CN111083700A - 5G terminal equipment access method, equipment and storage medium based on block chain - Google Patents
5G terminal equipment access method, equipment and storage medium based on block chain Download PDFInfo
- Publication number
- CN111083700A CN111083700A CN201911401908.2A CN201911401908A CN111083700A CN 111083700 A CN111083700 A CN 111083700A CN 201911401908 A CN201911401908 A CN 201911401908A CN 111083700 A CN111083700 A CN 111083700A
- Authority
- CN
- China
- Prior art keywords
- information
- registration server
- temporary identity
- identity registration
- key
- Prior art date
- Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
- Pending
Links
Images
Classifications
-
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04W—WIRELESS COMMUNICATION NETWORKS
- H04W12/00—Security arrangements; Authentication; Protecting privacy or anonymity
- H04W12/12—Detection or prevention of fraud
- H04W12/121—Wireless intrusion detection systems [WIDS]; Wireless intrusion prevention systems [WIPS]
- H04W12/122—Counter-measures against attacks; Protection against rogue devices
-
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04W—WIRELESS COMMUNICATION NETWORKS
- H04W12/00—Security arrangements; Authentication; Protecting privacy or anonymity
- H04W12/04—Key management, e.g. using generic bootstrapping architecture [GBA]
- H04W12/041—Key generation or derivation
-
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04W—WIRELESS COMMUNICATION NETWORKS
- H04W12/00—Security arrangements; Authentication; Protecting privacy or anonymity
- H04W12/04—Key management, e.g. using generic bootstrapping architecture [GBA]
- H04W12/043—Key management, e.g. using generic bootstrapping architecture [GBA] using a trusted network node as an anchor
- H04W12/0433—Key management protocols
Abstract
The embodiment of the invention provides a 5G terminal equipment access method, equipment and a storage medium based on a block chain. In the embodiment of the invention, mutual authentication can be carried out through two channels by the 5G terminal equipment and the temporary identity registration server, the 5G terminal equipment sends first information to the temporary identity registration server through a block chain network, and the temporary identity registration server sends second information to the 5G terminal equipment through the 5G channel, so that a key obtained by the 5G terminal equipment according to a first random number generated by the 5G terminal equipment and the second information is the same as a key obtained by the temporary identity registration server according to a second random number generated by the temporary identity registration server and the first information. Since an attacker can only hijack the data in one channel at the same time and cannot hijack the data in the two channels, the secret key can be prevented from being leaked, 5G terminal equipment without an SIM card can be prevented from being attacked by a pseudo base station, and the safety of the 5G terminal equipment is improved.
Description
Technical Field
The embodiment of the invention relates to the technical field of communication, in particular to a 5G terminal equipment access method and equipment based on a block chain and a storage medium.
Background
In the current 5G network, if a terminal device needs to access the 5G network, a user of the terminal device needs to go to a business office to handle a Subscriber Identity Module (SIM). The terminal equipment can perform bidirectional authentication with the 5G network equipment through the SIM card.
Therefore, if the 5G terminal device does not have the SIM card, the 5G terminal device cannot perform bidirectional authentication with the 5G network device. Therefore, the 5G terminal equipment without the SIM card is easily attacked by the pseudo base station, and certain potential safety hazard is brought to the 5G terminal equipment.
Disclosure of Invention
The embodiment of the invention provides a 5G terminal equipment access method, equipment and a storage medium based on a block chain, so as to prevent 5G terminal equipment without an SIM card from being attacked by a pseudo base station and improve the safety of the 5G terminal equipment.
In a first aspect, an embodiment of the present invention provides a 5G terminal device access method based on a block chain, including:
the method comprises the steps that 5G terminal equipment sends a first broadcast message of a private key signature through a block chain network, wherein the first broadcast message comprises a public key of the 5G terminal equipment, and the block chain network comprises a temporary identity registration server;
the 5G terminal equipment and the temporary identity registration server negotiate a public parameter and an original root of the public parameter through the blockchain network or a 5G channel;
the 5G terminal equipment generates a first random number;
the 5G terminal equipment sends first information to the temporary identity registration server through the blockchain network, wherein the first information is a value obtained by taking a modulus of a first result with the original root as a base number and the first random number as an index to the public parameter;
the 5G terminal equipment receives second information sent by the temporary identity registration server through the 5G channel, wherein the second information is a value obtained by taking the modulus of a second result with the original root as a base number and a second random number generated by the temporary identity registration server as an index to the public parameter;
the 5G terminal equipment calculates a first key according to the first random number and the second information, wherein the first key is a value obtained by taking the second information as a base number and taking a third result with the first random number as an exponent to perform modulo operation on the public parameter;
the first secret key is the same as a second secret key calculated by the temporary identity registration server, and the second secret key is a value obtained by taking the first information as a base number and taking a fourth result with the second random number as an exponent to modulo the public parameter.
In a second aspect, an embodiment of the present invention provides a 5G terminal device access method based on a block chain, including:
the temporary identity registration server receives a first broadcast message of a private key signature sent by a 5G terminal device through a blockchain network, wherein the first broadcast message comprises a public key of the 5G terminal device, and the blockchain network comprises the temporary identity registration server;
the temporary identity registration server and the 5G terminal equipment negotiate a public parameter and an original root of the public parameter through the block chain network or the 5G channel;
the temporary identity registration server generates a second random number;
the temporary identity registration server sends a second message to the 5G terminal device through the 5G channel, wherein the second message is a value obtained by taking a modulus of a second result with the original root as a base number and a second random number generated by the temporary identity registration server as an index to the public parameter;
the temporary identity registration server receives first information sent by the 5G terminal equipment through the block chain network, wherein the first information is a value obtained by taking a modulus of a first result with the original root as a base number and the first random number as an index to the public parameter;
the temporary identity registration server calculates a second key through the second random number and the first information, wherein the second key is a value obtained by taking the first information as a base number and taking a fourth result with the second random number as an exponent to perform modulo operation on the public parameter;
the second key is the same as a first key calculated by the 5G terminal device, and the first key is a value obtained by taking the original root as a base number and taking a first result with the first random number as an exponent to perform modulo on the public parameter.
