CN101267663B - Method, system and device for user authentication - Google Patents

Abstract

The invention discloses a method for user identity validating, comprising that, A, a user equipment identifying a user equipment identity by using user information containing a unidirectional transformed cell during requesting, and sends the request, wherein, the unidirectional transformed cell is obtained by transformation of sharing information of the user equipment and an interact-interacted core network element; B, the interact-interacted core network element validating the user equipment identity based on the unidirectional transformed cell in the request. In addition, the invention also discloses a system and device for user identity validating. By the unidirectional transformation characteristic, spiteful users can not obtain the transformation rule of the sharing information unidirectional transformed cell, and can not a next sent validated value from an acquired current unidirectional transformed cell, thereby preventing DoS attack of the spiteful users to the core network, and increasing the communication safety.

Description

Method, system and device for user authentication

technical field

The present invention relates to mobile communication technology, in particular to a method, system and device for user identity verification.

Background technique

In a mobile communication network, in order to keep the user's identity confidential, the user's International Mobile Subscriber Identity (IMSI, International Mobile Subscriber Identity) is usually not directly used, but the method of assigning a temporary identity to identify the user's identity.

For example: in the Global System for Mobile Communications (GSM), in order to keep the user's identity confidential, the GSM system assigns a Temporary Mobile Subscriber Identity (TMSI) to the user equipment. During specific implementation, the visitor location register (VLR, Visitor Location Register) will assign a TMSI to each user entering its visit area, and the TMSI is stored in the database of the VLR, and the user equipment can identify itself by using the TMSI and the location area identifier identity of.

Similarly, in the Universal Mobile Telecommunications System (UMTS), in order to keep the identity of users confidential, UMTS assigns TMSI to users in the circuit domain, and assigns a temporary identity number (P-TMSI) in the packet domain to users in the packet domain. The location area identifier and the routing area identifier are used together to identify the identity of the user equipment. In addition, in the wireless evolving network, in order to achieve backward compatibility with the existing network, the evolving network structure also adopts the method of allocating P-TMSI to realize user identity confidentiality.

It can be seen that in a mobile communication network, in order to avoid using IMSI, users are provided to identify their own identities by using the assigned TMSI or P-TMSI. At the same time, in order to prevent attacks such as DoS, the signature of TMSI or P-TMSI is used to ensure the authenticity of TMSI or P-TMSI.

Taking the case of the UMTS packet domain as an example, the process of using the signature of the P-TMSI to ensure the authenticity of the TMSI will be described in detail below. As shown in FIG. 1 , FIG. 1 is a flowchart of identity identification and verification in the prior art. The process includes the following steps:

Step 101, the user equipment sends a request to the new service GPRS support node (SGSN, Service GPRS Supporting node) that currently wishes to interact, and the request includes P-TMSI, P-TMSI signature (Signature), old routing area identification (RAI, Routing Area Identity).

Step 102, the new SGSN can find out the old SGSN that originally allocated the P-TMSI according to the P-TMSI and the old RAI, and sends the identity request of the user equipment to the old SGSN, and the identity request includes the P-TMSI and the P-TMSI signature.

Step 103: After confirming the user identity according to the P-TMSI and the P-TMSI signature, the old SGSN sends the stored original information of the user equipment, such as IMSI, authentication vector group, etc., to the new SGSN.

Step 104, the new SGSN receives the information sent by the old SGSN, takes out one of the authentication vector groups, and sends it to the user equipment together with a pair of random numbers.

Step 105, after receiving the random number and the authentication vector, the user equipment uses its own key to calculate the authentication vector, and if it is correct, calculates the authentication response and sends it back to the new SGSN.

So far, the authentication process between the user equipment and the new SGSN that currently wants to interact is completed. It can be seen from the above process that if there is no legal P-TMSI signature, the malicious user equipment can attach the P-TMSI that is eavesdropped on the network or forged according to the generation rules and the old RAI to send a forged request, resulting in core network resources being blocked all the time. Occupy, until step 105, the malicious user equipment cannot calculate a legitimate authentication response. In the prior art, the P-TMSI signature will be redistributed after a clear text transmission, and encrypted transmission to the user equipment, so when the malicious user equipment cannot obtain the legal P-TMSI signature, the core network can A forged request is identified.

