KR100789920B1 - Method and apparatus for device and user authentication based on single eap message in mobile communication system - Google Patents

Abstract

A device/user authentication method using a single EAP(Extensible Authentication Protocol) message in a mobile communication system and an apparatus thereof are provided to execute both device authentication and user authentication simultaneously by processing a device authentication medium and a user authentication medium together using a single EAP message. An authentication server, which executes device/user authentication for a terminal executing mobile packet communication, includes a storage part(660), a message creation part(630), a message processing part(670), and an authentication part(680). The storage part(660) stores a device authentication medium and a user authentication medium for the terminal. The message creation part(630) creates a random value to be sent to the terminal, creates a request message containing the information of the random value, and transmits it to the terminal. The message processing part(670) receives a response message for the request message from the terminal, and extracts a terminal authentication code from the received response message. The authentication part(680) creates a terminal authentication code using the random value, the device authentication medium, and the user authentication medium, compares the created terminal authentication code with the extracted terminal authentication code, and executes device/user authentication for the terminal.

Description

Device and user authentication method and device using single EAP message in mobile communication system {Method and Apparatus for Device and User Authentication Based on Single EAP Message in Mobile Communication System}

1 is a configuration diagram of an embodiment of a mobile communication system to which a device / user authentication method of the present invention is applied;

2 is a diagram illustrating an embodiment of an EAP request message transmitted from an authentication server to a user terminal for device / user authentication according to the present invention;

3 is an embodiment configuration diagram of an EAP response message transmitted from a user terminal to an authentication server for device / user authentication according to the present invention;

4 is a view for explaining a dynamic key generation method of an authentication server and a user terminal according to an embodiment of the present invention;

5 is a view for explaining a method for generating a server authentication code, a terminal authentication code and a message authentication code according to an embodiment of the present invention;

6 is a block diagram of an embodiment of an authentication server according to the present invention;

7 is a block diagram of an embodiment of a user terminal according to the present invention;

8 is a flowchart illustrating a method of performing device / user authentication using a single EAP message between a user terminal and an authentication server according to the present invention.

The present invention relates to a device / user authentication method and apparatus using a single EAP message, and more particularly, to a device / user using a single EAP message that simultaneously performs device authentication and user authentication using a single EAP message in a mobile communication system. An authentication method and apparatus.

3G-Evolution (3GE) access system is an IP-based wireless packet access network system suitable for providing high quality multimedia services, and collectively refers to all next-generation mobile communication systems based on 3GPP or 3GPP2. The 3GE access system supports high communication quality ('High Quality') and 'Good Security', and also supports low cost ('Low Cost') and high speed ('High Rate'). It aims to provide a wireless network ('Radio & Network') technology that is differentiated from other competitive systems. In addition, the 3GE system is a system in which an access system can select a base station according to a service characteristic desired by a subscriber as well as high-speed wireless packet transmission, and is a multi-radio access technology such as WLAN / GSM / GPRS / UTRAN / HSPDPA / Emerging System A technology for fusion of multi-radio access technologies (RATs) and a service for guaranteeing service continuity therebetween are provided. In addition, the 3GE system enables subscribers to select and access base stations that are advantageous for communication quality and billing according to the subscriber's location, radio environment and service characteristics in this multi-RAT environment. In addition, the 3GE system enables operators to deploy resource and mobility management systems globally to support efficient use of wireless resources, increased subscriber capacity through traffic distribution between base stations, and economic infrastructure investment / operation environment.

In order to provide a high speed wireless packet service in the next generation mobile communication system as described above, an authentication technique for a device and a user who wants to receive a wireless packet service in advance is required. Authentication includes device authentication for determining whether a device connected through a mobile communication network is a legitimate device registered in an authentication server, and user authentication for determining whether a user connected through a mobile communication network is a legitimate user registered in an authentication server. . The 3GE access system must be able to support device authentication and user authentication selectively or simultaneously. Currently, the most commonly used authentication method for supporting device authentication or user authentication is an authentication method according to an extended authentication protocol (EAP). Extensible Authentication Protocol (EAP) is an extensible authentication protocol that transmits authentication data between a mobile terminal and an authentication server for device authentication and user authentication. Currently, various EAP authentication protocols are used for requesting RFCs. For Comments or Draft.