In a third aspect, an embodiment of the present invention provides a 5G terminal device, including:
a memory;
a processor;
a communication interface; and
a computer program;
wherein the computer program is stored in the memory and configured to be executed by the processor to:
sending a first broadcast message signed by a private key through a blockchain network, wherein the first broadcast message comprises a public key of the 5G terminal equipment, and the blockchain network comprises a temporary identity registration server;
negotiating with the temporary identity registration server for a common parameter and an original root of the common parameter through the blockchain network or a 5G channel;
generating a first random number;
sending first information to the temporary identity registration server through the blockchain network, wherein the first information is a value obtained by taking the modulus of the public parameter by a first result taking the original root as a base number and the first random number as an index;
receiving second information sent by the temporary identity registration server through the 5G channel, wherein the second information is a value obtained by taking the modulus of a second result with the original root as a base number and a second random number generated by the temporary identity registration server as an index to the public parameter;
calculating a first key according to the first random number and the second information, wherein the first key is a value obtained by taking the second information as a base number and taking a third result with the first random number as an exponent to perform modulo operation on the public parameter;
the first secret key is the same as a second secret key calculated by the temporary identity registration server, and the second secret key is a value obtained by taking the first information as a base number and taking a fourth result with the second random number as an exponent to modulo the public parameter.
In a fourth aspect, an embodiment of the present invention provides a temporary identity registration server, including:
a memory;
a processor;
a communication interface; and
a computer program;
wherein the computer program is stored in the memory and configured to be executed by the processor to:
receiving a first broadcast message of a private key signature sent by 5G terminal equipment through a blockchain network through the communication interface, wherein the first broadcast message comprises a public key of the 5G terminal equipment, and the blockchain network comprises a temporary identity registration server;
negotiating a common parameter and an original root of the common parameter with the 5G terminal device through the blockchain network or the 5G channel;
generating a second random number;
sending a second message to the 5G terminal device through the 5G channel, wherein the second message is a value obtained by taking a modulus of the public parameter by a second result which takes the original root as a base number and takes a second random number generated by the temporary identity registration server as an index;
receiving first information sent by the 5G terminal equipment through the block chain network, wherein the first information is a value obtained by taking the modulus of the public parameter by using a first result with the original root as a base number and the first random number as an exponent;
calculating a second key through the second random number and the first information, wherein the second key is a value obtained by taking the first information as a base number and taking a fourth result with the second random number as an exponent to perform modulo operation on the public parameter;
the second key is the same as a first key calculated by the 5G terminal device, and the first key is a value obtained by taking the original root as a base number and taking a first result with the first random number as an exponent to perform modulo on the public parameter.
In a fifth aspect, the present invention provides a computer-readable storage medium, on which a computer program is stored, the computer program being executed by a processor to implement the method of the first aspect or the second aspect.
The 5G terminal equipment access method, equipment and storage medium based on the block chain provided by the embodiment of the invention, the 5G terminal equipment and the temporary identity registration server are communicated by adopting two channels, so that the 5G terminal equipment and the temporary identity registration server can carry out mutual authentication by the two channels, the 5G terminal equipment sends first information to the temporary identity registration server by a blockchain network, the temporary identity registration server sends second information to the 5G terminal equipment by the 5G channel, the key obtained by the 5G terminal device according to the first random number generated by the terminal device and the second information is the same as the key obtained by the temporary identity registration server according to the second random number generated by the terminal device and the first information, so that the 5G terminal device and the temporary identity registration server can use the same key for secure communication. Since an attacker can only hijack the data in one channel at the same time and cannot hijack the data in the two channels, the secret key can be prevented from being leaked, 5G terminal equipment without an SIM card can be prevented from being attacked by a pseudo base station, and the safety of the 5G terminal equipment is improved.
Drawings
Fig. 1 is a schematic diagram of a communication system according to an embodiment of the present invention;
fig. 2 is a flowchart of a 5G terminal device access method based on a block chain according to an embodiment of the present invention;
fig. 3 is a flowchart of a 5G terminal device access method based on a block chain according to another embodiment of the present invention;
fig. 4 is a schematic structural diagram of a 5G terminal device according to an embodiment of the present invention;
fig. 5 is a schematic structural diagram of a temporary identity registration server according to an embodiment of the present invention.
With the foregoing drawings in mind, certain embodiments of the disclosure have been shown and described in more detail below. These drawings and written description are not intended to limit the scope of the disclosed concepts in any way, but rather to illustrate the concepts of the disclosure to those skilled in the art by reference to specific embodiments.
Detailed Description
Reference will now be made in detail to the exemplary embodiments, examples of which are illustrated in the accompanying drawings. When the following description refers to the accompanying drawings, like numbers in different drawings represent the same or similar elements unless otherwise indicated. The implementations described in the exemplary embodiments below are not intended to represent all implementations consistent with the present disclosure. Rather, they are merely examples of apparatus and methods consistent with certain aspects of the present disclosure, as detailed in the appended claims.
The 5G terminal device access method based on the block chain provided by the embodiment of the invention can be applied to the communication system shown in figure 1. As shown in fig. 1, the communication system includes: the mobile terminal includes 5G terminal equipment 11, a 5G new wireless base station 12, a User Plane network Function (UPF) 13, a network element 14, a Unified User Data Management (UDM) Function 15, and a temporary identity registration server 16, where the network element 14 may include an Access and Mobility Management Function (AMF) and a Session Management Function (SMF). In some embodiments, the AMF and SMF may be deployed in different devices, respectively. 5G New Radio base station 5G New Radio Access Technology (NR) base station (neighbor Node B, gNB).
It is to be understood that this is by way of illustration only. The temporary identity registration server can be one or a plurality of cloud servers, the cloud servers are a server cluster, a plurality of servers are similar to a universal computer framework, and the cloud servers comprise a processor, a hard disk, a memory, a system bus and the like. The 5G terminal device 11 is, for example, a smart phone, a tablet computer, or the like.
The 5G terminal equipment access method based on the block chain provided by the embodiment of the invention aims to solve the technical problems in the prior art.
