantages of the present invention clearer, a detailed description will be given below in conjunction with the accompanying drawings and specific embodiments.

[0145] It should be understood that the phrase "one embodiment" or "an embodiment" throughout the specification means that a specific feature, structure, or characteristic related to the embodiment is included in at least one embodiment of the invention. Therefore, "in one embodiment" or "in an embodiment" appearing throughout the specification does not necessarily refer to the same embodiment. Furthermore, these specific features, structures, or characteristics can be combined in any suitable manner in one or more embodiments.

[0146] In various embodiments of the present invention, it should be understood that the sequence number of each process described below does not imply the order of execution. The execution order of each process should be determined by its function and internal logic, and should not constitute any limitation on the implementation process of the embodiments of the present invention.

[0147] In addition, the terms "system" and "network" are often used interchangeably in this article.

[0148] In the embodiments provided in this application, it should be understood that "B corresponding to A" means that B is associated with A, and B can be determined based on A. However, it should also be understood that determining B based on A does not mean determining B solely based on A; B can also be determined based on A and / or other information.

[0149] Relevant technical specifications:

[0150] Currently, the network authentication AKA protocol in communication networks is based on the MILENAGE algorithm, used to complete authentication and key negotiation between the USIM and UDM. The underlying algorithm of this protocol is AES-128, and the key K shared between the USIM and UDM is 128 bits.

[0151] However, the existing AKA protocol has the following problems:

[0152] (1) 5G AKA based on single-key authentication has security risks. With the advent of quantum computers, the ability to crack encryption algorithms is increasing, and long-term use of 128-bit keys for AKA authentication may face the risk of being cracked.

[0153] (2) The key cannot be updated after it is cracked. If the unique key on the USIM card is cracked, the existing system will find it difficult to update the key quickly according to security needs.

[0154] (3) Key isolation cannot be achieved. Currently, the keys in the signaling plane and user plane are derived from the key K in the USIM card based on AKA negotiation, and even the keys in the service layer are derived from K. The keys between services are not truly isolated.

[0155] Digest function: H = HASH(M), which uses a quantum-safe digest algorithm to calculate the digest value of M.

[0156] like Figure 1 As shown, an embodiment of the present invention provides a communication network authentication method applied to a first network element, wherein the first network element is a network element in the home network HN of a user equipment (UE), and the method includes:

[0157] Step 101: Randomly generate a random number RAND.

[0158] Here, the first network element can specifically be a UDM. In the following embodiments, the first network element is a UDM as an example for explanation.

[0159] It should be noted that User Equipment (UE) can be understood as a collective term for Mobile Equipment (ME) and USIM. In other words, the UE is the entirety of the user equipment, the ME is the hardware component of the UE, and the USIM is the software / storage component of the UE. These three components work together to enable the user to access the mobile network and communicate. The ME and USIM cooperate to complete network authentication. In the following embodiments, functions or operations involving the ME or USIM can also be understood as those that can be performed by the UE.

[0160] Step 102: Select a first key and a first key identifier corresponding to the first key from at least two sets of key data corresponding to the UE. The key data is configured by the HN for the USIM card corresponding to the UE. Each set of key data includes: a key and a key identifier (KID) corresponding to the key.

[0161] It should be noted that the at least two sets of key data corresponding to the UE mentioned above are written by the network-side device (such as a network device in the UE's HN) during USIM card initialization. After key initialization is completed, the operator should synchronize the key data corresponding to the USIM to the UDM. The USIM corresponding to the UE stores data such as the user's core key K and identifier (i.e., KID). In this way, the UE and HN can complete the authentication process based on this key data.

[0162] Specifically, the network-side device can write n keys according to the security policy: K1, K2, ..., Kn, and generate a corresponding key identifier KID for each key. Here, n is the maximum number of keys that can be written according to the security policy, n>=1. The key identifier KID can be the key's index value or a unique ID value. For example, the KIDs corresponding to keys K1, K2, ..., Kn can be: 1, 2, ..., n.

[0163] It should be noted that when selecting a key, the first network element (UDM) can select a key Ki (where 1 <= i <= n) from the key list (i.e., key data) according to a key selection strategy. The corresponding key identifier is KIDi. This key selection strategy can be based on the key index order or random selection.

[0164] Step 103: Generate an authentication token AUTN based on the RAND, the first key, and the first key identifier.

[0165] It should be noted that the first network element (UDM) can use the selected first key and first key identifier to calculate the authentication vector (AV) based on the improved MILENAGE algorithm of this invention, and write the KID (i.e., the first key identifier) ​​into the AUTN (i.e., AUTN).

[0166] Step 104: Send authentication request information to the UE, the authentication request information including the RAND and the AUTN.

[0167] In this embodiment, the first network element can select a key from at least two sets of key data for authentication with the UE. This allows for key rotation based on a key selection strategy, preventing the security risks associated with using only a single key for authentication and effectively improving the security of AKA authentication in the communication network. Furthermore, if a key is compromised, the first network element can replace it according to the key selection strategy, achieving a risk diversification effect.

[0168] It should be noted that the communication network authentication method provided in this embodiment of the invention is applicable not only to the AKA protocols of third-generation mobile communication technology (3G), fourth-generation mobile communication technology (4G), and fifth-generation mobile communication technology (5G), but also to the corresponding EAP-AKA. The following description uses the application of the communication network authentication method of this invention in 5G AKA as an example to illustrate the specific network authentication process.

