Key Derivation Algorithm Negotiation Integrity Verification
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Current key derivation algorithm negotiation methods in mobile communications are vulnerable to attacks, as the initial message sent by a terminal to the network side lacks integrity protection, allowing attackers to modify the key derivation algorithm, leading to the selection of a less secure algorithm, which compromises communication security.
Innovation Solution
A method where a terminal sends a key derivation algorithm to a storage function entity, receives an authentication token including a message authentication code and a second key derivation algorithm, and checks if the received algorithm matches the sent one to ensure integrity, using the negotiated key derivation algorithm only if they match, thereby ensuring confidentiality and improving communication security.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Productivity
If the terminal sends the key derivation algorithm in the initial message without integrity protection, then the negotiation process is simple and efficient, but the message is vulnerable to attacker modification and communication security is compromised
Solution Approach 1:
The network side performs preliminary actions by generating the authentication token containing the MAC and second key derivation algorithm before the terminal sends its key derivation algorithm. This allows the terminal to verify integrity before finalizing the negotiation, preventing attacker modification while maintaining efficiency.
Solution Approach 2:
The authentication token acts as an intermediary mechanism between the terminal and network side. It carries the MAC and second key derivation algorithm, enabling the terminal to verify message integrity without requiring complex additional protocols, thus resolving the contradiction between simplicity and security.
2Extent of automation
If the network side selects a key derivation algorithm based on preconfigured policy, then the selection process is automated and efficient, but the terminal cannot verify if the sent algorithm matches the received algorithm
Solution Approach 1:
The network side provides feedback to the terminal by including the second key derivation algorithm and MAC in the authentication token. The terminal can then verify whether the received algorithm matches what it sent, ensuring algorithm consistency while maintaining automated selection through the network side's policy-based approach.
Solution Approach 2:
The network side takes preliminary anti-action against potential algorithm mismatch by embedding the second key derivation algorithm in the authentication token before the terminal processes it. This allows the terminal to preemptively verify consistency and reject mismatched algorithms, preventing security issues before they occur.
3Ease of operation
If the attacker modifies the key derivation algorithm sent by the terminal, then the negotiation can proceed with a less secure algorithm, but communication security is lowered
Solution Approach 1:
The network side performs preliminary action by generating the MAC based on the second key derivation algorithm and embedding it in the authentication token before the terminal sends its key derivation algorithm. This allows the terminal to verify integrity before proceeding with negotiation, preventing attacker modification while maintaining negotiation continuity for legitimate cases.
Solution Approach 2:
The MAC mechanism converts the potential harm of attacker tampering into a beneficial verification tool. By including the MAC and second key derivation algorithm in the authentication token, the system enables the terminal to detect and reject tampered messages, turning the vulnerability into a security feature that maintains negotiation continuity only for legitimate exchanges.
Data Source
AI summary
This application provides a key derivation algorithm negotiation method and an apparatus. The method includes: checking, by a terminal, a sent first key derivation algorithm and a received second key derivation algorithm; if the checking is correct and the first key derivation algorithm is the same as the second key derivation algorithm, determining that the first key derivation algorithm sent by the terminal is not tampered with by an attacker; and then using a negotiated third key derivation algorithm as a key derivation algorithm of the terminal, to ensure confidentiality of the negotiated key derivation algorithm, thereby improving communication security.