The following describes the technical solutions of the present invention and how to solve the above technical problems with specific embodiments. The following several specific embodiments may be combined with each other, and details of the same or similar concepts or processes may not be repeated in some embodiments. Embodiments of the present invention will be described below with reference to the accompanying drawings.
Fig. 2 is a flowchart of a 5G terminal device access method based on a block chain according to an embodiment of the present invention. The embodiment of the invention provides a 5G terminal equipment access method based on a block chain aiming at the technical problems in the prior art, and the method comprises the following specific steps:
step 201, the 5G terminal device sends a first broadcast message signed by a private key through a blockchain network, where the first broadcast message includes a public key of the 5G terminal device, and the blockchain network includes a temporary identity registration server.
As shown in fig. 1, the 5G terminal device 11 may access the 5G network through two channels, for example, the temporary identity registration server 16 is a network element in the 5G network, so that the 5G terminal device 11 may communicate with the temporary identity registration server 16 through two channels, where one channel is a block chain network and the other channel is a 5G channel, and the 5G channel includes a 5G new radio base station 12 and a User Plane Function (UPF) 13. Specifically, the 5G terminal device 11 may access the blockchain network through the WIFI network or a network of another operator.
In addition, the 5G terminal device 11 may also install an Application (APP) of the target operator, and the APP may be used for registration of the 5G terminal device 11. The APP may have address information for the temporary identity registration server 16 built in. Alternatively, the address information of the temporary identity registration server 16 may be input by the user. The 5G terminal device 11 and the temporary identity registration server 16 are both nodes in the blockchain network.
The APP in the 5G terminal device 11 may send a first broadcast message signed by a private key over the blockchain network, the first broadcast message being used to access the temporary identity registration server 16, the first broadcast message including the public key of the 5G terminal device 11. After the 5G terminal device 11 successfully accesses the temporary identity registration server 16 through the blockchain network, the 5G terminal device 11 may establish a first channel between the 5G terminal device 11 and the temporary identity registration server 16, where the first channel may transmit a message between the 5G terminal device 11 and the temporary identity registration server 16, and the message may include identification information of the 5G terminal device 11 corresponding to the first channel. Specifically, the first channel is a block chain network.
After receiving the first broadcast message signed by the private key from the blockchain network, the temporary identity registration server 16 first verifies the private key signature, and after the private key signature passes the verification, the temporary identity registration server 16 may record the public key of the 5G terminal device 11 in the first broadcast message, and use the public key of the 5G terminal device 11 as the identification information of the 5G terminal device 11 in the blockchain network.
The 5G terminal device may initiate the baseband module to search for wireless signals, e.g. 5G signals, of the target operator's 5G new wireless base station. As shown in fig. 1, the 5G terminal apparatus 11 can establish a communication connection with the 5G new radio base station 12 in accordance with the 5G signal of the 5G new radio base station 12.
Further, the 5G terminal device 11 transmits authentication information to the 5G new wireless base station 12, and the 5G new wireless base station 12 transmits the authentication information to the AMF. If the AMF determines that the 5G terminal device 11 does not have the SIM card according to the authentication information, the AMF notifies a User Plane network Function (UPF) 13, and forwards a message subsequently sent by the 5G terminal device 11 to the temporary identity registration server 16. Further, the 5G terminal device 11 establishes a second channel, i.e. a 5G channel, which is in communication with the temporary identity registration server 16, where the second channel may be a channel formed by the 5G new radio base station 12 and the User Plane Function (UPF) 13, for example, the 5G terminal device 11 may access the temporary identity registration server 16 through the 5G new radio base station 12 and the User Plane Function (UPF) 13, and when the 5G terminal device 11 accesses the temporary identity registration server 16 through the second channel, the corresponding access information may carry the identification information of the 5G terminal device 11.
Optionally, the identification information of the 5G terminal device 11 sent by the 5G terminal device 11 to the temporary identity registration server 16 through the first channel is the same as the identification information of the 5G terminal device 11 sent by the 5G terminal device 11 to the temporary identity registration server 16 through the second channel.
Further, the 5G terminal device 11 and the temporary identity registration server 16 negotiate the public parameter p that can be disclosed and the original root a of the public parameter through the first channel or the second channel.
And 203, the 5G terminal equipment generates a first random number.
For example, the 5G terminal device 11 generates the first random number x.
Further, the 5G terminal device 11 generates first information, denoted as X, from the first random number X, where X is axMODp, wherein X is a first result a with the original root a as base number and the first random number X as exponentxThe value modulo the common parameter p. Further, the 5G terminal device 11 sends the first information X to the temporary identity registration server 16 through the blockchain network.
In a possible manner, the sending, by the 5G terminal device, first information to the temporary identity registration server through the blockchain network includes: and the 5G terminal equipment sends a second broadcast message in the block chain network, wherein the second broadcast message comprises the public key of the 5G terminal equipment, the first information and the identification information of the temporary identity registration server.
For example, the 5G terminal device 11 sends a second broadcast message in the blockchain network, the second broadcast message including the public key of the 5G terminal device 11, the first information X, and the identification information of the temporary identity registration server 16, so that the temporary identity registration server 16 can receive the first information X. In addition, the second broadcast message may be further signed by the 5G terminal device 11 with a private key and then broadcast to the blockchain network. The public key of the 5G terminal device 11 in the second broadcast message may serve as the identification information of the 5G terminal device 11 in the blockchain network.
In another possible mode, the sending, by the 5G terminal device, first information to the temporary identity registration server through the blockchain network includes: the 5G terminal equipment encrypts the first information by adopting the public key of the temporary identity registration server to obtain encrypted information; and the 5G terminal equipment sends a second broadcast message in the blockchain network, wherein the second broadcast message comprises the public key of the 5G terminal equipment, the encryption information and the identification information of the temporary identity registration server.
