Blockchain Mobile Network Access Authentication
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing mobile network access systems face security challenges due to the potential for illegal access when user equipment obtains public keys, and they lack support for UE roaming between different operators' networks.
Innovation Solution
A mobile network access system utilizing a blockchain network with a first network authentication service node and a first certificate authority node, which authorize and manage UE certificates and authentication certificates, perform mutual identity authentication, and enable roaming through roaming license certificates.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Device complexity
If asymmetric encryption mechanism is used with public key sent to user equipment, then key management burden is reduced, but security is compromised when user equipment illegally obtains the public key
Solution Approach 1:
The authentication process is segmented into multiple stages: initial authentication using stored certificates, and subsequent communications using session keys. The public key infrastructure is segmented into CA certificates (stored securely in user equipment) and authentication server certificates (obtained dynamically from blockchain). This segmentation allows reducing key management burden while maintaining security by limiting exposure of sensitive keys.
Solution Approach 2:
User equipment performs preliminary authentication by storing CA certificates and private keys in advance (e.g., in SIM cards or secure elements). The authentication server pre-obtains its authentication certificate from the blockchain. These preliminary actions enable secure authentication without requiring continuous exposure of public keys, thus reducing key management burden while maintaining security.
2Device complexity
If symmetric cryptography mechanism is used with same key for encryption and decryption, then implementation is simpler, but security is compromised and key management burden increases exponentially
Solution Approach 1:
The patent applies asymmetric cryptography (public key infrastructure) where the authentication server holds a private key and its public key is distributed as an authentication certificate obtained from blockchain. User equipment holds CA certificates and private keys for authentication. This asymmetric structure simplifies key management compared to symmetric cryptography while providing stronger security guarantees through digital signatures and certificate validation.
3Device complexity
If traditional authentication system is used, then implementation is straightforward, but UE roaming between different operators' networks is not supported
Solution Approach 1:
The blockchain-based authentication certificate system provides universal functionality across different mobile network operators. The authentication server obtains its authentication certificate from the blockchain, which can be verified by any user equipment with the corresponding CA certificate. This universal certificate verification mechanism enables UE roaming between different operators' networks while maintaining a relatively simple implementation based on standard cryptographic protocols.
Data Source
AI summary
The disclosure relates to a System, Method, Storage medium and Equipment for Mobile Network Access. The system includes: a first certificate authority node located in a block chain network, configured to authorize a first authentication certificate indicating an identity of the first network authentication service node to the first network authentication service node, authorize a first UE certificate indicating an identity of user equipment to the user equipment of the first operator, and store first UE certificate revocation information and a first CA certificate indicating an identity of the first certificate authority node to a block chain, and a first network authentication service node, configured to obtain the first UE certificate revocation information and the first CA certificate from the block chain, perform mutual identity authentication with the user equipment when receiving a first access authentication message, make the user equipment access a mobile network when completing the authentication.