The authentication method defined in the WiMAX standard may be applied to an IP-based packet mobile communication system. There are four EAP authentication methods defined in the WiMAX specification [WiMAX End-to-End Network Systems Architecture (Stage 3: Detailed Protocols and Procedures) April 24, 2006 DRAFT]. First, there is a single EAP device authentication method when only 1) device authentication is supported, and 2) a single EAP user authentication method when only user authentication is supported. There are 3) single EAP device / user authentication method and 4) double EAP device / user authentication method when both device / user authentication is supported.

Meanwhile, the WiMAX standard defines a certificate and a pre-shared key as a credential for device authentication, and a subscriber root key as a credential for user authentication. ) Is defined. The certificate is digital information issued by a certification authority to prove that a specific public key is bound to a specific terminal, and is a medium used for device authentication. The preshared key is a key that is identically held by the terminal and the authentication server, and is a medium for performing device authentication similarly to the certificate. The subscriber root key is a key having the same in the terminal and the authentication server, and is a medium used for user authentication.

The double EAP device / user authentication method uses two identical or different EAP authentication protocols. For example, after the EAP-TLS protocol or the EAP-PSK protocol is used for device authentication, the EAP-AKS protocol is used for user authentication. The EAP-TLS (Extensible Authentication Protocol-Transport Layer Security) protocol is a certificate-based authentication protocol, which uses a public key certificate technology inside the EAP for mutual authentication of an authentication server and a client terminal. The EAP-PSK (Extensible Authentication Protocol-Pre-Shared Key) protocol is an authentication protocol for performing mutual authentication between a client terminal and a server using a pre-shared key and generating a session key. The EAP-AKA (Extensible Authentication Protocol Method for 3rd Generation Authentication and Key Agreement) protocol is an authentication protocol that performs mutual authentication and session key distribution using the same key stored in the client and server. Since the double EAP device / user authentication method uses two protocols for device and user authentication, the authentication time is long and inefficient in terms of radio resource usage.

Meanwhile, the single EAP device / user authentication method is a method of authenticating two authentication credentials using one EAP authentication protocol for device and user authentication. However, in the '5.4.3.8.6 Device-User Single EAP Authentication' section of the WiMAX specification [WiMAX End-to-End Network Systems Architecture], as in "Since an EAP method that can authenticate with two credentials does not exists ..." As described, there is currently no single EAP device / user authentication method capable of simultaneously processing two authentication agents.

The present invention has been proposed to solve the above problems, and provides a device / user authentication method and apparatus capable of performing device authentication and user authentication by processing two authentication media using a single EAP message in a mobile communication system. Its purpose is to.

In particular, the present invention provides a device / user authentication method that enables device authentication and user authentication to be performed as a single EAP message by encrypting a device authentication medium and a user authentication medium into one medium, and enables efficient use of radio resources. And to provide a device.

Another object of the present invention is to provide a device / user authentication method and device capable of shortening the processing time of device / user authentication compared to double EAP authentication by performing device / user authentication with one single EAP message. .

Other objects and advantages of the present invention can be understood by the following description, and will be more clearly understood by the embodiments of the present invention. Also, it will be readily appreciated that the objects and advantages of the present invention may be realized by the means and combinations thereof indicated in the claims.