However, in practical applications, when the user is deattached and the periodic route is updated, the P-TMSI and the P-TMSI signature are not redistributed after being transmitted in plain text. At this point, the malicious user obtains the legal P-TMSI and P-TMSI signature after eavesdropping on the request of the user equipment, and can initiate a denial of service (DoS, Denial of Service) attack accordingly, and the DoS attack reaches step 105 will be identified. If the authentication process in the process shown in Figure 1 is optional, the attack will be identified later in the local authentication process, resulting in long-term occupation of core network resources and increasing the harm of DoS attacks.

Contents of the invention

In view of this, on the one hand, the embodiments of the present invention provide a method for user identity verification; on the other hand, they provide a system and device for user identity verification, so as to enhance communication security.

The method for user identity verification provided in the embodiment of the present invention includes:

A. In the request, the user equipment uses the user information containing the one-way transformation information element to identify the identity of the user equipment, and sends the request, wherein the one-way transformation information element is the core network that the user equipment interacted with the previous time. It is obtained by transforming the shared information of network elements;

B. The network element of the core network of the previous interaction performs legality verification on the identity of the user equipment according to the one-way transformation information element in the request.

The user identity verification system provided in the embodiment of the present invention includes: user equipment and old core network elements, wherein,

The user equipment is configured to, when initiating a request, identify the identity of the user equipment by using the user information including the one-way transformation information element in the request, and send the request, wherein the one-way transformation information element is obtained from the user equipment and the previous time It is obtained by transforming the shared information of the interacting core network elements;

The network element of the old core network is used to verify the legality of the identity of the user equipment according to the shared information between itself and the user equipment, and the one-way conversion information element in the request.

The user equipment provided in the embodiment of the present invention includes: a first shared information one-way transformation module and a request sending module, wherein,

The first shared information one-way transformation module is used to obtain the one-way transformation information element of the shared information according to the shared information between the user equipment and the network element of the core network, and provide the one-way transformation information element of the shared information to the request sending module;

The request sending module is configured to, when initiating a request, use the user information in the one-way transformation information element containing the shared information provided by the first shared information one-way transformation module to identify the identity of the user equipment in the request, and send the request.

The core network element provided in the embodiment of the present invention includes: a second shared information unidirectional conversion module and a verification module, wherein,

The second shared information one-way transformation module is used to obtain the one-way transformation information element of the shared information according to the shared information between the network element of the core network and the user equipment, and provide the one-way transformation information element of the shared information to the verification module;

A verification module, configured to verify the legitimacy of the identity of the user equipment according to the one-way conversion information element of the shared information provided by the second shared information one-way conversion module and the one-way conversion information element of the shared information in the request .

In the above solution, in the request, the user equipment uses the user information of the one-way conversion information element containing the shared information of the core network element that the user equipment interacted with last time to identify the identity of the user equipment, and sends the request; the core network The element performs legality verification on the identity of the user equipment according to the one-way transformation information element of the shared information in the request. It can be seen that the embodiment of the present invention utilizes the one-way transformability of the one-way transform cell, so that malicious users cannot obtain the legal value to be sent next, thereby preventing malicious users from performing DoS attacks on the core network, etc., and enhancing the security of communication .

Description of drawings

Fig. 1 is the flowchart of identity identification and verification in the prior art;

Fig. 2 is an exemplary flowchart of a method for user identity verification in an embodiment of the present invention;

FIG. 3 is a schematic diagram of a one-way hash chain in the prior art;

Fig. 4 is an exemplary structural diagram of a system for user identity verification in an embodiment of the present invention;

FIG. 5 is a schematic structural diagram of a user equipment in the system shown in FIG. 4;

FIG. 6 is a schematic structural diagram of a core network element in the system shown in FIG. 4;

FIG. 7 is a flow chart of user identity verification in Application Embodiment 1 of the present invention;

FIG. 8 is a flow chart of user identity verification in Application Embodiment 2 of the present invention;

FIG. 9 is a flow chart of user identity verification in Application Embodiment 3 of the present invention;

FIG. 10 is a flow chart of user identity verification in Application Embodiment 4 of the present invention;

Fig. 11 is a flow chart of user identity verification in the fifth application embodiment of the present invention.

Detailed ways

Referring to FIG. 2 , FIG. 2 is an exemplary flowchart of a method for user identity verification in an embodiment of the present invention. As shown in Figure 2, the process includes the following steps:

Step 201: In the request, the user equipment uses the user information of the one-way transformation information element including the shared information of the core network element that the user equipment interacted with last time to identify the identity of the user equipment, and sends the request.