[0169] (I) Identity Submission Process:

[0170] When the network side requires the UE to send a SUCI for network authentication, the UE sends an Initial Registration Request to the network side. The ME reads the Subscription Permanent Identifier (SUPI) from the USIM, encrypts the SUPI using the Elliptic Curve Integrated Encryption Scheme (ECIES), and obtains the Subscription Concealed Identifier (SUCI). The SUCI is then forwarded to the home network's UDM through relevant network elements.

[0171] When a UE needs authentication, the AMF sends a Nausf_UEAuthenticate_Get Request message to the AFS. The AFS then sends a Nudm_UEAuthenticate_Get Request message to the first network element (UDM) to request the user's authentication information. Upon receiving the Nudm_Authenticate_Get Request message, if the UDM receives a SUCI, it should use ECIES to decrypt the SUCI to obtain the SUPI.

[0172] (II) Master Authentication Process:

[0173] Network side:

[0174] After the first network element (UDM) selects the first key and first key identifier according to the key selection strategy, it can use the improved MILENAGE algorithm (with added input parameter KIDi) to calculate AV = (RAND, AUTN, XRES, CK, IK). The specific process is as follows:

[0175] like Figure 2 As shown, in some embodiments, generating an authentication token AUTN based on the RAND, the first key, and the first key identifier includes:

[0176] Step 1031: Generate the first sequence number SQN corresponding to the UE.

[0177] It should be noted that the first network element generates an SQN each time it performs network authentication, and the value of the SQN increases sequentially.

[0178] Step 1032: Generate a message authentication code (MAC) based on the first key identifier, the RAND, the first key, and the first SQN.

[0179] In this step, the process of calculating MAC can be represented as: MAC = f1(Ki, RAND, AMF, KIDi, SQN), where f1() is a function in the improved MILENAGE algorithm.

[0180] Here, AMF stands for Authentication Management Field, which is an important parameter in the AKA process. It is included in AUTN to support the management and control of the authentication process. UDM can generate AMF according to the operator's needs or specific authentication scenarios.

[0181] Step 1033: Generate first information based on the first key, the RAND, and the first SQN.

[0182] In this step, such as Figure 2 As shown, by inputting the first key (denoted by K) and RAND into the function f5(), an anonymous key (AK) can be obtained. Furthermore, the first information (i.e., SQN⊕AK) can be calculated based on the first SQN and AK.

[0183] Step 1034: Generate the AUTN based on the first information, the first key identifier, and the MAC.

[0184] In this step, the process of generating AUTN can be represented as: AUTN=SQN⊕AK||AMF||KID||MAC.

[0185] In this embodiment, by introducing a new input parameter KIDi (i.e., the first key identifier), the improved MILENAGE algorithm can be used to generate the AUTN. The AUTN contains the first information (SQN⊕AK), AMF, the first key identifier, and MAC. In this way, after receiving the AUTN, the UE can obtain this information by parsing the AUTN and use it for network authentication.

[0186] like Figure 4 As shown, the first network element (UDM) can return the requested 5G Home Environment (HE) AV to the Authentication Server Function (AUSF) in the Nudm_UEAuthentication_Get Response message, and indicate that the 5G HE AV is used for 5G AKA. If the request (Nudm_UEAuthentication_Get Response) contains SUCI, the UDM will include SUPI in the Nudm_UEAuthentication_Get response. It should be noted that the AUSF can interact with the UDM to authenticate the UE for the home network.

[0187] AUSF should temporarily store the Extended Authentication Response (XRES*) value and the received SUCI or SUPI, and may also store K. AUSF .

[0188] AUSF should generate a 5G AV based on the 5G HEAV received from UDM / ARPF (which can store user subscription information, authentication data K, etc.). The hash extended authentication response (HXRES*) value is calculated from RAND and XRES*, and from K... AUSF Derivation of K SEAF Then, use HXRES* and K. SEAF Replace XRES* and K in 5G HE AV respectively AUSF Afterwards, AUSF should remove K. SEAF And through the Nausf_UEAuthentication_Authenticate response, the 5G SE AV (RAND, AUTN, HXRES*) is sent to the Security Anchor Function (SEAF).

[0189] In some embodiments, sending authentication request information to the UE includes: sending the authentication request information to the UE through a second network element, wherein the second network element is a network element in the UE's serving network SN.

[0190] It should be noted that the second network element can specifically be a SEAF. The SEAF can access the network and authenticate the UE. Specifically, the SEAF can send authentication request information (including RAND and AUTN) to the UE via a Non-Access Stratum (NAS) message (Auth-Req). This message can also contain information used by the UE and AMF to identify K. AMF In addition to the Next Generation Key Set Identifier (ngKSI) and a portion of the native security context, it should also include the Anti-Bidding Binding Parameter (ABBA).

[0191] User Equipment (UE) side:

[0192] like Figure 4 As shown, ME should forward the RAND and AUTN from the NAS message (Auth-Req) to USIM.

[0193] like Figure 3 As shown, USIM parses the AUTN (i.e., AUTN) to obtain the KID (i.e., KIDi, the first key identifier) ​​and MAC (i.e., MAC). Based on the first key identifier, it retrieves the corresponding key Ki (i.e., the second key) from the key list (at least two sets of key data corresponding to the UE). Then, USIM verifies the validity of the AUTN using an improved MILENAGE algorithm based on Ki. Specifically, USIM calculates XMAC = f1(Ki, RAND, AMF, KIDi, SQN) and determines whether preset conditions are met. If they are met, the verification passes. Specifically, this can be determined by checking whether the MAC and XMAC are the same and verifying whether SQN is up-to-date.