According to an aspect of the present invention, there is provided an authentication server for performing device and user authentication for a terminal performing packet mobile communication, the storage unit storing a device authentication medium and a user authentication medium for the terminal, and transmitting to the terminal. A message generator for generating a random value to be generated, generating a request message including the random value information, and transmitting the request message to the terminal, receiving a response message for the request message from the terminal, and receiving a terminal authentication code from the received response message Message processing unit for extracting the; and generating a terminal authentication code from the random value and the device authentication medium and the user authentication medium, the device for the terminal by comparing the generated terminal authentication code and the extracted terminal authentication code and It includes an authentication unit that performs user authentication. The terminal authentication code extracted from the response message is generated from a device authentication medium and a user authentication medium stored in the terminal, and a random value included in the request message received by the terminal from the authentication server.

In addition, the storage unit stores the terminal authentication code generation medium for generating the terminal authentication code. And the authentication unit generates a preliminary authentication key by encrypting the random value and the device authentication medium, and generates a device and a user authentication medium by encrypting the preliminary authentication key and the user authentication medium, and a user authentication medium generation unit, and And a terminal authentication code generation unit for generating a terminal authentication code by encrypting the device and the user authentication medium and the terminal authentication code generation medium. The preliminary authentication key and the device and the user authentication medium are generated by AES (Advanced Encryption Standard) encryption method, and the terminal authentication code is generated by CMAC-AES (Cipher-based Message Authentication Code-Advanced Encryption Standard) encryption method. do.

On the other hand, the message processing unit extracts a message authentication code from the response message. And the authentication server generates a message authentication code from the device and user authentication medium and the packet length of the response message, and verifies the integrity of the response message by comparing the generated message authentication code with the extracted message authentication code. It further includes a verification unit. The verification unit encrypts the device and the user authentication medium to generate a verification medium for verifying the packet data integrity of the response message, and a verification medium generation unit, and encrypts the packet length of the verification medium and the response message to verify the message authentication code. It includes a message authentication code generation unit for generating a. The verification medium is generated by AES encryption, and the message authentication code is generated by CMAC-AES encryption.

In addition, the present invention is a terminal for receiving device and user authentication by accessing the authentication server through packet mobile communication, the storage unit for storing the device authentication medium and the user authentication medium, the authentication server from the request message received from the authentication server Message authentication unit for extracting the generated random value, authentication key generation unit for generating a terminal authentication code from the random value and the device authentication medium and the user authentication medium, and generating a response message including the terminal authentication code to the authentication It includes a message generating unit for sending to the server. The storage unit stores a terminal authentication code generation medium for generating the terminal authentication code. And an authentication key generation unit generating a preliminary authentication key by encrypting the random value and the device authentication medium, and generating a device and a user authentication medium by encrypting the preliminary authentication key and the user authentication medium. And a terminal authentication code generation unit for generating a terminal authentication code by encrypting the device and the user authentication medium and the terminal authentication code generation medium. The preliminary authentication key, the device and the user authentication medium are generated by AES encryption, and the terminal authentication code is generated by CMAC-AES encryption.

The authentication key generation unit encrypts the device and the user authentication medium to generate a verification medium for verifying the packet data integrity of the response message, and a verification medium generation unit, and encrypts the packet lengths of the verification medium and the response message. It may further include a message authentication code generation unit for generating an authentication code. The message generator generates a response message including the terminal authentication code and the message authentication code and transmits the response message to the authentication server. The verification medium is generated by the AES encryption method, and the message authentication code is generated by the CMAC-AES encryption method.

On the other hand, the present invention is a method for performing device and user authentication using a single EAP (Extensible Authentication Protocol) message, generating a preliminary authentication key by encrypting a device authentication medium and a random value, the preliminary authentication key and user authentication Generating a device and a user authentication medium by encrypting the medium, generating a first device and a user authentication code using the device and the user authentication medium, and extracting a second device and a user authentication code from the received EAP message. And performing device and user authentication by comparing the first device and user authentication code with the second device and user authentication code. The preliminary authentication key and the device and user authentication medium are generated by AES encryption. The first device and the user authentication code are CMAC-AES, wherein the device and the user authentication medium are input strings, and the string connection of the device authentication medium, the user authentication medium, the random value, and the authentication code generation medium is an input string. Generated by an encryption scheme.

