Safety ability negotiation method in super mobile broadband system

Abstract

The invention discloses a safety ability negotiation method in the ultra mobile broadband system which comprises that: 1) after a terminal AT receives an identity request message, the terminal AT triggers an authentication process and finishes the safety ability negotiation between the AT and an SRNC, between the AT and eBS through an HAAA, a group of encryption algorithm and integrity protection algorithm which are commonly supported are selected, and a selected algorithm identifier is assigned to the SRNC, the eBS and the AT; 2) according to the confirmed encryption algorithm and integrity protection algorithm as well as an encryption key and an integrity key which are produced during the key exchange , the AT and the eBS make integrity protection to a subsequent sent signaling message and encrypts a subsequent sent sensitive message, and a receiving party makes integrity check and encryption to the received messages. The invention can achieve the encryption algorithm and the integrity protection algorithm used between the terminal and the access network, and furthest maintains the integrity of the main content of the prior specification.

Description

technical field [0001] The invention relates to the technical field of fusion of mobile communication technology and information security technology, in particular to a method for negotiating security capabilities in a UMB (Ultra Mobile Broadband, Ultra Mobile Broadband) system. Background technique [0002] As one of the new-generation mobile communication systems currently under development, UMB protects the air interface between the terminal AT (Access Terminal) and the evolved base station eBS (Evolved Base Station), and between the AT and the session reference controller SRNC (Session Reference Controller). As shown in Figure 1, it is a schematic diagram of the main parts of the UMB system, including AT 100, eBS 101 and 102, SRNC 103, home authentication center HAAA (Home Authentication Authorization Accounting) 104, etc., wherein the connections between entities except AT 100 are A wired connection is indicated by a thicker solid line. It is assumed that a wireless c...

AI Technical Summary

Problems solved by technology

[0004] However, currently in the UMB system specification, only an AES encryption protocol based on the AES (Advanced Encryption Standard, Advanced Encryption Standard) block encryption algorithm and an AES CMAC (Cipher-based Message Authentication Code, based on ciphertext) message are defined for this purpose. authentication code) function integrity protection protocol, but the lack of a security capability negotiation process makes the encryption algorithm and integrity protection algorithm currently used by AT and eBS the only choice for the system, so it is difficult to meet the password management regulations of different regions or countries needs, lack of flexibility in selection and ability to configure multiple algorithms

Images