[0194] If the verification is successful, USIM should calculate the response RES and return RES, the Cipher Key (CK), and the Integrity Key (IK) to ME.

[0195] ME can calculate RES* from RES and derive K from CK||IK. AUSF From K AUSF Derivation of K SEAFDuring the authentication process, the ME accessing 5G can check whether the "separation bit" in the AUTN's AMF field is set to 1. It should be noted that the "separation bit" is the 0th bit of the AUTN's AMF field, and this "separation bit" in the AUTN's AMF cannot be used for operator-specific purposes.

[0196] The UE can return RES* to SEAF in the NAS message authentication response.

[0197] SEAF can calculate HRES* based on RAND and RES*, and compare HRES* with HXRES*. If they match, SEAF can consider the authentication successful from the perspective of the service network; if they do not match, SEAF should consider the authentication failed and indicate the authentication failure to AUSF.

[0198] SEAF should send the corresponding SUCI or SUPI from the UE to AUSF via the Nausf_UEAuthentication_AuthenticateRequest message.

[0199] When AUSF receives a Nausf_UEAuthentication_Authenticate Request message containing RES*, it can verify whether the AV has expired. If the AV has expired, AUSF can consider authentication unsuccessful from the home network's perspective. AUSF should compare the received RES* with the stored XRES*. If RES* and XRES* match, AUSF can consider authentication successful from the home network's perspective.

[0200] AUSF should indicate to SEAF whether authentication was successful via the Nausf_UEAuthentication_Authenticate Response. If authentication is successful, KSEAF should be sent to SEAF via the Nausf_UEAuthentication_Authenticate Response. If AUSF receives SUCI from SEAF and authentication is successful when initiating authentication, AUSF may also include SUPI in the Nausf_UEAuthentication_Authenticate Response.

[0201] If authentication is successful, SEAF should send the key K received from the Nausf_UEAuthentication_Authenticate Response message. SEAF As the anchor key, then from K SEAF K is derived from ABBA parameters and SUPI.AMF and provide ngKSI and K to AMF AMF .

[0202] If SUCI is used for this authentication, SEAF should only provide ngKSI and K to AMF after receiving a Nausf_UEAuthentication_Authenticate Response message containing SUCI. AMF The UE will not be provided with communication services until the SUPI is known to the Serving Network.

[0203] The following describes the fault recovery process for authentication synchronization between UE and HN based on key data.

[0204] USIM uses an improved MILENAGE algorithm (with added input parameter KIDi) to calculate AUTS, specifically including:

[0205] (1) Calculate the first MAC-S based on the first key identifier, the second key, RAND, and the third SQN. The calculation process can be expressed as: MAC-S = f1*(Ki, RAND, AMF, KIDi, SQN) MS Here, the third SQN is the SQN stored locally by the UE.

[0206] (2) Calculate AUTS based on the third SQN, the first key identifier, and the first MAC-S. The calculation process can be expressed as: AUTS = SQN MS ⊕AK||KIDi||MAC-S.

[0207] Afterwards, ME sends AUTS to the serving network SEAF. SEAF then sends RAND and AUTS to the home network UDM.

[0208] like Figures 5-6 As shown, in some embodiments, the method further includes:

[0209] (i) Receive the authentication failure information sent by the UE, wherein the authentication failure information carries the authentication token AUTS and the RAND.

[0210] (ii) Parse the AUTS to obtain the first key identifier, the third SQN, and the first synchronization message authentication code MAC-S.

[0211] (iii) Verify the legitimacy of the AUTS and the RAND based on the first key identifier, the third SQN and the first MAC-S.

[0212] In some specific embodiments, verifying the legitimacy of the AUTS and the RAND based on the first key identifier, the third SQN, and the first MAC-S includes:

[0213] (1) Obtain the first key corresponding to the first key identifier from the key data.

[0214] It should be noted that after the first network element (UDM) obtains the first key identifier (i.e., KIDi) from AUTS, it can obtain the corresponding Ki (i.e., the first key) from the key list (key data) based on the first key identifier.

[0215] (2) Determine the second MAC-S based on the first key, the RAND, the first key identifier and the third SQN.

[0216] It should be noted that the first network element (UDM) uses the improved MILENAGE algorithm based on Ki (i.e., the first key) to calculate MAC-S to verify the validity of AUTS. Specifically, the process of calculating MAC-S can be expressed as: MAC-S = f1*(Ki, RAND, AMF, KIDi, SQN) MS ).

[0217] (3) If the first MAC-S is the same as the second MAC-S, the verification is confirmed to be successful.

[0218] (iv) If the verification is successful, the SQN corresponding to the UE is updated to the third SQN according to the third SQN.

[0219] In this embodiment, the first network element can obtain the first key identifier from the AUTS, and then obtain the corresponding first key K from the key list according to the first key identifier. The improved MILENAGE algorithm can be used to verify the validity of the AUTS, and if the verification is successful, the SQN parameter synchronization can be performed.

[0220] It should be noted that the communication network authentication method of this invention is compatible with existing 3GPP protocols. Compared with the original 3GPP AKA authentication protocol, it only requires modification of the relevant processes of USIM and UDM, without modifying other network elements and related interfaces. The modification cost is low, and it has high compatibility with the original protocol. Moreover, the serving network SN does not need to be modified, and it is unaware of the new protocol modification.