In addition, the device and the user authentication method of the present invention encrypts the device and the user authentication medium to generate a message verification medium, the first EAP message authentication code using the packet verification medium and the packet length of the received EAP message Generating data, extracting a second EAP message authentication code from the received EAP message, and comparing the first EAP message authentication code with the second EAP message authentication code to determine the data integrity of the received EAP message. The method may further include verifying. The message verification medium is generated by AES encryption. The first EAP message authentication code is generated by the CMAC-AES encryption method using the message verification medium as an input key and 'string concatenation of the packet length and the random value of the received EAP message' as an input string.

The above-described contents of the present invention will become more apparent through the following detailed description with reference to the accompanying drawings, and thus, those skilled in the art to which the present invention pertains may easily implement the technical idea of the present invention. will be. In addition, in describing the present invention, when it is determined that the detailed description of the known technology related to the present invention may unnecessarily obscure the gist of the present invention, the detailed description thereof will be omitted. Hereinafter, exemplary embodiments of the present invention will be described in detail with reference to the accompanying drawings.

The device / user authentication method according to the present invention is applicable to all communication systems that perform IP-based packet mobile communication. 1 is a configuration diagram of an embodiment of a mobile communication system to which the device / user authentication method of the present invention is applied.

In FIG. 1, a user terminal (UE) 111 is a mobile terminal that performs high-speed mobile packet communication. A 3GE interface evolved based on 3GPP or 3GPP2 and a non-3GPP interface based on 3GPP or 3GPP2 are not. LAN, WiMAX, etc.) has dual-mode capability. In addition, the UE 111 has a vertical handover function between a 3GE system and a non-3GPP system.

A base station (E-Node B; Evolution-RAN) 121 manages radio resources and performs a function of managing a radio bearer. The serving node (Evolution-Serving Node for Control; E-SN (C)) 160 that processes the control message controls and manages handover between base stations and performs a session management function. A serving node (Evolution-Serving Node for User Data; E-SN (U)) 140 that processes user data performs a traffic processing function between a mobile communication access system and an operator IP service network. The visitor agent (FA) 142 and 157 and the home agent (HA) 154 are mobile IPs for supporting mobility of UEs between different IP subnets. Perform the function.

The mobile communication system of FIG. 1 supports Inter-working with WLAN (I-WLAN). To this end, the mobile communication system provides a WLAN access point (AP) 131 wirelessly connected to a user terminal (UE), a WLAN and an IP backbone (IP-BB) 150 connection function. A WLAN Access Gateway (WAG) 155 to perform and a Packet Data Gateway (PDG) 156 to perform an IP packet transmission processing function to the WLAN radio access device 131 are provided.

The Home Location Register (HLR) 110 stores information on additional services of subscribers and provides information necessary to perform services. The Authentication Authorization Account Server (AAA Server) 170 performs authentication, authorization verification, and billing functions for the UE. The home location register 110 and the authentication server 170 may be implemented in a home subscriber server (HSS) 175 that is in charge of a service profile management function.

Meanwhile, the mobile communication system of FIG. 1 provides an IMS (IP Multimedia Subsystem) service that provides a combination of audio, video, and data based on an IP protocol. To this end, the 3GE access system performs a broadcast multicast-service center (BM-SC) server 152 serving as an access point for content providers, a proxy function and a firewall function for protecting a home network, and a P / I serving as an IMS service broker. / S-CSCF (Proxy CSCF / Interrogating CSCF / Serving CSCF) node 153 is provided.

FIG. 2 is a diagram illustrating an embodiment of an EAP request message transmitted by an authentication server (AAA server) 170 to a user terminal (UE) 111 for device / user authentication according to the present invention.