In this step, the user equipment may send a request to the new core network element that currently wants to interact, or may send a request to the previous core network element to interact with. When the user equipment sends a request to the new core network element that currently wishes to interact, the previous core network element in step 201 is the old core network element; when the user equipment interacts with the previous core network element, that is When the old core network element sends the request, the previous core network element interacted with in step 201 is the old core network element.

Wherein, the one-way conversion information element of the shared information between the user equipment and the previously interacted core network element is the one-way converted information element obtained by converting the shared information between the user equipment and the previous interacted core network element. In addition to the one-way conversion information element, the user information may also include the temporary identity and area identifier of the user equipment, and according to the application scenario, the temporary identity and area identifier may be: TMSI and location area identifier; : P-TMSI and routing area identifier. And the area identifier is the area identifier of the network element of the core network that interacted last time.

In step 202, the network element of the core network interacted with last time performs legality verification on the identity of the user equipment according to the one-way conversion information element of the shared information in the above request.

When the user equipment sends a request to the new core network element currently wishing to interact, this step further includes: the new core network element finds the old core network element according to the user information in the request, such as a temporary identity identifier and an area identifier, Send the user authentication information of the one-way transformation information element containing the shared information between the user equipment and the old core network element to the old core network element, such as the temporary identity and the shared information between the user equipment and the old core network element The one-way transformed cells are sent to the old core network elements. In this step, the network element of the old core network performs legality verification on the identity of the user equipment according to the shared information between itself and the user equipment, and the received one-way transformation information element of the shared information.

Further, when the identity verification of the user equipment by the network element of the old core network is passed, the original information including the International Mobile Subscriber Identity (IMSI) of the user equipment and the shared information between the user equipment and the network element of the old core network can be sent to the new core network. network element.

When the user equipment sends a request to the previous interaction of the core network element, this step is specifically: the previous interaction of the core network element according to the shared information between itself and the user equipment, and the one-way conversion of the shared information in the request The cell performs legality verification on the identity of the user equipment.

Among them, the shared information between the user equipment and the core network elements may be of various kinds without limitation. For example, the shared information may be a temporary identity signature assigned in each mobile communication network, and the temporary identity signature is sent to the user equipment through encryption. Alternatively, the shared information may also be an encryption key shared by the user equipment and a network element of the core network, or an integrity key or the like.

Among them, there may be unlimited types of one-way transformations for shared information, such as one-way hash chain transformations, encryption transformations, and the like.

As shown in FIG. 3 , FIG. 3 is a schematic diagram of a one-way hash chain in the prior art. In Figure 3, the one-way hash chains S0, S1, S2, ..., St-1, St are generated from St one by one in the reverse direction using the one-way hash function as shown in the figure, but When using, use it forward from S0. Due to the characteristics of the one-way hash function, S1, S2, ... St cannot be derived from S0. Similarly, S2, S3, ... St, etc. cannot be derived from S1, so malicious users cannot guess The next legal value to send, only the user who owns St can generate the next legal item to send.

When encryption transformation is performed, the shared information and the encrypted serial number can be encrypted using a key (key). Among them, the encrypted sequence number can be a synchronization sequence number (SYN, Syncronize sequencenumber), such as [shared information | SYN] _key , [] _key means to encrypt the value in the brackets using a key, where SYN is the currently used encryption sequence number , the serial number used for each encryption is different, and the user equipment sends the serial number to the network element of the core network each time, so that the core network can verify whether the encrypted value is correct. In addition, the encrypted serial number can also be other values. In addition, there may also be other transformation methods in the prior art for encryption transformation, which will not be repeated here.

The above method flow can be applied in GSM network; it can also be applied in UMTS network, including circuit domain and packet domain of UMTS network; it can also be applied in wireless evolution network; in addition, it can also be applied to all networks using similar principles middle.

The method for user identity verification in the embodiment of the present invention has been described in detail above, and the system for user identity verification in the embodiment of the present invention will be described in detail below.

Referring to FIG. 4, FIG. 4 is an exemplary structural diagram of a system for user identity verification in an embodiment of the present invention. As shown by the solid line in Figure 4, the system includes: user equipment and old core network elements.

Wherein, when the user equipment is used to initiate a request, the user information of the one-way conversion information element including the shared information of the user equipment and the old core network element is used in the request to identify the identity of the user equipment, and the request is sent out. Wherein, the one-way conversion information element of the shared information between the user equipment and the old core network element is the one-way conversion information element obtained by converting the shared information between the user equipment and the previously interacted core network element. The transformation can be a one-way hash chain transformation, or an encryption transformation, etc.