[0221] Furthermore, in the communication network authentication method of this invention, each call service, data service, and other upper-layer services can be allocated different keys according to a strategy, and authentication, key derivation, and key replacement can be performed independently, thereby achieving true key isolation based on the service.

[0222] The communication network authentication method in this embodiment uses multiple keys for authentication between the first network element and the UE. The first network element can change the key according to the policy. In this way, the security risks caused by using only one key for authentication can be prevented, and the security of AKA authentication in the communication network can be effectively improved.

[0223] like Figure 7 As shown, an embodiment of the present invention provides a communication network authentication method applied to a UE, comprising:

[0224] Step 701: Receive authentication request information sent by the first network element, wherein the authentication request information includes RAND and AUTN.

[0225] Step 702: Verify the validity of the AUTN based on at least two sets of key data corresponding to the RAND and the UE. The key data is configured by the UE's HN for the USIM card corresponding to the UE. Each set of key data includes: a key and a key identifier corresponding to the key.

[0226] Step 703: If the verification is successful, send an authentication response message to the first network element.

[0227] In this embodiment, the UE can perform authentication based on at least two sets of key data and the first network element. This can prevent the security risks caused by using only one key for authentication and effectively improve the security of AKA authentication in the communication network.

[0228] In some embodiments, sending the synchronization authentication failure information to the first network element includes: sending the synchronization authentication failure information to the first network element through a second network element, wherein the second network element is a network element in the UE's SN.

[0229] like Figure 3 As shown, in some embodiments, step 702, which verifies the validity of the AUTN based on at least two sets of key data corresponding to the RAND and the UE, includes:

[0230] Step 7021: Parse the AUTN to obtain the first key identifier, MAC, and first information.

[0231] It should be noted that, as Figure 3 As shown, f1, f2, f3, etc. represent different functions in the improved MILENAGE algorithm in this embodiment of the invention. AUTN contains the first information (SQN⊕AK), AMF, first key identifier and MAC. The UE can obtain this information by parsing AUTN.

[0232] Step 7022: Obtain the second key corresponding to the first key identifier from the key data.

[0233] Step 7023: Determine the second SQN based on the RAND, the second key, and the first information.

[0234] like Figure 3 As shown, by inputting the first key (denoted by K) and RAND into the function f5, AK can be obtained. Furthermore, based on the first information (i.e., SQN⊕AK) and AK, SQN (i.e., the second SQN) can be calculated.

[0235] Step 7024: Generate the desired message authentication code XMAC based on the second key, the RAND, the first key identifier, and the second SQN.

[0236] Here, the calculation process can be expressed as: XMAC = f1(Ki, RAND, AMF, KIDi, SQN).

[0237] Step 7025: If preset conditions are met, the verification is confirmed to be successful. The preset conditions include at least one of the following: (1) The XMAC is the same as the MAC. (2) The second SQN is greater than the third SQN, where the third SQN is the SQN stored locally by the UE.

[0238] In some embodiments, when the second SQN is less than or equal to the third SQN, the method further includes:

[0239] (i) Determine the first MAC-S based on the first key identifier, the second key, the RAND and the third SQN.

[0240] In this step, the calculation process of the first MAC-S can be expressed as: MAC-S = f1*(Ki, RAND, AMF, KIDi, SQN) MS ).

[0241] (ii) Determine AUTS based on the third SQN, the first key identifier and the first MAC-S.

[0242] In this step, the calculation process of AUTS can be expressed as: AUTS = SQN MS ⊕AK||KIDi||MAC-S.

[0243] (iii) Send synchronization authentication failure information to the first network element, wherein the synchronization authentication failure information carries the AUTS and the RAND.

[0244] In this embodiment of the communication network authentication method, the UE and the first network element can perform authentication based on at least two sets of key data. This can prevent the security risks caused by using only one key for authentication and effectively improve the security of AKA authentication in the communication network.

[0245] like Figure 8 As shown, an embodiment of the present invention provides a communication network authentication device applied to a first network element, wherein the first network element is a network element in the home network HN of a user equipment (UE), and the device includes:

[0246] Data acquisition module 810 is used to randomly generate random numbers RAND;

[0247] The key selection module 820 is used to select a first key and a first key identifier corresponding to the first key from at least two sets of key data corresponding to the UE. The key data is configured by the HN for the USIM card corresponding to the UE. Each set of key data includes: a key and a key identifier corresponding to the key.

[0248] The first generation module 830 is used to generate an authentication token AUTN based on the RAND, the first key, and the first key identifier.

[0249] The request sending module 840 is used to send authentication request information to the UE, the authentication request information including the RAND and the AUTN.

[0250] In this embodiment, the first network element can select a key from at least two sets of key data for authentication with the UE. This allows for key rotation based on a key selection strategy, preventing the security risks associated with using only a single key for authentication and effectively improving the security of AKA authentication in the communication network. Furthermore, if a key is compromised, the first network element can replace it according to the key selection strategy, achieving a risk diversification effect.

[0251] Optionally, the first generation module includes:

[0252] The first generation submodule is used to generate the first sequence number SQN corresponding to the UE;

[0253] The second generation submodule is used to generate a message authentication code (MAC) based on the first key identifier, the RAND, the first key, and the first SQN.