As shown in FIG. 2, the EAP request message (EAP-Request) includes a Code field 201, an Identifier field 202, a Length field 203, a Type field 204, a Flags field 205, and a Reserved field ( 206, a RANDOM field 207, an AUTH_S field 208, and a MAC_S field 209.

The code field 201 has information about a function that the EAP protocol should perform. That is, the code field 201 has an EAP-Request / Response value indicating whether the EAP message is an EAP request message or an EAP response message. The EAP-Request / Response value is set to '1' when the EAP message is an EAP request message (in case of FIG. 2) and to '2' in case of an EAP response message (in case of FIG. 3).

The Identifier field 202 has identification information (Identifier) for matching the EAP Request message (EAP-Request) and the EAP Response message (EAP-Response). That is, the information recorded in the Identifer field 202 is stored in the EAP request message (EAP-Request) sent by the authentication server (AAA server) 170 by the EAP response message (EAP-Response) received from the user terminal (UE) 111. Identification information for confirming whether the response. More specifically, when the authentication server 170 sends the EAP request message to the user terminal 111, the user terminal 111 EAP the identification information value recorded in the Identifier field of the EAP request message received from the authentication server 170 As an Identifier field value of the response message, the authentication server 170 identifies the Identifier field value of the EAP response message received from the user terminal 111 and the EAP request message sent to the user terminal 111. By comparing the information values, it is checked whether the EAP response message is a response to the EAP request message.

The Length field 203 has length information of an EAP packet. The type field 204 has information about an authentication protocol performed between the user terminal and the authentication server. Hereinafter, the device / user authentication protocol according to the present invention is defined and used as EAP-DUA (Extensible Authentication Protocol-Device User Authentication).

The Flags field 205 is currently set to '0' and ignores this upon receipt. In the future, the Flag field may be used for other purposes. The Reserved field 206 is set to '0' on transmission and ignores it on reception.

The RANDOM field 207 has a 16 byte random value generated by the authentication server (AAA server) 170. The random value is used to generate dynamic keys (pre-AK, AUTH_S, AUTH_P, MAC_S, MAC_P) in the user terminal (UE) 111 and the authentication server (AAA server) 170.

The AUTH_S field 208 has a server authentication code 'AUTH_S' which is a 16 byte authentication value generated by the authentication server (AAA server 170). The 'AUTH_S' is used by the user terminal (UE) 111 to authenticate the authentication server (AAA server) 170.

The MAC_S field 209 has a 'MAC_S' which is an EAP request message authentication code generated by the authentication server (AAA server) 170. The 'MAC_S' is used to confirm the integrity of the EAP request message packet received by the user terminal (UE) 111 from the authentication server (AAA server) 170.

3 is a diagram illustrating an embodiment of an EAP response message (EAP-Response) transmitted from a user terminal (UE) 111 to an authentication server (AAA server) 170 for device / user authentication according to the present invention.

As shown in FIG. 3, the EAP response message (EAP-Response) includes a Code field 301, an Identifier field 302, a Length field 303, a Type field 304, a Flags field 305, and a Reserved field ( 306, AUTH_P field 308 and MAC_P field 309. The Code field 301, Identifier field 302, Length field 303, Type field 304, Flags field 305, and RANDOM field 307 are the same as described with reference to FIG.

The AUTH_P field 307 has a terminal authentication code 'AUTH_P' which is a 16 byte authentication value generated by the user terminal (UE) 111. The 'AUTH_P' is used by the authentication server (AAA server) 170 to authenticate the user terminal (UE) 111.

The MAC_P field 308 has a 'MAC_P' which is an EAP response message authentication code generated by the user terminal (UE) 111. The 'MAC_P' is used by the authentication server (AAA server) 170 to verify the integrity of the EAP response message packet received from the user terminal (UE) 111.

4 is a diagram illustrating a dynamic key generation method of an authentication server (AAA server) 170 and a user terminal (UE) 111 according to an embodiment of the present invention.