Among them, in addition to the one-way conversion information element that contains the shared information between the user equipment and the core network element that interacted with the previous time, the user information may also include the temporary identity and area identifier of the user equipment, and according to the application scenario, the temporary identity The identifier and the area identifier can be: TMSI and location area identifier; also can be: P-TMSI and routing area identifier. And the area identifier is the area identifier of the network element of the core network that interacted last time.

The network element of the old core network is used to verify the legality of the identity of the user equipment according to the shared information between itself and the user equipment, and the one-way conversion information element of the shared information in the request.

In addition, as shown in the dotted line in Figure 4, the system may further include: a new core network element, configured to find the old core network network element according to the user information in the request from the user equipment, such as a temporary identity identifier and an area identifier. element, and send the user authentication information of the one-way transformation information element containing the shared information between the user equipment and the old core network element to the old core network element, such as the temporary identity and the user equipment and the old core network element The one-way transformation cell of the shared information is sent to the old core network element.

Wherein, the system may be: a system in the GSM network; it may also be: a system in the circuit domain of the UMTS network, or a system in the packet domain; it may also be: a system in the wireless evolution network and a network with similar principles system etc.

During specific implementation, the user equipment may have multiple implementation forms, and only one is listed below for detailed description. As shown in FIG. 5 , FIG. 5 is a schematic structural diagram of a user equipment. It includes: a first shared information one-way conversion module and a request sending module.

Wherein, the first shared information one-way transformation module is configured to obtain the one-way transformation information element of the shared information according to the shared information between the user equipment and the network element of the core network, and provide the one-way transformation information element of the shared information Send module to request.

The request sending module is configured to, when initiating a request, use the user information in the one-way transformation information element containing the shared information provided by the first shared information one-way transformation module to identify the identity of the user equipment in the request, and send the request.

Among them, in addition to the one-way conversion information element that contains the shared information between the user equipment and the core network element that interacted with the previous time, the user information may also include the temporary identity and area identifier of the user equipment, and according to the application scenario, the temporary identity The identifier and the area identifier can be: TMSI and location area identifier; also can be: P-TMSI and routing area identifier. And the area identifier is the area identifier of the network element of the core network that interacted last time.

During specific implementation, the network elements of the core network may also have multiple implementation forms, and only one of them will be listed below for detailed description. As shown in FIG. 6, FIG. 6 is a schematic structural diagram of a core network element. It includes: a second shared information one-way transformation module and a verification module.

Wherein, the second shared information one-way transformation module is configured to obtain the one-way transformation information element of the shared information according to the shared information between the network element of the core network and the user equipment, and provide the one-way transformation information element of the shared information to the verification module.

A verification module, configured to verify the legitimacy of the identity of the user equipment according to the one-way conversion information element of the shared information provided by the second shared information one-way conversion module and the one-way conversion information element of the shared information in the request .

In order to make the purpose, technical solutions and advantages of the embodiments of the present invention clearer, the methods and systems in the embodiments of the present invention will be further described in detail below in combination with specific application examples and accompanying drawings. For simplicity of description, in the following application embodiments, the case where the user information includes: the temporary identity of the user equipment, the area identifier, and the one-way conversion information element of the shared information between the user equipment and the core network element that interacted with the previous time is taken as an example, And all take the case that the user authentication information includes: the temporary identity of the user equipment and the one-way conversion information element of the shared information between the user equipment and the network element of the core network that interacted with the previous time as an example.

Application example one:

In this application embodiment, the UMTS packet domain is taken as an example for illustration, and the user equipment initiates the service request from the Serving GPRS Support Node (SGSN) of the UMTS packet domain, that is, the core network element is the SGSN. It is assumed that the system in this embodiment includes: a user equipment (UE), a new SGSN and an old SGSN, and it is assumed that the UE initiates a request to a new SGSN after interacting with the old SGSN.

Referring to FIG. 7, FIG. 7 is a flow chart of user identity verification in Application Embodiment 1 of the present invention. As shown in Figure 7, the process includes the following steps:

Step 701, the user equipment sends a request to the new SGSN that currently wants to interact, and the request includes P-TMSI, A', and old RAI. Among them, A' is the information element after one-way transformation of the information A shared by the user equipment and the old SGSN.