[0254] The third generation submodule is used to generate first information based on the first key, the RAND and the first SQN;

[0255] The fourth generation submodule is used to generate the AUTN based on the first information, the first key identifier, and the MAC.

[0256] Optionally, the device further includes:

[0257] The first receiving module is used to receive the synchronization authentication failure information sent by the UE, wherein the synchronization authentication failure information carries the synchronization authentication token AUTS and the RAND.

[0258] The first parsing module is used to parse the AUTS to obtain the first key identifier, the third SQN, and the first synchronization message authentication code MAC-S.

[0259] The first verification module is used to verify the legality of the AUTS and the RAND based on the first key identifier, the third SQN, and the first MAC-S.

[0260] The first update module is used to update the SQN corresponding to the UE to the third SQN according to the third SQN if the verification is successful.

[0261] Optionally, the first verification module includes:

[0262] A key acquisition submodule is used to acquire the first key corresponding to the first key identifier from the key data;

[0263] The first processing submodule is used to determine the second MAC-S based on the first key, the RAND, the first key identifier, and the third SQN;

[0264] The second processing submodule is used to determine that the verification is successful if the first MAC-S and the second MAC-S are the same.

[0265] Optionally, the request sending module includes:

[0266] The request sending submodule is used to send the authentication request information to the UE through a second network element, wherein the second network element is a network element in the UE's serving network SN.

[0267] It should be noted that the communication network authentication device provided in this embodiment of the invention can implement all the method steps implemented in the above-described communication network authentication method embodiment applied to the first network element, and can achieve the same technical effect. Here, the parts that are the same as those in the method embodiment and the beneficial effects will not be described in detail.

[0268] like Figure 9 As shown, an embodiment of the present invention provides a communication network authentication device applied to a UE, comprising:

[0269] The request receiving module 910 is used to receive authentication request information sent by the first network element, wherein the authentication request information includes RAND and AUTN;

[0270] The second verification module 920 is used to verify the validity of the AUTN based on at least two sets of key data corresponding to the RAND and the UE. The key data is configured by the UE's HN for the USIM card corresponding to the UE. Each set of key data includes: a key and a key identifier corresponding to the key.

[0271] The response sending module 930 is used to send an authentication response message to the first network element if the authentication is successful.

[0272] In this embodiment, the UE can perform authentication based on at least two sets of key data and the first network element. This can prevent the security risks caused by using only one key for authentication and effectively improve the security of AKA authentication in the communication network.

[0273] Optionally, the second verification module 920 includes:

[0274] The first parsing submodule is used to parse the AUTN to obtain the first key identifier, MAC, and first information;

[0275] The first acquisition submodule is used to acquire the second key corresponding to the first key identifier from the key data;

[0276] The third processing submodule is used to determine the second SQN based on the RAND, the second key, and the first information;

[0277] The fifth generation submodule is used to generate the desired message authentication code XMAC based on the second key, the RAND, the first key identifier, and the second SQN;

[0278] The fourth processing submodule is used to determine whether the verification is successful if preset conditions are met;

[0279] The preset conditions include at least one of the following:

[0280] The XMAC is the same as the MAC;

[0281] The second SQN is greater than the third SQN, and the third SQN is the SQN stored locally by the UE.

[0282] Optionally, the device further includes:

[0283] The fifth processing submodule is used to determine the first MAC-S based on the first key identifier, the second key, the RAND, and the third SQN;

[0284] The sixth processing submodule is used to determine AUTS based on the third SQN, the first key identifier, and the first MAC-S;

[0285] The first sending submodule is used to send synchronization authentication failure information to the first network element, wherein the synchronization authentication failure information carries the AUTS and the RAND.

[0286] Optionally, the first transmitting submodule includes:

[0287] The information sending unit is used to send the synchronization authentication failure information to the first network element through the second network element, wherein the second network element is a network element in the SN of the UE.

[0288] It should be noted that the communication network authentication device provided in this embodiment of the invention can implement all the method steps implemented in the above-described communication network authentication method embodiment applied to UE, and can achieve the same technical effect. Here, the parts that are the same as those in the method embodiment and the beneficial effects will not be described in detail.

[0289] like Figure 10 As shown, an embodiment of the present invention provides a network element 1000, which is a first network element in the home network HN of a user equipment (UE). The first network element includes a processor 1010 and a transceiver 1020. The processor 1010 is used for:

[0290] Randomly generate random numbers (RAND);

[0291] From at least two sets of key data corresponding to the UE, select a first key and a first key identifier corresponding to the first key. The key data is configured by the HN for the USIM card corresponding to the UE. Each set of key data includes: a key and a key identifier corresponding to the key.

[0292] An authentication token AUTN is generated based on the RAND, the first key, and the first key identifier.

[0293] The authentication request information is sent to the UE, and the authentication request information includes the RAND and the AUTN.

[0294] In this embodiment, the first network element can select a key from at least two sets of key data for authentication with the UE. This allows for key rotation based on a key selection strategy, preventing the security risks associated with using only a single key for authentication and effectively improving the security of AKA authentication in the communication network. Furthermore, if a key is compromised, the first network element can replace it according to the key selection strategy, achieving a risk diversification effect.

[0295] Optionally, when the processor 1010 generates an authentication token AUTN based on the RAND, the first key, and the first key identifier, it specifically performs the following:

[0296] Generate the first sequence number SQN corresponding to the UE;

[0297] Generate a message authentication code (MAC) based on the first key identifier, the RAND, the first key, and the first SQN;

[0298] First information is generated based on the first key, the RAND, and the first SQN;

[0299] The AUTN is generated based on the first information, the first key identifier, and the MAC.