For example, the 5G terminal device 11 encrypts the first information X according to a preset encryption algorithm by using the public key of the temporary identity registration server 16 to obtain encrypted information. Further, the 5G terminal device 11 sends a second broadcast message in the blockchain network, the second broadcast message including the public key of the 5G terminal device 11, the encryption information, and the identification information of the temporary identity registration server 16. In addition, the second broadcast message may be further signed by the 5G terminal device 11 with a private key and then broadcast to the blockchain network. When the temporary identity registration server 16 receives the second broadcast message signed by the private key, the temporary identity registration server 16 verifies the private key signature, and when the private key signature passes the verification, the temporary identity registration server 16 may decrypt the encrypted information by using the private key of the temporary identity registration server 16 to obtain the first information X. Further, the temporary identity registration server 16 may also record the public key of the 5G terminal device 11 and the corresponding first information X.
In addition, the temporary identity registration server 16 may generate a second random number y and generate a second random number y according to the second random number yTwo pieces of information, the second information is marked as Y, Y ═ ayMODp, wherein Y is a second result a with the original root a as base number and the second random number Y as exponentyThe value modulo the common parameter p. Further, the temporary identity registration server 16 sends the second information Y to the 5G terminal device 11 through a second channel, i.e. a 5G channel. So that the 5G terminal device 11 can receive the second information Y.
And step 206, the 5G terminal device calculates a first key according to the first random number and the second information, where the first key is a value obtained by taking the second information as a base number and taking a third result with the first random number as an exponent to modulo the common parameter.
The first secret key is the same as a second secret key calculated by the temporary identity registration server, and the second secret key is a value obtained by taking the first information as a base number and taking a fourth result with the second random number as an exponent to modulo the public parameter.
The 5G terminal device 11 receives the second information Y, and calculates a first key K1, K1 being Y, based on the first random number x and the second information YxMODp, K1, denotes a third result Y based on the second information Y and exponential to the first random number xxThe value modulo the common parameter p.
Similarly, the temporary identity registration server 16 may calculate a second key K2, K2 ═ X, according to the first information X and the second random number yyMODp, K2, denotes a fourth result X based on the first information X and exponential to the second random number yyThe value modulo the common parameter p. Wherein the first key K1 is the same as the second key K2.
At this time, the 5G terminal device 11 and the temporary identity registration server 16 respectively obtain the same key, i.e. the first key or the second key. The listener can obtain the first information X and the second information Y, and can not obtain the first random number X and the second random number Y, so that the listener can not obtain the common parameter p. Since the 5G terminal device 11 and the temporary identity registration server 16 employ two channels, the possibility of implementing man-in-the-middle attacks on both channels is very small.
The embodiment of the invention adopts two channels to communicate with the temporary identity registration server through the 5G terminal equipment, so that the 5G terminal equipment and the temporary identity registration server can carry out mutual authentication through the two channels, the 5G terminal equipment sends first information to the temporary identity registration server through a block chain network, the temporary identity registration server sends second information to the 5G terminal equipment through the 5G channel, a key obtained by the 5G terminal equipment according to a first random number generated by the 5G terminal equipment and the second information is the same as a key obtained by the temporary identity registration server according to a second random number generated by the temporary identity registration server and the first information, and the 5G terminal equipment and the temporary identity registration server can carry out safe communication by adopting the same key. Since an attacker can only hijack the data in one channel at the same time and cannot hijack the data in the two channels, the secret key can be prevented from being leaked, 5G terminal equipment without an SIM card can be prevented from being attacked by a pseudo base station, and the safety of the 5G terminal equipment is improved.
Fig. 3 is a flowchart of a 5G terminal device access method based on a block chain according to another embodiment of the present invention. On the basis of the foregoing embodiment, the 5G terminal device access method based on a block chain provided in this embodiment specifically includes the following steps:
step 301, the temporary identity registration server receives a first broadcast message of a private key signature sent by a 5G terminal device through a blockchain network, where the first broadcast message includes a public key of the 5G terminal device, and the blockchain network includes the temporary identity registration server.
As shown in fig. 1, the 5G terminal device 11 may access the 5G network through two channels, for example, the temporary identity registration server 16 is a network element in the 5G network, so that the 5G terminal device 11 may communicate with the temporary identity registration server 16 through two channels, where one channel is a block chain network and the other channel is a 5G channel, and the 5G channel includes a 5G new radio base station 12 and a User Plane Function (UPF) 13. Specifically, the 5G terminal device 11 may access the blockchain network through the WIFI network or a network of another operator.
In addition, the 5G terminal device 11 may also install an Application (APP) of the target operator, and the APP may be used for registration of the 5G terminal device 11. The APP may have address information for the temporary identity registration server 16 built in. Alternatively, the address information of the temporary identity registration server 16 may be input by the user. The 5G terminal device 11 and the temporary identity registration server 16 are both nodes in the blockchain network.
The APP in the 5G terminal device 11 may send a first broadcast message signed by a private key over the blockchain network, the first broadcast message being used to access the temporary identity registration server 16, the first broadcast message including the public key of the 5G terminal device 11. After the 5G terminal device 11 successfully accesses the temporary identity registration server 16 through the blockchain network, the 5G terminal device 11 may establish a first channel between the 5G terminal device 11 and the temporary identity registration server 16, where the first channel may transmit a message between the 5G terminal device 11 and the temporary identity registration server 16, and the message may include identification information of the 5G terminal device 11 corresponding to the first channel. Specifically, the first channel is a block chain network.
After receiving the first broadcast message signed by the private key from the blockchain network, the temporary identity registration server 16 first verifies the private key signature, and after the private key signature passes the verification, the temporary identity registration server 16 may record the public key of the 5G terminal device 11 in the first broadcast message, and use the public key of the 5G terminal device 11 as the identification information of the 5G terminal device 11 in the blockchain network.
The 5G terminal device may initiate the baseband module to search for wireless signals, e.g. 5G signals, of the target operator's 5G new wireless base station. As shown in fig. 1, the 5G terminal apparatus 11 can establish a communication connection with the 5G new radio base station 12 in accordance with the 5G signal of the 5G new radio base station 12.
