Access authentication method of IMS network

Abstract

The invention discloses an access authentication method of an IMS network. The method comprises: encrypting a user identity, performing dual encryption on a user ID through an exchange encryption function according to a random key generated by UE and a random key generated by a P-CSCF in a network, and decrypting the P-CSCF after entering the network, thereby avoiding leakage of a real identity ofthe user; performing identity authentication between the UE and the network through identity authentication tokens generated by the UE and the network respectively, so that parameters carried in information during identity authentication are simplified; and establishing IPSec association between the UE and the P-CSCF, and adopting a session key in a bidirectional identity authentication process to generate a negotiation key, so that the confidentiality and integrity of data transmitted between the UE and the P-CSCF are ensured.

Description

technical field [0001] The invention relates to the technical field of data communication, in particular to an access authentication method of an IMS network. Background technique [0002] The IP Multimedia Subsystem (IMS), defined by 3GPP and formed by the SIP protocol for session control and signaling, provides a better solution for network integration and service extension. The IMS system architecture is an open architecture system, and its core design method is "separation of business and control" and "separation of control and bearer". The method is beneficial to the development of new services, and can support multiple access modes so that different users can access the IMS network, so that users can enjoy various business services and improve user experience. [0003] As the core control platform of 3G network, the security of IP Multimedia Subsystem (IMS) is facing severe challenges. As the first step in the implementation of the entire IMS security scheme, the imp...

AI Technical Summary

Problems solved by technology

[0005] 1. The user provides its identity to the P-CSCF in the form of plain text. When the UE sends the first request information to the network, the security key has not been negotiated between the UE and the network, and the attacker can steal it by analyzing the data packet. These identities, resulting in information leakage

[0006] 2. In the existing IMS AKA mechanism, during the mutual authentication process between UE and HSS, there are many AKA parameters in the authentication message. Due to the limitation of network bandwidth, the transmission delay will be very obvious. Users accessing the network through registration It will take a long time and affect the user experience

[0007] 3. During the AKA-based access authentication process, the UE does not perform identity authentication on the access point P-CSCF of the IMS core network, and cannot ensure the confidentiality and integrity of the data transmitted between the UE and the P-CSCF

Images