[0300] Optionally, the processor 1010 is further configured to:

[0301] The system receives synchronization authentication failure information sent by the UE, the synchronization authentication failure information carrying the synchronization authentication token AUTS and the RAND;

[0302] Parse the AUTS to obtain the first key identifier, the third SQN, and the first synchronization message authentication code MAC-S;

[0303] Verify the legitimacy of the AUTS and the RAND based on the first key identifier, the third SQN, and the first MAC-S;

[0304] If the verification is successful, the SQN corresponding to the UE is updated to the third SQN according to the third SQN.

[0305] Optionally, when the processor 1010 verifies the legality of the AUTS and the RAND based on the first key identifier, the third SQN, and the first MAC-S, it is specifically configured to:

[0306] From the key data, obtain the first key corresponding to the first key identifier;

[0307] The second MAC-S is determined based on the first key, the RAND, the first key identifier, and the third SQN;

[0308] If the first MAC-S and the second MAC-S are the same, the verification is deemed successful.

[0309] Optionally, when sending authentication request information to the UE, the processor 1010 is specifically used for:

[0310] The authentication request information is sent to the UE through a second network element, where the second network element is a network element in the UE's serving network SN.

[0311] It should be noted that the network element provided in this embodiment of the invention can implement all the method steps implemented in the above embodiment of the communication network authentication method applied to the first network element, and can achieve the same technical effect. Here, the parts that are the same as those in the method embodiment and the beneficial effects will not be described in detail.

[0312] like Figure 11 As shown, a user equipment UE1100 according to an embodiment of the present invention includes a processor 1110 and a transceiver 1120, wherein the processor 1110 is used for:

[0313] Receive authentication request information sent by the first network element, wherein the authentication request information includes RAND and AUTN;

[0314] The validity of the AUTN is verified based on at least two sets of key data corresponding to the RAND and the UE. The key data is configured by the UE's HN for the USIM card corresponding to the UE. Each set of key data includes: a key and a key identifier corresponding to the key.

[0315] If the verification is successful, an authentication response message is sent to the first network element.

[0316] In this embodiment, the UE can perform authentication based on at least two sets of key data and the first network element. This can prevent the security risks caused by using only one key for authentication and effectively improve the security of AKA authentication in the communication network.

[0317] Optionally, when the processor 1110 verifies the validity of the AUTN based on at least two sets of key data corresponding to the RAND and the UE, it is specifically configured to:

[0318] Parse the AUTN to obtain the first key identifier, MAC address, and first information;

[0319] From the key data, obtain the second key corresponding to the first key identifier;

[0320] The second SQN is determined based on the RAND, the second key, and the first information;

[0321] Generate the desired message authentication code XMAC based on the second key, the RAND, the first key identifier, and the second SQN;

[0322] If the preset conditions are met, the verification is deemed successful.

[0323] The preset conditions include at least one of the following:

[0324] The XMAC is the same as the MAC;

[0325] The second SQN is greater than the third SQN, and the third SQN is the SQN stored locally by the UE.

[0326] Optionally, if the second SQN is less than or equal to the third SQN, the processor 1110 is further configured to:

[0327] The first MAC-S is determined based on the first key identifier, the second key, the RAND, and the third SQN;

[0328] AUTS is determined based on the third SQN, the first key identifier, and the first MAC-S;

[0329] A synchronization authentication failure message is sent to the first network element, the synchronization authentication failure message carrying the AUTS and the RAND.

[0330] Optionally, when the processor 1110 sends synchronization authentication failure information to the first network element, it is specifically used for:

[0331] The synchronization authentication failure information is sent from the second network element to the first network element, where the second network element is a network element in the UE's SN.

[0332] It should be noted that the UE provided in this embodiment of the invention can implement all the method steps implemented in the above-mentioned communication network authentication method embodiment applied to the UE, and can achieve the same technical effect. Here, the parts that are the same as those in the method embodiment and the beneficial effects will not be described in detail.

[0333] Another network element of the present invention, such as Figure 12 As shown, it includes a transceiver 1210, a processor 1200, a memory 1220, and a program or instructions stored in the memory 1220 and executable on the processor 1200; when the processor 1200 executes the program or instructions, it implements the above-mentioned communication network authentication method applied to the first network element.

[0334] The transceiver 1210 is used to receive and send data under the control of the processor 1200.

[0335] Among them, Figure 12In this context, the bus architecture may include any number of interconnected buses and bridges, specifically linking various circuits together, represented by one or more processors (processor 1200) and memory (memory 1220). The bus architecture may also link together various other circuits such as peripheral devices, voltage regulators, and power management circuits, which are well known in the art and therefore will not be described further herein. A bus interface provides an interface. Transceiver 1210 may be multiple elements, including transmitters and receivers, providing a unit for communicating with various other devices over a transmission medium. Processor 1200 is responsible for managing the bus architecture and general processing, and memory 1220 may store data used by processor 1200 during operation.

[0336] Another embodiment of the present invention provides a user equipment (UE), such as Figure 13 As shown, it includes a transceiver 1310, a processor 1300, a memory 1320, and a program or instructions stored in the memory 1320 and executable on the processor 1300; when the processor 1300 executes the program or instructions, it implements the above-mentioned communication network authentication method applied to the UE.