Further, the 5G terminal device 11 transmits authentication information to the 5G new wireless base station 12, and the 5G new wireless base station 12 transmits the authentication information to the AMF. If the AMF determines that the 5G terminal device 11 does not have the SIM card according to the authentication information, the AMF notifies a User Plane network Function (UPF) 13, and forwards a message subsequently sent by the 5G terminal device 11 to the temporary identity registration server 16. Further, the 5G terminal device 11 establishes a second channel, i.e. a 5G channel, which is in communication with the temporary identity registration server 16, where the second channel may be a channel formed by the 5G new radio base station 12 and the User Plane Function (UPF) 13, for example, the 5G terminal device 11 may access the temporary identity registration server 16 through the 5G new radio base station 12 and the User Plane Function (UPF) 13, and when the 5G terminal device 11 accesses the temporary identity registration server 16 through the second channel, the corresponding access information may carry the identification information of the 5G terminal device 11.
Optionally, the identification information of the 5G terminal device 11 sent by the 5G terminal device 11 to the temporary identity registration server 16 through the first channel is the same as the identification information of the 5G terminal device 11 sent by the 5G terminal device 11 to the temporary identity registration server 16 through the second channel.
Further, the 5G terminal device 11 and the temporary identity registration server 16 negotiate the public parameter p that can be disclosed and the original root a of the public parameter through the first channel or the second channel.
For example, the temporary identity registration server 16 may generate a second random number y.
The temporary identity registration server 16 may generate a second message according to the second random number Y, where the second message is denoted as Y, and Y is ayMODp, wherein Y is expressed by using an original root a as a base number and a second random number Y as a fingerSecond result of the number ayThe value modulo the common parameter p. Further, the temporary identity registration server 16 sends the second information Y to the 5G terminal device 11 through a second channel, i.e. a 5G channel. So that the 5G terminal device 11 can receive the second information Y.
For example, the 5G terminal device 11 generates the first random number x. The 5G terminal device 11 generates first information, denoted as X, from the first random number X, where X is axMODp, wherein X is a first result a with the original root a as base number and the first random number X as exponentxThe value modulo the common parameter p. Further, the 5G terminal device 11 sends the first information X to the temporary identity registration server 16 through the blockchain network.
Optionally, the receiving, by the temporary identity registration server, the first information sent by the 5G terminal device through the blockchain network includes: and the temporary identity registration server receives a second broadcast message sent by the 5G terminal equipment through the blockchain network, wherein the second broadcast message comprises a public key of the 5G terminal equipment, the first information and the identification information of the temporary identity registration server.
For example, the 5G terminal device 11 sends a second broadcast message in the blockchain network, the second broadcast message including the public key of the 5G terminal device 11, the first information X, and the identification information of the temporary identity registration server 16, so that the temporary identity registration server 16 can receive the first information X. In addition, the second broadcast message may be further signed by the 5G terminal device 11 with a private key and then broadcast to the blockchain network. The public key of the 5G terminal device 11 in the second broadcast message may serve as the identification information of the 5G terminal device 11 in the blockchain network.
In another possible manner, the 5G terminal device 11 encrypts the first information X by using the public key of the temporary identity registration server 16 according to a preset encryption algorithm to obtain encrypted information. Further, the 5G terminal device 11 sends a second broadcast message in the blockchain network, the second broadcast message including the public key of the 5G terminal device 11, the encryption information, and the identification information of the temporary identity registration server 16. In addition, the second broadcast message may be further signed by the 5G terminal device 11 with a private key and then broadcast to the blockchain network. When the temporary identity registration server 16 receives the second broadcast message signed by the private key, the temporary identity registration server 16 verifies the private key signature, and when the private key signature passes the verification, the temporary identity registration server 16 may decrypt the encrypted information by using the private key of the temporary identity registration server 16 to obtain the first information X. Further, the temporary identity registration server 16 may also record the public key of the 5G terminal device 11 and the corresponding first information X.
The second key is the same as a first key calculated by the 5G terminal device, and the first key is a value obtained by taking the original root as a base number and taking a first result with the first random number as an exponent to perform modulo on the public parameter.
The 5G terminal device 11 receives the second information Y, and calculates a first key K1, K1 being Y, based on the first random number x and the second information YxMODp, K1, denotes a third result Y based on the second information Y and exponential to the first random number xxThe value modulo the common parameter p.
Similarly, the temporary identity registration server 16 may calculate a second key K2, K2 ═ X, according to the first information X and the second random number yyMODp, K2, denotes a fourth result X based on the first information X and exponential to the second random number yyThe value modulo the common parameter p. Wherein, the first key K1 and the second key K1The key K2 is the same.
At this time, the 5G terminal device 11 and the temporary identity registration server 16 respectively obtain the same key, i.e. the first key or the second key. The listener can obtain the first information X and the second information Y, and can not obtain the first random number X and the second random number Y, so that the listener can not obtain the common parameter p. Since the 5G terminal device 11 and the temporary identity registration server 16 employ two channels, the possibility of implementing man-in-the-middle attacks on both channels is very small.
The embodiment of the invention adopts two channels to communicate with the temporary identity registration server through the 5G terminal equipment, so that the 5G terminal equipment and the temporary identity registration server can carry out mutual authentication through the two channels, the 5G terminal equipment sends first information to the temporary identity registration server through a block chain network, the temporary identity registration server sends second information to the 5G terminal equipment through the 5G channel, a key obtained by the 5G terminal equipment according to a first random number generated by the 5G terminal equipment and the second information is the same as a key obtained by the temporary identity registration server according to a second random number generated by the temporary identity registration server and the first information, and the 5G terminal equipment and the temporary identity registration server can carry out safe communication by adopting the same key. Since an attacker can only hijack the data in one channel at the same time and cannot hijack the data in the two channels, the secret key can be prevented from being leaked, 5G terminal equipment without an SIM card can be prevented from being attacked by a pseudo base station, and the safety of the 5G terminal equipment is improved.
