Identity authentication method and system for 5G communication network

Abstract

The invention relates to an identity authentication method and system for a 5G communication network. A security anchor function sends a first random number and a service identifier to the user equipment, the user equipment and the authentication credential storage and processing function module respectively select a second random number and a third random number, the freshness of the message is ensured by replacing a serial number (SQN) with the random numbers, and for synchronization failure, different failure messages do not need to be sent. Therefore, the possibility of tracking is avoided; when the user equipment encrypts the permanent identifier of the user, the shared key is directly used for encryption, so that some problems of computation overhead and public key infrastructure (PKI) are directly avoided; when the authentication credential storage and processing function module authenticates the user equipment, if the identity authentication information comes from an attacker,resource consumption can be avoided; and entities participating in authentication are mutually authenticated, so that counterfeit attacks are avoided, and the communication security is ensured. According to the invention, a user can carry out identity authentication safely and efficiently.

Description

technical field [0001] The present invention relates to the field of information security, in particular to an identity authentication method and system for 5G communication networks. Background technique [0002] The fifth-generation mobile communication technology (5th-Generation, 5G) is committed to building a user-centered all-round information ecosystem and realizing the intelligent interconnection of people and everything. While enjoying the convenience brought by 5G, it should be realized that the access device of the system is no longer a single communication device, but also includes IoT devices for specific applications. These devices will collect users' private information, such as health information and life footprints. Wait. Therefore, in order to ensure that users' private information is not leaked, the 5G communication system will provide more reliable security protection. On the basis of inheriting the security of the Long Term Evolution (LTE) system, the 5...

AI Technical Summary

Problems solved by technology

Although security has been enhanced compared to previous generations, some unrealistic system assumptions that are critical to security have been found, and edge cases of the protocol make 5G communication systems vulnerable to multiple attacks, Such as: using different failure reasons (MAC or synchronization), resulting in the tracking of the target user; in order to provide privacy protection and prevent leakage of user identity, 5G-AKA implements an elliptic curve integrated encryption scheme (ECIES), however, this will lead to Computational overhead and public key infrastructure (PKI) issues; denial of service (DOS) attacks lead to resource consumption

Images