[0337] The transceiver 1310 is used to receive and send data under the control of the processor 1300.

[0338] Among them, Figure 13 In this context, the bus architecture can include any number of interconnected buses and bridges, specifically linking various circuits together, such as one or more processors represented by processor 1300 and memory represented by memory 1320. The bus architecture can also link together various other circuits, such as peripheral devices, voltage regulators, and power management circuits, which are well known in the art and therefore will not be described further herein. The bus interface provides an interface. Transceiver 1310 can be multiple elements, including transmitters and receivers, providing a unit for communicating with various other devices over a transmission medium. For different user equipment, user interface 1330 can also be an interface capable of connecting external or internal devices, including but not limited to keypads, displays, speakers, microphones, joysticks, etc.

[0339] The processor 1300 is responsible for managing the bus architecture and general processing, while the memory 1320 can store the data used by the processor 1300 when performing operations.

[0340] This application also provides a computer program product, including computer instructions, which, when executed by a processor, implement the above-described... Figure 1 or Figure 7 The various processes of the method embodiments shown can achieve the same technical effect, and will not be described again here to avoid repetition.

[0341] This invention provides a readable storage medium storing a program or instructions. When executed by a processor, the program or instructions implement the steps in the communication network authentication method described above and achieve the same technical effect. To avoid repetition, further details are omitted here. The computer-readable storage medium may include read-only memory (ROM), random access memory (RAM), magnetic disk, or optical disk.

[0342] It should be further noted that the terminals described in this specification include, but are not limited to, smartphones, tablets, etc., and many of the functional components described are referred to as modules in order to emphasize the independence of their implementation.

[0343] In this embodiment of the invention, the module can be implemented in software so that it can be executed by various types of processors. For example, an identified executable code module may include one or more physical or logical blocks of computer instructions, which may be constructed as objects, procedures, or functions. Nevertheless, the executable code of the identified module does not need to be physically located together, but may include different instructions stored in different bits, which, when logically combined, constitute the module and achieve the module's intended purpose.

[0344] In practice, an executable code module can be a single instruction or many instructions, and can even be distributed across multiple different code segments, different programs, and across multiple memory devices. Similarly, operational data can be identified within the module and can be implemented in any suitable form and organized within any suitable type of data structure. This operational data can be collected as a single dataset or distributed across different locations (including different storage devices), and can exist, at least in part, solely as electronic signals within the system or network.

[0345] When a module can be implemented using software, considering the current level of hardware technology, modules that can be implemented in software can be implemented using hardware circuits by those skilled in the art to achieve the corresponding functions, without considering cost. These hardware circuits include conventional very-large-scale integrated circuits (VLSI) or gate arrays, as well as existing semiconductors such as logic chips and transistors, or other discrete components. Modules can also be implemented using programmable hardware devices, such as field-programmable gate arrays, programmable array logic, and programmable logic devices.

[0346] The exemplary embodiments described above are with reference to the accompanying drawings. Many different forms and embodiments are feasible without departing from the spirit and teachings of the invention. Therefore, the invention should not be construed as limiting the exemplary embodiments set forth herein. Rather, these exemplary embodiments are provided to make the invention complete and convey the scope of the invention to those skilled in the art. In these drawings, component dimensions and relative dimensions may be exaggerated for clarity. The terminology used herein is for the purpose of describing particular exemplary embodiments only and is not intended to be limiting. As used herein, unless explicitly stated otherwise, the singular forms “a,” “an,” and “the” are intended to include all such forms. It will be further understood that the terms “comprising” and / or “including”, when used in this specification, indicate the presence of the stated features, integers, steps, operations, components, and / or elements, but do not exclude the presence or addition of one or more other features, integers, steps, operations, components, or elements. Unless otherwise indicated, a range of values ​​is stated to include the upper and lower limits of the range and any subranges therebetween.

[0347] The above description represents the preferred embodiments of the present invention. It should be noted that those skilled in the art can make various improvements and modifications without departing from the principles of the present invention, and these improvements and modifications should also be considered within the scope of protection of the present invention.

Claims

1. A communication network authentication method, characterized in that, The method, applied to a first network element, wherein the first network element is a network element in the home network (HN) of the user equipment (UE), includes: Randomly generate random numbers (RAND); From at least two sets of key data corresponding to the UE, select a first key and a first key identifier corresponding to the first key. The key data is configured by the HN for the USIM card corresponding to the UE. Each set of key data includes: a key and a key identifier corresponding to the key. An authentication token AUTN is generated based on the RAND, the first key, and the first key identifier. An authentication request message is sent to the UE, the authentication request message including the RAND and the AUTN.

2. The method according to claim 1, characterized in that, The step of generating an authentication token AUTN based on the RAND, the first key, and the first key identifier includes: Generate the first sequence number SQN corresponding to the UE; Generate a message authentication code (MAC) based on the first key identifier, the RAND, the first key, and the first SQN; First information is generated based on the first key, the RAND, and the first SQN; The AUTN is generated based on the first information, the first key identifier, and the MAC.

3. The method according to claim 2, characterized in that, The method further includes: The system receives synchronization authentication failure information sent by the UE, the synchronization authentication failure information carrying the synchronization authentication token AUTS and the RAND; Parse the AUTS to obtain the first key identifier, the third SQN, and the first synchronization message authentication code MAC-S; Verify the legitimacy of the AUTS and the RAND based on the first key identifier, the third SQN, and the first MAC-S; If the verification is successful, the SQN corresponding to the UE is updated to the third SQN according to the third SQN.