Fig. 4 is a schematic structural diagram of a 5G terminal device according to an embodiment of the present invention. The 5G terminal device provided in the embodiment of the present invention may execute the processing procedure provided in the embodiment of the block chain-based 5G terminal device access method, and as shown in fig. 4, the 5G terminal device 40 includes: memory 41, processor 42, computer programs and communication interface 43; wherein the computer program is stored in the memory 41 and is configured to be executed by the processor 42 for: sending a first broadcast message signed by a private key through a blockchain network, wherein the first broadcast message comprises a public key of the 5G terminal equipment, and the blockchain network comprises a temporary identity registration server; negotiating with the temporary identity registration server for a common parameter and an original root of the common parameter through the blockchain network or a 5G channel; generating a first random number; sending first information to the temporary identity registration server through the blockchain network, wherein the first information is a value obtained by taking the modulus of the public parameter by a first result taking the original root as a base number and the first random number as an index; receiving second information sent by the temporary identity registration server through the 5G channel, wherein the second information is a value obtained by taking the modulus of a second result with the original root as a base number and a second random number generated by the temporary identity registration server as an index to the public parameter; calculating a first key according to the first random number and the second information, wherein the first key is a value obtained by taking the second information as a base number and taking a third result with the first random number as an exponent to perform modulo operation on the public parameter; the first secret key is the same as a second secret key calculated by the temporary identity registration server, and the second secret key is a value obtained by taking the first information as a base number and taking a fourth result with the second random number as an exponent to modulo the public parameter.
Optionally, when the processor sends the first information to the temporary identity registration server through the blockchain network, the processor is specifically configured to: and sending a second broadcast message in the blockchain network through the communication interface, wherein the second broadcast message comprises the public key of the 5G terminal equipment, the first information and the identification information of the temporary identity registration server.
Optionally, when the processor sends the first information to the temporary identity registration server through the blockchain network, the processor is specifically configured to: encrypting the first information by adopting the public key of the temporary identity registration server to obtain encrypted information; and sending a second broadcast message in the blockchain network through the communication interface, wherein the second broadcast message comprises the public key of the 5G terminal equipment, the encryption information and the identification information of the temporary identity registration server.
The 5G terminal device in the embodiment shown in fig. 4 may be configured to execute the technical solution of the method embodiment, and the implementation principle and the technical effect are similar, which are not described herein again.
Fig. 5 is a schematic structural diagram of a temporary identity registration server according to an embodiment of the present invention. The temporary identity registration server provided in the embodiment of the present invention may execute the processing procedure provided in the embodiment of the block chain-based 5G terminal device access method, and as shown in fig. 5, the temporary identity registration server 50 includes: memory 51, processor 52, computer programs and communication interface 53; wherein the computer program is stored in the memory 51 and is configured to be executed by the processor 52 for: receiving a first broadcast message of a private key signature sent by 5G terminal equipment through a blockchain network through the communication interface, wherein the first broadcast message comprises a public key of the 5G terminal equipment, and the blockchain network comprises a temporary identity registration server; negotiating a common parameter and an original root of the common parameter with the 5G terminal device through the blockchain network or the 5G channel; generating a second random number; sending a second message to the 5G terminal device through the 5G channel, wherein the second message is a value obtained by taking a modulus of the public parameter by a second result which takes the original root as a base number and takes a second random number generated by the temporary identity registration server as an index; receiving first information sent by the 5G terminal equipment through the block chain network, wherein the first information is a value obtained by taking the modulus of the public parameter by using a first result with the original root as a base number and the first random number as an exponent; calculating a second key through the second random number and the first information, wherein the second key is a value obtained by taking the first information as a base number and taking a fourth result with the second random number as an exponent to perform modulo operation on the public parameter; the second key is the same as a first key calculated by the 5G terminal device, and the first key is a value obtained by taking the original root as a base number and taking a first result with the first random number as an exponent to perform modulo on the public parameter.
Optionally, when the processor receives the first information sent by the 5G terminal device through the blockchain network, the processor is specifically configured to: and receiving a second broadcast message sent by the 5G terminal equipment through the blockchain network, wherein the second broadcast message comprises a public key of the 5G terminal equipment, the first information and the identification information of the temporary identity registration server.
The temporary identity registration server in the embodiment shown in fig. 5 may be configured to execute the technical solution of the above method embodiment, and the implementation principle and the technical effect are similar, which are not described herein again.
In addition, the embodiment of the present invention further provides a computer-readable storage medium, on which a computer program is stored, where the computer program is executed by a processor to implement the 5G terminal device access method based on a block chain described in the foregoing embodiment.
In the embodiments provided in the present invention, it should be understood that the disclosed apparatus and method may be implemented in other ways. For example, the above-described apparatus embodiments are merely illustrative, and for example, the division of the units is only one logical division, and other divisions may be realized in practice, for example, a plurality of units or components may be combined or integrated into another system, or some features may be omitted, or not executed. In addition, the shown or discussed mutual coupling or direct coupling or communication connection may be an indirect coupling or communication connection through some interfaces, devices or units, and may be in an electrical, mechanical or other form.
The units described as separate parts may or may not be physically separate, and parts displayed as units may or may not be physical units, may be located in one place, or may be distributed on a plurality of network units. Some or all of the units can be selected according to actual needs to achieve the purpose of the solution of the embodiment.
In addition, functional units in the embodiments of the present invention may be integrated into one processing unit, or each unit may exist alone physically, or two or more units are integrated into one unit. The integrated unit can be realized in a form of hardware, or in a form of hardware plus a software functional unit.
The integrated unit implemented in the form of a software functional unit may be stored in a computer readable storage medium. The software functional unit is stored in a storage medium and includes several instructions to enable a computer device (which may be a personal computer, a server, or a network device) or a processor (processor) to execute some steps of the methods according to the embodiments of the present invention. And the aforementioned storage medium includes: various media capable of storing program codes, such as a usb disk, a removable hard disk, a Read-Only Memory (ROM), a Random Access Memory (RAM), a magnetic disk, or an optical disk.
It is obvious to those skilled in the art that, for convenience and simplicity of description, the foregoing division of the functional modules is merely used as an example, and in practical applications, the above function distribution may be performed by different functional modules according to needs, that is, the internal structure of the device is divided into different functional modules to perform all or part of the above described functions. For the specific working process of the device described above, reference may be made to the corresponding process in the foregoing method embodiment, which is not described herein again.
Finally, it should be noted that: the above embodiments are only used to illustrate the technical solution of the present invention, and not to limit the same; while the invention has been described in detail and with reference to the foregoing embodiments, it will be understood by those skilled in the art that: the technical solutions described in the foregoing embodiments may still be modified, or some or all of the technical features may be equivalently replaced; and the modifications or the substitutions do not make the essence of the corresponding technical solutions depart from the scope of the technical solutions of the embodiments of the present invention.