The dynamic key generation method of the authentication server (AAA server) 170 and the dynamic key generation method of the user terminal (UE) 111 are the same. In addition, a Pre-Shared Key (PSK) 401, which is an authentication medium for device authentication, and a Subscriber Root Key (SRK) 402, which is an authentication medium for user authentication, are used as an authentication server (AAA). The same is stored in the server 170 and the user terminal UE 111. However, the authentication server (AAA server) uses a random value generated by itself, whereas the user terminal (UE) uses a dynamic key using the random value included in the EAP request message received from the authentication server (AAA server). Create

Meanwhile, in the embodiment of the present invention, a dynamic key is generated by using an advanced encryption standard (AES) encryption method. AES-128 encryption is a high-level block-by-block encryption in terms of security. However, the encryption method used for generating the dynamic key of the present invention is not limited to the AES method, and various encryption methods such as MD-5 or DES can be applied.

Referring to FIG. 4, a pre-authentication key (PSK) 401, which is a device authentication medium using the AES-128 encryption scheme 410, and a random value (RANDOM) 403 generated by an authentication server are used. generate a pre-AK (pre-Authentication Key) 404. The device / user authentication medium chain is generated using the AES-128 encryption method 420 from the generated pre-AK 404 and the subscriber root key (SRK) 402, which is a user authentication medium. An authentication key (AK) 405 is generated. The authentication key (AK, 405) generated by the authentication server (AAA server) is used to generate the server authentication code 'AUTH_S', the authentication key (AK, 405) generated by the user terminal (UE) is the terminal authentication code ' Used to generate AUTH_P '(see FIG. 5).

On the other hand, the TEK (Transient EAP Key) 406 and the master session key (MSK; Master Session Key, 407) is output from the generated authentication key (AK, 405) through the AES-128 encryption scheme 430. The first 8 bytes of the 16 bytes output from the generated authentication key (AK) 405 are used as the TEK 406, and the subsequent 8 bytes are used as the master session key (MSK) 407. The TEK 406 is a verification medium for providing the integrity of the EAP packet. The TEK 406 is used to generate the server EAP request message authentication code 'MAC_S' in the authentication server (AAA server), and in the user terminal, the terminal EAP response message authentication code ' Used to generate MAC_P '(see FIG. 5). The master session key (MSK) 407 is used to encrypt data in the radio data interval between the user terminal (UE) and the base station (E-Node B).

5 is a diagram illustrating a method of generating a server authentication code (AUTH_S), a terminal authentication code (AUTH_P) and a message authentication code (MAC_S, MAC_P) according to an embodiment of the present invention.

The server authentication code (AUTH_S), the terminal authentication code (AUTH_P) and the message authentication code (MAC_S, MAC_P) is generated by the CMAC_AES encryption method. CMAC_AES_128 (Cipher-based Message Authentication Code-Advanced Encryption Standard-128) The encryption method is an encryption method that generates a 128-bit message authentication code (MAC) by inputting an input key and a variable input string. On the other hand, each of the authentication server (AAA server) 170 and the user terminal (UE) 111, "AUTH SERVER" which is a medium having a fixed value for generating a server authentication code and a medium having a fixed value for generating a terminal authentication code "AUTH PEER" is stored identically.

As shown in (A) of FIG. 5, the server authentication codes (AUTH_S, 513) are the authentication keys (AK, 511) as input keys, and the 'preshared key (PSK), subscriber root key (SRK), and random values ( RANDOM) and AUTH SERVER's string concatenation 512 'are generated by the CMAC_AES_128 (510) encryption method as an input string. The generation method of the server authentication code (AUTH_S, 513) is expressed as Equation 1 below.