4. The method according to claim 3, characterized in that, The step of verifying the legitimacy of the AUTS and the RAND based on the first key identifier, the third SQN, and the first MAC-S includes: From the key data, obtain the first key corresponding to the first key identifier; The second MAC-S is determined based on the first key, the RAND, the first key identifier, and the third SQN; If the first MAC-S and the second MAC-S are the same, the verification is deemed successful.

5. The method according to claim 1, characterized in that, Sending authentication request information to the UE includes: The authentication request information is sent to the UE through a second network element, where the second network element is a network element in the UE's serving network SN.

6. A communication network authentication method, characterized in that, Applied to UE, including: Receive authentication request information sent by the first network element, wherein the authentication request information includes RAND and AUTN; The validity of the AUTN is verified based on at least two sets of key data corresponding to the RAND and the UE. The key data is configured by the UE's HN for the USIM card corresponding to the UE. Each set of key data includes: a key and a key identifier corresponding to the key. If the verification is successful, an authentication response message is sent to the first network element.

7. The method according to claim 6, characterized in that, The verification of the validity of the AUTN based on at least two sets of key data corresponding to the RAND and the UE includes: Parse the AUTN to obtain the first key identifier, MAC address, and first information; From the key data, obtain the second key corresponding to the first key identifier; The second SQN is determined based on the RAND, the second key, and the first information; Generate the desired message authentication code XMAC based on the second key, the RAND, the first key identifier, and the second SQN; If the preset conditions are met, the verification is deemed successful. The preset conditions include at least one of the following: The XMAC is the same as the MAC; The second SQN is greater than the third SQN, and the third SQN is the SQN stored locally by the UE.

8. The method according to claim 7, characterized in that, If the second SQN is less than or equal to the third SQN, the method further includes: The first MAC-S is determined based on the first key identifier, the second key, the RAND, and the third SQN; AUTS is determined based on the third SQN, the first key identifier, and the first MAC-S; A synchronization authentication failure message is sent to the first network element, the synchronization authentication failure message carrying the AUTS and the RAND.

9. The method according to claim 8, characterized in that, Sending synchronization authentication failure information to the first network element includes: The synchronization authentication failure information is sent from the second network element to the first network element, where the second network element is a network element in the UE's SN.

10. A communication network authentication device, applied to a first network element, wherein the first network element is a network element in the home network HN of a user equipment (UE), characterized in that, include: The data acquisition module is used to randomly generate random numbers (RAND). The key selection module is used to select a first key and a first key identifier corresponding to the first key from at least two sets of key data corresponding to the UE. The key data is configured by the HN for the USIM card corresponding to the UE. Each set of key data includes: a key and a key identifier corresponding to the key. The first generation module is used to generate an authentication token AUTN based on the RAND, the first key, and the first key identifier. The request sending module is used to send authentication request information to the UE, the authentication request information including the RAND and the AUTN.

11. A communication network authentication device, applied to a UE, characterized in that, include: The request receiving module is used to receive authentication request information sent by the first network element, wherein the authentication request information includes RAND and AUTN; The second verification module is used to verify the validity of the AUTN based on at least two sets of key data corresponding to the RAND and the UE. The key data is configured by the UE's HN for the USIM card corresponding to the UE. Each set of key data includes: a key and a key identifier corresponding to the key. The response sending module is used to send an authentication response message to the first network element if the authentication is successful.

12. A network element, wherein the network element is a first network element, the first network element being a network element in the home network HN of a user equipment (UE), characterized in that, include: Transceiver and processor; The processor is used for: Randomly generate random numbers (RAND); From at least two sets of key data corresponding to the UE, select a first key and a first key identifier corresponding to the first key. The key data is configured by the HN for the USIM card corresponding to the UE. Each set of key data includes: a key and a key identifier corresponding to the key. An authentication token AUTN is generated based on the RAND, the first key, and the first key identifier. An authentication request message is sent to the UE, the authentication request message including the RAND and the AUTN.

13. A user equipment (UE), characterized in that, include: Transceiver and processor; The processor is used for: Receive authentication request information sent by the first network element, wherein the authentication request information includes RAND and AUTN; The validity of the AUTN is verified based on at least two sets of key data corresponding to the RAND and the UE. The key data is configured by the UE's HN for the USIM card corresponding to the UE. Each set of key data includes: a key and a key identifier corresponding to the key. If the verification is successful, an authentication response message is sent to the first network element.

14. A network element, comprising: A transceiver, a processor, a memory, and a program or instructions stored in the memory and executable on the processor; characterized in that, when the processor executes the program or instructions, it implements the communication network authentication method as described in any one of claims 1-5.

15. A user equipment, comprising: A transceiver, a processor, a memory, and a program or instructions stored in the memory and executable on the processor; characterized in that, when the processor executes the program or instructions, it implements the communication network authentication method as described in any one of claims 6-9.

16. A computer program product, characterized in that, It includes computer instructions, which, when executed by a processor, implement the steps of the communication network authentication method as described in any one of claims 1-5, or implement the steps of the communication network authentication method as described in any one of claims 6-9.

17. A readable storage medium having a program or instructions stored thereon, characterized in that, When the program or instructions are executed by the processor, they implement the steps in the communication network authentication method as described in any one of claims 1-5, or the steps in the communication network authentication method as described in any one of claims 6-9.

Images