Claims (11)
1. A5G terminal equipment access method based on a block chain is characterized by comprising the following steps:
the method comprises the steps that 5G terminal equipment sends a first broadcast message of a private key signature through a block chain network, wherein the first broadcast message comprises a public key of the 5G terminal equipment, and the block chain network comprises a temporary identity registration server;
the 5G terminal equipment and the temporary identity registration server negotiate a public parameter and an original root of the public parameter through the blockchain network or a 5G channel;
the 5G terminal equipment generates a first random number;
the 5G terminal equipment sends first information to the temporary identity registration server through the blockchain network, wherein the first information is a value obtained by taking a modulus of a first result with the original root as a base number and the first random number as an index to the public parameter;
the 5G terminal equipment receives second information sent by the temporary identity registration server through the 5G channel, wherein the second information is a value obtained by taking the modulus of a second result with the original root as a base number and a second random number generated by the temporary identity registration server as an index to the public parameter;
the 5G terminal equipment calculates a first key according to the first random number and the second information, wherein the first key is a value obtained by taking the second information as a base number and taking a third result with the first random number as an exponent to perform modulo operation on the public parameter;
the first secret key is the same as a second secret key calculated by the temporary identity registration server, and the second secret key is a value obtained by taking the first information as a base number and taking a fourth result with the second random number as an exponent to modulo the public parameter.
2. The method according to claim 1, wherein the 5G terminal device sends the first information to the temporary identity registration server through the blockchain network, and the first information comprises:
and the 5G terminal equipment sends a second broadcast message in the block chain network, wherein the second broadcast message comprises the public key of the 5G terminal equipment, the first information and the identification information of the temporary identity registration server.
3. The method according to claim 1, wherein the 5G terminal device sends the first information to the temporary identity registration server through the blockchain network, and the first information comprises:
the 5G terminal equipment encrypts the first information by adopting the public key of the temporary identity registration server to obtain encrypted information;
and the 5G terminal equipment sends a second broadcast message in the blockchain network, wherein the second broadcast message comprises the public key of the 5G terminal equipment, the encryption information and the identification information of the temporary identity registration server.
4. A5G terminal equipment access method based on a block chain is characterized by comprising the following steps:
the temporary identity registration server receives a first broadcast message of a private key signature sent by a 5G terminal device through a blockchain network, wherein the first broadcast message comprises a public key of the 5G terminal device, and the blockchain network comprises the temporary identity registration server;
the temporary identity registration server and the 5G terminal equipment negotiate a public parameter and an original root of the public parameter through the block chain network or the 5G channel;
the temporary identity registration server generates a second random number;
the temporary identity registration server sends a second message to the 5G terminal device through the 5G channel, wherein the second message is a value obtained by taking a modulus of a second result with the original root as a base number and a second random number generated by the temporary identity registration server as an index to the public parameter;
the temporary identity registration server receives first information sent by the 5G terminal equipment through the block chain network, wherein the first information is a value obtained by taking a modulus of a first result with the original root as a base number and the first random number as an index to the public parameter;
the temporary identity registration server calculates a second key through the second random number and the first information, wherein the second key is a value obtained by taking the first information as a base number and taking a fourth result with the second random number as an exponent to perform modulo operation on the public parameter;
the second key is the same as a first key calculated by the 5G terminal device, and the first key is a value obtained by taking the original root as a base number and taking a first result with the first random number as an exponent to perform modulo on the public parameter.
5. The method of claim 4, wherein the receiving, by the temporary identity registration server, the first information sent by the 5G terminal device through the blockchain network comprises:
and the temporary identity registration server receives a second broadcast message sent by the 5G terminal equipment through the blockchain network, wherein the second broadcast message comprises a public key of the 5G terminal equipment, the first information and the identification information of the temporary identity registration server.
6. A5G terminal device, comprising:
a memory;
a processor;
a communication interface; and
a computer program;
wherein the computer program is stored in the memory and configured to be executed by the processor to:
sending a first broadcast message signed by a private key through a blockchain network, wherein the first broadcast message comprises a public key of the 5G terminal equipment, and the blockchain network comprises a temporary identity registration server;
negotiating with the temporary identity registration server for a common parameter and an original root of the common parameter through the blockchain network or a 5G channel;
generating a first random number;
sending first information to the temporary identity registration server through the blockchain network, wherein the first information is a value obtained by taking the modulus of the public parameter by a first result taking the original root as a base number and the first random number as an index;
receiving second information sent by the temporary identity registration server through the 5G channel, wherein the second information is a value obtained by taking the modulus of a second result with the original root as a base number and a second random number generated by the temporary identity registration server as an index to the public parameter;
calculating a first key according to the first random number and the second information, wherein the first key is a value obtained by taking the second information as a base number and taking a third result with the first random number as an exponent to perform modulo operation on the public parameter;
the first secret key is the same as a second secret key calculated by the temporary identity registration server, and the second secret key is a value obtained by taking the first information as a base number and taking a fourth result with the second random number as an exponent to modulo the public parameter.
7. The 5G terminal device according to claim 6, wherein the processor, when sending the first information to the temporary identity registration server via the blockchain network, is specifically configured to:
and sending a second broadcast message in the blockchain network through the communication interface, wherein the second broadcast message comprises the public key of the 5G terminal equipment, the first information and the identification information of the temporary identity registration server.
8. The 5G terminal device according to claim 6, wherein the processor, when sending the first information to the temporary identity registration server via the blockchain network, is specifically configured to:
encrypting the first information by adopting the public key of the temporary identity registration server to obtain encrypted information;
and sending a second broadcast message in the blockchain network through the communication interface, wherein the second broadcast message comprises the public key of the 5G terminal equipment, the encryption information and the identification information of the temporary identity registration server.