Among them, A can be: a temporary identity signature, or an encryption key, or a complete key. Wherein, the temporary identity signature may be TMSI, or P-TMSI, etc.

Step 702, the new SGSN can find the old SGSN that originally shared the information A according to the P-TMSI and the old RAI, and sends the identity request of the user equipment to the old SGSN, and the identity request includes P-TMSI and A'.

Step 703, because the old SGSN has shared information A, it can verify the legitimacy of A', so as to verify whether the user equipment is authentic. If the verification is passed, the old SGSN can send the original information of the user equipment, such as IMSI, authentication vector group, and information A shared between the user equipment and the old SGSN, to the new SGSN.

It can be seen that the above process passes through three steps from step 701 to step 703 to complete the authentication process of the user equipment.

In the above process, if the new SGSN does not reallocate the P-TMSI and does not change the information A shared by the user equipment and the old SGSN, then the next time the user equipment sends a request to the new SGSN, it will use the changed shared information A A" to authenticate itself, and so on. If the user equipment uses A" to authenticate itself, and then sends a request to another new SGSN again, at this time, the user equipment will also use A" after further unidirectional transformation ' to authenticate themselves. Because these transformations are one-way transformations, malicious users can neither launch A from A', nor launch A from A', etc. Therefore, this mechanism can not only guarantee the authentication of user equipment, but also DoS attacks on the core network by malicious terminals are prevented.

Application example two:

In this application embodiment, the UMTS packet domain is still taken as an example for illustration, and the network element of the core network in the UMTS packet domain is the SGSN. Assume that the system in this embodiment includes: UE and old SGSN, and assume that the one-way transformation adopts a one-way hash chain, and the information shared by UE and old SGSN is P-TMSI signature, that is, S _t in Figure 3 is P - TMSI signature.

Referring to FIG. 8 , FIG. 8 is a flow chart of user identity verification in Application Embodiment 2 of the present invention. As shown in Figure 8, the process includes the following steps:

Step 801, the user equipment sends a request to the old SGSN that currently wants to interact, and the request includes P-TMSI, [P-TMSI signature] _m , m and the old RAI. The value m indicates that [P-TMSI signature] _m is the m+1th item of the one-way hash chain formed by the P-TMSI signature.

Step 802, since the old SGSN has a P-TMSI signature, it can verify the legitimacy of [P-TMSI signature] _m , thereby verifying whether the user equipment is authentic.

After that, if the P-TMSI is not redistributed, the next time the user equipment uses [P-TMSI signature] _m+1 , that is, the m+2th item of the one-way hash chain formed by the P-TMSI signature, according to the one-way hash The characteristic of the Greek function chain, only the user who knows the P-TMSI signature can get [P-TMSI signature] _m+1 , so this mechanism can guarantee the authentication of the user equipment, and because the [P-TMSI signature] _m cannot be pushed [P-TMSI signature] _m+1 is generated, so the DoS attack on the core network by the malicious terminal can be detected in step 802.

Application Example Three:

In this application embodiment, the wireless evolved network is taken as an example for illustration, and the user equipment initiates the service request from the mobility management entity (MME) of the wireless evolved network. It is assumed that the system in this embodiment includes: UE, old MME and new MME assumes that the information shared by the UE and the old SGSN is the P-TMSI signature, and the one-way transformation of the P-TMSI signature uses a one-way hash chain, that is, S _t in Figure 3 is the P-TMSI signature.

The MME is a logical functional entity of the wireless evolved network, which is responsible for the mobility management of the control plane, including user context and mobility state management, allocation of user temporary identities, and security functions. In this embodiment, it is assumed that the UE initiates a request to a new MME after interacting with the old MME.

Referring to FIG. 9, FIG. 9 is a flow chart of user identity verification in Application Embodiment 3 of the present invention. As shown in Figure 9, the process includes the following steps:

Step 901, the user equipment sends a request to the new MME that currently wants to interact, and the request includes P-TMSI, [P-TMSI signature] 0, 0, old RAI. The value 0 indicates that [P-TMSI Signature] ₀ is the first item of the one-way hash chain generated by the P-TMSI signature.

Step 902, the new MME can find the old MME that originally assigned P-TMSI and P-TMSI signature according to the P-TMSI and the old RAI, and sends the identity request of the user equipment to the old MME, the identity request includes P-TMSI and [P -TMSI-Signature] ₀ , 0.