AUTH _S = CMAC _ AES _128 (AK, PSK ∥ SRK ∥RANDOM∥ " AUTH  SERVER ", 128)

As shown in (B) of FIG. 5, the terminal authentication codes (AUTH_P, 523) are the authentication keys (AK, 521) as input keys, and the pre-shared key (PSK), subscriber root key (SRK), random value ( RANDOM) and AUTH PEER's string concatenation 522 'are generated by the CMAC_AES_128 520 encryption scheme. The generation method of the terminal authentication code (AUTH_P, 523) is expressed as shown in Equation 2 below.

AUTH _S = CMAC _ AES _128 (AK, PSK ∥ SRK ∥RANDOM∥ " AUTH  PEER ", 128)

The method of generating the server EAP request message authentication code (MAC_S, 533) and the terminal EAP response message authentication code (MAC_P, 534) is the same. 532 'is generated by the CMAC_AES_128 530 encryption method using the input string. At this time, the length of the input key in the CMAC_128_AES_128 530 encryption method should be 128 bits, so 8 bytes of null characters are added after 8 bytes of TEK. "EAP PACKET" corresponds to "packet data from the Code field 201 to the AUTH_S field 208 (see FIG. 2)" when generating the MAC_S 533, and "Code" when generating the MAC_P 534. This corresponds to packet data (see FIG. 3) from the field 301 to the AUTH_P 307. The generation method of the server EAP request message authentication code (MAC_S, 533) and the terminal EAP response message authentication code (MAC_P, 534) is expressed as shown in Equation 3 below.

MAC_S = MAC_P = CMAC _ AES _128 ( TEK , EAP  PACKET∥RANDOM, 128)

In the CMAC_AES_128 functions of Equations 1, 2, and 3, the first parameter represents an input key, the second parameter represents an input string, and the third parameter represents a bit length of an output value. Also, the symbol '∥' indicates concatenation of a character string.

6 is a block diagram of an embodiment of an authentication server (AAA server) according to the present invention.

As shown in FIG. 6, the authentication server (AAA server) of the present invention includes a server transceiver 610 connected to an IP backbone (IP BB) by wire or wirelessly, and a protocol processor 620 performing an operation according to the Diameter protocol. ), An EAP message generator 630 for generating an EAP message to be transmitted, an authentication key generator 640 for generating an authentication key and an authentication code, a random key generator 650 for generating a random key (random value), A storage unit 660 storing information such as a user authentication medium and a device authentication medium, an EAP message processing unit 670 processing a received EAP message, an authentication unit 680 performing device / user authentication, a received EAP message It includes a verification unit 690 for verifying the integrity of the.

The storage unit 660 may include a pre-shared key (PSK), which is a device authentication medium, a subscriber root key (SRK), which is a user authentication medium, a medium for generating a server authentication code (AUTH SERVER), and a medium for generating a terminal authentication code ( AUTH PEER). The PSK, SRK, AUTH SERVER, and AUTH PEER are the same as the values stored in the user terminal performing authentication. In addition, when the authentication server transmits an EAP request message, the storage unit 660 stores a random key (RANDOM) and identification information (Identifier) included in the EAP request message, and the authentication key generator 640. Additional key (AK, TEK) values generated in the

The random key generator 650 generates a random key RANDOM to be used to generate a pre-AK, and transfers the generated random key to the authentication key generator 640 and the storage 660. .

The authentication key generation unit 640 is a random key (RANDOM) generated by the random key generation unit 650, a pre-shared key (PSK) matching the user terminal to perform the device / user authentication stored in the storage unit And the subscriber root key (SRK) to generate the device / user authentication key (AK), TEK and master session key (MSK) according to the key generation method described in FIG. Subsequently, the authentication key generation unit 640 generates the generated key AK, the random key RANDOM generated by the random key generation unit 650, and the PSK, SRK, and "AUTH SERVER" stored in the storage unit 660. ", To generate a server authentication code (AUTH_S) according to the code generation method described in (A) of FIG. Lastly, the authentication key generator 640 uses the TEK generated, the random key generated by the random key generator 650, and the EAP PACKET of the EAP request message to be transmitted. Generate the EAP request message authentication code (MAC_S) according to the code generation method described above.

