Method for realizing safety warranty in evolution accessing network

Abstract

The present invention discloses a method of realizing security assurance in an evolutive access network, a UE and the evolutive access network separately maintain more than one arithmometers which are used for expressing data flow transmitted between the UE and the evolutive access network. The method comprises: when the evolutive access network satisfies the scheduled qualifications, an inspection of data flow is executed to the UE; the UE or the evolutive access network compares the arithmometer value from themselves with that from the opposite terminal; the evolutive access network performs the following disposal based on the comparing result of that whether there exists an conflicting arithmometer value; and the security of the evolutive access network is ensured with basis of the inspection results. Furthermore, information or commands, messages transmitted between the UE and the evolutive access network are totally protected by a shared secret-key therebetween, thus a periodic authentication is realized by this total protection.

Description

technical field [0001] The present invention relates to the evolution access network technology, in particular to a method for realizing security guarantee in the evolution access network. Background technique [0002] In order to maintain the competitiveness of the access system of the 3rd Generation Partnership Project (3GPP, 3rd Generation Partnership Project), research on long-term evolution (LTE, Long Term Evolution) and system architecture evolution (SAE, System Architecture Evolution) in network evolution is ongoing . The goal of network evolution is to simplify the network structure and reduce the access time delay. [0003] Figure 1 shows a schematic diagram of the LTE / SAE access network architecture, as shown in Figure 1, aGW (E-UTRAN Access Gateway) is an access network of the Evolved Global Terrestrial Radio Access Network (E-UTRAN, Enhanced Universal Terrestrial Radio Access Network) The ingress gateway is located in a safe physical location, and the eNodeB or...

AI Technical Summary

Problems solved by technology

[0003] Figure 1 shows a schematic diagram of the LTE / SAE access network architecture, as shown in Figure 1, aGW (E-UTRAN Access Gateway) is an access network of the Evolved Global Terrestrial Radio Access Network (E-UTRAN, Enhanced Universal Terrestrial Radio Access Network) The ingress gateway is located in a safe physical location, and the eNodeB or evolved Node B is an evolved base station in E-UTRAN, which is located in an unsafe physical location and is very likely to be attacked

[0004] Since the channel of the air interface is an extremely unstable channel, the possibility of data packet loss on this channel is very high; in addition, due to the wireless characteristics of the air interface, an attacker can easily initiate packet insertion on the air interface , packet deletion and other attacks; in addition, the eNodeB is in an unsafe physical location and is extremely vulnerable to malicious attacks. Therefore, it is urgent to provide a security guarantee solution in E-UTRAN to ensure that the user terminal (UE, User Equipment) ) is consistent with the amount of uplink and downlink data between E-UTRAN

Images