In step 903, the old MME can verify the legitimacy of [P-TMSI signature] ₀ because it has the P-TMSI signature, so as to verify whether the user equipment is authentic. If the verification is passed, the old MME can send the original information of the user equipment, such as IMSI, authentication vector set, P-TMSI signature, etc., to the new MME.

In the above process, if the new MME does not reallocate the P-TMSI and does not change the information P-TMSI signature shared by the user equipment and the old MME, then the next time the user equipment sends a request to the new MME, it will use the shared information to change again. The following cell [P-TMSI signature] ₁ , 1 to authenticate itself, and so on. If the user equipment uses [P-TMSI signature] ₁ , 1 to authenticate itself, and then sends a request to another new MME again, then at this time, the user equipment will also use the further one-way transformed [P-TMSI signature] ₂ , 2 to authenticate yourself.

The user equipment in the system in the second application embodiment and the third application embodiment may be implemented in accordance with the composition, connection relationship and function description of the user equipment shown in FIG. 5 . In addition, the first shared information one-way conversion module in the user equipment in the above two application embodiments may specifically be: a first one-way hash chain conversion module, which is used to perform one-way conversion of the shared information between the user equipment and the core network element Transform to the hash chain to obtain the one-way transformed information element of the shared information, and provide the obtained one-way transformed information element to the request sending module.

When the network element of the old core network is specifically implemented, it may be consistent with the description of the composition, connection relationship and function of the network element of the old core network shown in FIG. 6 . In addition, the second shared information one-way conversion module in the old core network network element in the above two application embodiments may specifically be: the second one-way hash chain conversion module, which is used to share the core network network element and the user equipment The information is transformed into a one-way hash chain to obtain a one-way transformed information element of the shared information, and the obtained one-way transformed information element is provided to the verification module.

Application example four:

In this application embodiment, the wireless evolved network is still taken as an example for illustration, and the network element of the core network is an MME. It is assumed that the system in this embodiment includes: UE, old MME, new MME, and Home Subscriber Server (HSS), and Assuming that the information shared by UE and old MME is P-TMSI signature, the one-way transformation of P-TMSI signature is completed by encrypting P-TMSI signature and current encryption serial number SYN, and the encryption key is shared between UE and HSS The key A, or the transformed value of key A. Wherein, the value of the SYN is different each time of encryption, and the UE sends the value of the SYN to the MME each time. The transformed value of A may be a transformed value of A.

Referring to FIG. 10 , FIG. 10 is a flow chart of user identity verification in Application Embodiment 4 of the present invention. As shown in Figure 10, the process includes the following steps:

Step 1001, the user equipment sends a request to the new MME that currently wants to interact, and the request includes P-TMSI, [P-TMSI signature|SYN] _A , 1, old RAI. The value 1 indicates that the serial number is 1, and [P-TMSI signature|SYN] _A is the first item of P-TMSI signature using A for encryption transformation.

Step 1002, the new MME can find the old MME that originally assigned the P-TMSI and P-TMSI signature according to the P-TMSI and the old RAI, and sends an identity request of the user equipment to the old MME, the identity request includes P-TMSI and [P -TMSI-Signature|SYN] _A.

Step 1003, the old MME cannot unlock [P-TMSI signature | SYN] _A , because A is the shared key between UE and HSS, so the old MME sends [P-TMSI signature | SYN] _A to HSS. Because the HSS stores the key A, it can decrypt and verify the legitimacy of [P-TMSI signature|SYN] _A , so as to verify whether the user equipment is authentic.

Step 1004, the HSS sends a message to the old MME, informing that the UE is authentic. If the verification is passed, the old MME can send the original information of the user, such as IMSI, authentication vector group and information P-TMSI signature shared by the user equipment and the old MME, to the new MME.

Application embodiment five:

In this application embodiment, the wireless evolved network is still used as an example for illustration, and the network element of the core network is an MME. It is assumed that the system in this embodiment includes: UE, old MME, and new MME, and it is assumed that the information shared by UE and old MME To sign the P-TMSI, the one-way transformation of the P-TMSI signature is completed by encrypting the P-TMSI signature and the current encrypted serial number Xi. Its encryption key is the encryption key or integrity key A last interacted with the old MME. In each encryption, the value of Xi is different, and the UE sends the value of Xi to the MME each time.