9. A temporary identity registration server, comprising:
a memory;
a processor;
a communication interface; and
a computer program;
wherein the computer program is stored in the memory and configured to be executed by the processor to:
receiving a first broadcast message of a private key signature sent by 5G terminal equipment through a blockchain network through the communication interface, wherein the first broadcast message comprises a public key of the 5G terminal equipment, and the blockchain network comprises a temporary identity registration server;
negotiating a common parameter and an original root of the common parameter with the 5G terminal device through the blockchain network or the 5G channel;
generating a second random number;
sending a second message to the 5G terminal device through the 5G channel, wherein the second message is a value obtained by taking a modulus of the public parameter by a second result which takes the original root as a base number and takes a second random number generated by the temporary identity registration server as an index;
receiving first information sent by the 5G terminal equipment through the block chain network, wherein the first information is a value obtained by taking the modulus of the public parameter by using a first result with the original root as a base number and the first random number as an exponent;
calculating a second key through the second random number and the first information, wherein the second key is a value obtained by taking the first information as a base number and taking a fourth result with the second random number as an exponent to perform modulo operation on the public parameter;
the second key is the same as a first key calculated by the 5G terminal device, and the first key is a value obtained by taking the original root as a base number and taking a first result with the first random number as an exponent to perform modulo on the public parameter.
10. The temporary identity registration server of claim 9, wherein when the processor receives the first information sent by the 5G terminal device through the blockchain network, the processor is specifically configured to:
and receiving a second broadcast message sent by the 5G terminal equipment through the blockchain network, wherein the second broadcast message comprises a public key of the 5G terminal equipment, the first information and the identification information of the temporary identity registration server.
11. A computer-readable storage medium, on which a computer program is stored, which, when being executed by a processor, carries out the method according to any one of claims 1-5.
Priority Applications (1)
| Application Number | Priority Date | Filing Date | Title |
|---|---|---|---|
| CN201911401908.2A CN111083700A (en) | 2019-12-30 | 2019-12-30 | 5G terminal equipment access method, equipment and storage medium based on block chain |
Applications Claiming Priority (1)
| Application Number | Priority Date | Filing Date | Title |
|---|---|---|---|
| CN201911401908.2A CN111083700A (en) | 2019-12-30 | 2019-12-30 | 5G terminal equipment access method, equipment and storage medium based on block chain |
Publications (1)
| Publication Number | Publication Date |
|---|---|
| CN111083700A true CN111083700A (en) | 2020-04-28 |
Family
ID=70320049
Family Applications (1)
| Application Number | Title | Priority Date | Filing Date |
|---|---|---|---|
| CN201911401908.2A Pending CN111083700A (en) | 2019-12-30 | 2019-12-30 | 5G terminal equipment access method, equipment and storage medium based on block chain |
Country Status (1)
| Country | Link |
|---|---|
| CN (1) | CN111083700A (en) |
Cited By (1)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| CN113852906A (en) * | 2020-06-10 | 2021-12-28 | 中国移动通信有限公司研究院 | Information processing method, terminal, network equipment and storage medium |
Citations (1)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| CN110069918A (en) * | 2019-04-11 | 2019-07-30 | 苏州同济区块链研究院有限公司 | A kind of efficient double factor cross-domain authentication method based on block chain technology |
-
2019
- 2019-12-30 CN CN201911401908.2A patent/CN111083700A/en active Pending
Patent Citations (1)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| CN110069918A (en) * | 2019-04-11 | 2019-07-30 | 苏州同济区块链研究院有限公司 | A kind of efficient double factor cross-domain authentication method based on block chain technology |
Cited By (1)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| CN113852906A (en) * | 2020-06-10 | 2021-12-28 | 中国移动通信有限公司研究院 | Information processing method, terminal, network equipment and storage medium |
Similar Documents
| Publication | Publication Date | Title |
|---|---|---|
| CN106465121B (en) | Electronic subscriber identity module configuration | |
| EP3605942B1 (en) | Key agreement for wireless communication | |
| US8838972B2 (en) | Exchange of key material | |
| CN104737570B (en) | The method and apparatus for generating the key communicated to equipment for the equipment between the first user equipment and second user equipment | |
| CN111669276A (en) | Network verification method, device and system | |
| CN109087100B (en) | Key distribution method, device, equipment and storage medium | |
| CN107968999B (en) | Privacy protection method and related equipment | |
| EP2680531A1 (en) | Key agreement using a key derivation key | |
| CN106817346B (en) | Data transmission method and device and electronic equipment | |
| CN111050324B (en) | 5G terminal equipment access method, equipment and storage medium | |
| CN110169102A (en) | The method and apparatus of secret protection | |
| CN111148094B (en) | Registration method of 5G user terminal, user terminal equipment and medium | |
| CN111065101A (en) | 5G communication information encryption and decryption method and device based on block chain and storage medium | |
| CN111132165B (en) | 5G communication card-free access method, equipment and storage medium based on block chain | |
| WO2015144041A1 (en) | Network authentication method and device | |
| CN111641498A (en) | Key determination method and device | |
| CN110944319A (en) | 5G communication identity authentication method, equipment and storage medium | |
| CN111614670A (en) | Method and device for sending encrypted file and storage medium | |
| CN112866981B (en) | Method and device for managing subscription data | |
| CN110212991B (en) | Quantum wireless network communication system | |
| CN111148098A (en) | 5G terminal equipment registration method, equipment and storage medium | |
| CN111107550A (en) | Dual-channel access registration method and device for 5G terminal equipment and storage medium | |
| CN111132155B (en) | 5G secure communication method, device and storage medium | |
| CN111083700A (en) | 5G terminal equipment access method, equipment and storage medium based on block chain | |
| CN111065092A (en) | 5G communication information encryption and decryption method, equipment and storage medium |
Legal Events
| Date | Code | Title | Description |
|---|---|---|---|
| PB01 | Publication | ||
| PB01 | Publication | ||
| SE01 | Entry into force of request for substantive examination | ||
| SE01 | Entry into force of request for substantive examination | ||
| CB02 | Change of applicant information |
Address after: 100191 1107c, 11 / F, Xueyuan international building, 1 Zhichun Road, Haidian District, Beijing Applicant after: IALLCHAIN Co.,Ltd. Address before: 100043 5158, 5 floor, 11 Shixing street, Shijingshan District, Beijing. Applicant before: IALLCHAIN Co.,Ltd. |
|
| CB02 | Change of applicant information |