Wireless media access layer authentication and key agreement method for filling variable sequence length

Abstract

The invention provides a wireless media access layer authentication and key agreement method for filling variable sequence length, and relates to a wireless broadband metropolitan area network technology. The invention provides a scheme for filling the variable sequence length to control information, and the integrity check and the flooding attack resistance of the information can be realized by the scheme. Meanwhile, a control information encryption key of encryption control information, and a service data encryption key and an encryption mode of service data can be derived by an encryption key deriving algorithm. The update of the encryption key is realized in the process of periodically registering. The reliability and the safety of authorization and communication can be more preferably guaranteed, so that the safety of a system can be improved. The authentication authorization safety of a base station and a client side can be more comprehensively considered by the method.

Description

technical field [0001] The present invention relates to a kind of wireless broadband metropolitan area network technology, especially relate to a kind of security technology that completes the medium access layer of broadband wireless metropolitan area network namely MAC layer, including identity two-way authentication (Authentification), information integrity protection (informationIntegrity protection), key distribution (Key Allocation) and information encryption and decryption (Data Encryption, Decryption) technology. Background technique [0002] The typical wireless broadband metropolitan area network is the IEEE802.16 series standard. When a user accesses a base station, he must first authenticate with the base station to obtain an authentication key; Session encryption key for secure communication. The process of authentication is actually to realize the authentication of the base station to the user station through the digital certificate of the user station, and th...

AI Technical Summary

Problems solved by technology

In practical application, it can be found that due to the influence of the public channel carrying capacity and the length of the authentication key information, it is usually necessary to transmit the authentication information in segments, and occupying too many wireless resources will also aggravate the collision situation in the network

If a collision occurs and the session encryption key is lost, the key will be out of sync and the communication will not be able to proceed normally

At the same time, since the key update time is managed by the base station, if the user station cannot synchronize with the base station, the key will become invalid and the communication will be interrupted.

What's more serious is that once the key is lost, the base station and the user station will not be able to resume communication by self-starting

It is worth noting that the same authentication method, control signaling or data information is encrypted by the session encryption key and transmitted in the same format. If the information is captured by a pseudo-terminal, although it cannot decipher the content of the information, it uses Repeated sending attacks can also lead to network paralysis

Images