Referring to FIG. 11 , FIG. 11 is a flow chart of user identity verification in the fifth application embodiment of the present invention. As shown in Figure 11, the process includes the following steps:

Step 1101, the user equipment sends a request to the new MME that currently wants to interact, and the request includes P-TMSI, [P-TMSI signature|Xi] _A , 1, old RAI. The value 1 indicates that the serial number is 1, and [P-TMSI signature|Xi] _A is the first item of the P-TMSI signature using A for encryption transformation.

Step 1102, according to the P-TMSI and the old RAI, the new MME can find the old MME that originally assigned the P-TMSI and P-TMSI signature, and send an identity request of the user equipment to the old MME, the identity request includes P-TMSI and [P - TMSI Signature |Xi] _A.

Step 1103, the old MME can unlock [P-TMSI signature|Xi] _A and verify whether the user equipment is authentic, because A is the encryption key or integrity key that the UE interacted with the old MME last time. After passing the verification, the old MME can send the original information of the user, such as IMSI, authentication vector group, and information P-TMSI signature shared by the user equipment and the old MME, to the new MME.

The user equipment in the system in the application embodiment 4 and the application embodiment 5 may be implemented in accordance with the composition, connection relationship and function description of the user equipment shown in FIG. 5 . In addition, the first shared information one-way transformation module in the user equipment in the above two application embodiments may specifically be: a first one-way encryption transformation module, which is used to perform one-way encryption on the shared information between the user equipment and the core network element Transform, obtain the one-way transformed information element of the shared information, and provide the obtained one-way transformed information element to the request sending module.

When the network element of the old core network is specifically implemented, it may be consistent with the description of the composition, connection relationship and function of the network element of the old core network shown in FIG. 6 . In addition, the second shared information one-way transformation module in the old core network network element in the above two application embodiments may specifically be: a second one-way encryption transformation module, which is used to perform shared information between the core network network element and the user equipment The one-way encryption transformation is used to obtain the one-way transformation information element of the shared information, and the obtained one-way transformation information element is provided to the verification module.

In the above application embodiment 2 to application embodiment 5, for the sake of simplicity of description, the information shared by the UE and the old SGSN is the P-TMSI signature, that is, St in Figure 3 is the case of the P-TMSI signature as an example. For the information shared by the UE and the old SGSN is an encryption key, or a complete key, that is, St in Figure 3 is an encryption key, or a complete key, the above four application embodiments are also applicable, only in the above four In an application embodiment, the P-TMSI signature can be changed to an encryption key or a complete key accordingly.

It can be seen from the above embodiments that by utilizing the one-way transformability of the one-way transform cell, the malicious user cannot obtain the transform rule of the shared information one-way transform cell, so the following information cannot be deduced from the stolen current one-way transform cell. A one-way transformation cell and the shared information itself cannot get the legal value to be sent next, thereby preventing malicious users from DoS attacks on the core network, etc., and enhancing communication security.

The specific embodiments described above have further described the purpose, technical solutions and beneficial effects of the present invention in detail. It should be understood that the above descriptions are only preferred embodiments of the present invention and are not intended to limit the present invention. Any modification, equivalent replacement, improvement, etc. made within the spirit and principles of the present invention shall be included within the protection scope of the present invention.

Claims (17)

1. the method for a subscriber authentication is characterized in that, this method comprises:

A, subscriber equipment are in request; Utilization comprises the user profile identifying user equipment identities of monotonic transformation cell; Described request is sent, and wherein, said monotonic transformation cell is to be obtained by the subscriber equipment and the shared information conversion of mutual core network element last time;

B, last time mutual core network element carry out legitimate verification according to the said monotonic transformation cell in the described request to the identity of subscriber equipment.

2. the method for claim 1 is characterized in that, request described in the steps A is: the request that subscriber equipment sends to the mutual new core network element of current hope; Said last time mutual core network element is: old core network element;

Further comprise before the said step B: new core network element finds old core network element according to the said user profile in the described request, and the user authentication information that will comprise said subscriber equipment and the monotonic transformation cell of the shared information of old core network element sends to old core network element.

3. the method for claim 1 is characterized in that, request described in the steps A is: the request that subscriber equipment sends to last time mutual core network element;

Said step B is specially: this last time mutual core network element is according to the shared information of self and subscriber equipment, and the monotonic transformation cell of the said shared information in the request carries out legitimate verification to the identity of subscriber equipment.

4. like each described method in the claim 1 to 3, it is characterized in that said core network element is: Serving GPRS Support Node SGSN; Perhaps mobile management entity MME.

5. like each described method in the claim 1 to 3, it is characterized in that said user profile also comprises: temporary identity identification number TMSI and location area;

Perhaps also comprise: packet domain temporary identity identification number P-TMSI and Tracking Area Identifier.

6. like each described method in the claim 1 to 3, it is characterized in that said subscriber equipment with the shared information of mutual core network element last time is: temporary identity sign signature, or encryption key, or complete key.

7. like each described method in the claim 1 to 3, it is characterized in that said being transformed to: the one-way hash function chain transformaiton; Perhaps be: enciphering transformation.

8. method as claimed in claim 7 is characterized in that, if the said enciphering transformation that is transformed to, then said enciphering transformation is specially: utilize key K ey that said shared information and ciphering sequence number are encrypted.

9. method as claimed in claim 8 is characterized in that, said Key is: subscriber equipment and last time mutual mutual encryption key or the Integrity Key of core network element;

Perhaps be: the subscriber equipment that core network element obtains from ownership place client server HSS and the transformed value of HSS cipher key shared or key.

10. the system of a subscriber authentication is characterized in that, this system comprises: subscriber equipment and old core network element, wherein,

Subscriber equipment; When being used for initiation request, in request, utilize the user profile identifying user equipment identities that comprises the monotonic transformation cell, described request is sent; Wherein, said monotonic transformation cell is to be obtained by the subscriber equipment and the shared information conversion of mutual core network element last time;

Old core network element is used for the shared information according to self and subscriber equipment, and the said monotonic transformation cell in the described request carries out legitimate verification to the identity of subscriber equipment.

11. system as claimed in claim 10; It is characterized in that; This system further comprises: new core network element; Be used for finding old core network element according to the said user profile from the request of subscriber equipment, the user authentication information that will comprise said subscriber equipment and the monotonic transformation cell of the shared information of old core network element sends to old core network element.

12., it is characterized in that said system is: the system in the GSM network like claim 10 or 11 described systems; Perhaps be: the system in the UMTS lattice network territory; Perhaps be: the system in the UMTS network packet territory; Perhaps be: the system in the wireless evolution network.

13. a subscriber equipment is characterized in that, this subscriber equipment comprises: first shares information monotonic transformation module and request sending module, wherein,

First shares information monotonic transformation module, is used for the shared information according to place subscriber equipment and core network element, obtains the monotonic transformation cell of said shared information, and the monotonic transformation cell of said shared information is offered request sending module;

Request sending module, when being used for initiation request, in request, utilize comprise first share the monotonic transformation cell of the said shared information that information monotonic transformation module provides user profile identifying user equipment identities, described request is sent.

14. subscriber equipment as claimed in claim 13; It is characterized in that; Said first shares information monotonic transformation module is: the first one-way hash chain conversion module; Be used for the shared information of subscriber equipment and core network element is carried out the one-way hash function chain transformaiton, obtain the monotonic transformation cell of this shared information, resulting monotonic transformation cell is offered request sending module;

Perhaps be: the first One-Way Encryption conversion module, be used for the shared information of core network element and subscriber equipment is carried out the One-Way Encryption conversion, obtain the monotonic transformation cell of this shared information, resulting monotonic transformation cell is offered request sending module.

15. a core network element is characterized in that, this core network element comprises: second shares information monotonic transformation module and authentication module, wherein,

Second shares information monotonic transformation module, is used for the shared information according to place core network element and subscriber equipment, obtains the monotonic transformation cell of said shared information, and the monotonic transformation cell of said shared information is offered authentication module;

Authentication module be used for the monotonic transformation cell of sharing the said shared information that information monotonic transformation module provides according to second, and the monotonic transformation cell of the said shared information in the request carries out legitimate verification to the identity of subscriber equipment.

16. core network element as claimed in claim 15; It is characterized in that; Said second shares information monotonic transformation module is: the second one-way hash chain conversion module; Be used for the shared information of subscriber equipment and core network element is carried out the one-way hash function chain transformaiton, obtain the monotonic transformation cell of this shared information, resulting monotonic transformation cell is offered authentication module;

Perhaps be: the second One-Way Encryption conversion module, be used for the shared information of core network element and subscriber equipment is carried out the One-Way Encryption conversion, obtain the monotonic transformation cell of this shared information, resulting monotonic transformation cell is offered authentication module.

17., it is characterized in that this core network element is SGSN like claim 15 or 16 described core network elements, or be MME.

Images