The EAP message generator 630 may include a random key (RANDOM) generated by the random key generator 650, a server authentication code (AUTH_S) generated by the authentication key generator 640, and an EAP request message authentication code ( MAC_S) is used to generate the EAP request message shown in FIG. The generated EAP request message is processed by the protocol processor 620 in Diameter protocol and transmitted to the E-SN (C) through the server transceiver 610.

The EAP message processing unit 670 processes the EAP response message shown in FIG. 3, which is received from the E-SN (C) through the server transceiver 610 and processed by Diameter protocol in the protocol processing unit 620. The EAP message processing unit 670 performs a message processing function such as parsing on the EAP response message, and whether the response is an EAP request message using identification information included in the EAP response message. Check. When the response to the EAP request message is confirmed, the EAP message processing unit 670 transmits the terminal authentication code (AUTH_P) to the authentication unit 680 with the confirmation result, and the EAP response message authentication code (MAC_P) is verified. Pass to section 690.

The authenticator 680 may include a random key (RANDOM) of an EAP request message corresponding to the EAP response message, a preshared key (PSK) and a subscriber root key (SRK) matching the user terminal that transmitted the EAP response message. Is received from the storage unit 660 to generate the device / user authentication key (AK) according to the key generation method described in FIG. In this case, the authentication unit 680 may use the AK value stored in the storage unit 660 when the EAP request message is transmitted. Subsequently, the authentication unit 680 uses the PSK, SRK, RANDOM, AK, and "AUTH PEER" stored in the storage unit to generate the terminal authentication code (AUTH_P) according to the code generation method shown in FIG. Create The device / user authentication is performed on the terminal that has transmitted the EAP response message by comparing the generated terminal authentication code with the terminal authentication code transmitted from the EAP message processing unit 670.

The verification unit 690 may include a random key (RANDOM) of an EAP request message corresponding to the EAP response message, a preshared key (PSK) and a subscriber root key (SRK) matching the user terminal that has transmitted the EAP response message. Is received from the storage unit 660 to generate a TEK according to the key generation method described with reference to FIG. 4. In this case, the verification unit 690 may use the TEK value stored in the storage unit 660 when the EAP request message is transmitted. Subsequently, the authentication unit 680 generates an EAP response message authentication code (MAC_P) using the TEK, RANDOM, and the EAP PACKET of the received EAP response message. The integrity of the EAP response message is verified by comparing the generated EAP response message authentication code with the EAP response message authentication code transmitted from the EAP message processing unit 670.

7 is a block diagram of an embodiment of a user terminal (UE) according to the present invention.

As shown in FIG. 7, a user terminal (UE) of the present invention is a terminal transceiver unit 710 for wirelessly accessing an IP-based packet network through a base station (E-Node B) or a wireless access device (AP), and a PMM. A protocol processing unit 720 for performing an operation according to a protocol, an EAP message generating unit 730 for generating an EAP message to be transmitted, an authentication key generating unit 740 for generating an authentication key and an authentication code, and a user authentication medium and device authentication. A storage unit 750 for storing information such as a medium, an EAP message processor 760 for processing the received EAP message, an authentication unit 770 for performing device / user authentication, and verification for verifying the integrity of the received EAP message It comprises a portion 780.

The storage unit 750 may include a pre-shared key (PSK) as a device authentication medium, a subscriber root key (SRK) as a user authentication medium, a medium for generating a server authentication code (AUTH SERVER), and a medium for generating a terminal authentication code ( AUTH PEER). The PSK, SRK, AUTH SERVER, and AUTH PEER are the same as the values stored in the authentication server that performs the authentication.

The EAP message processing unit 760 processes the EAP request message shown in FIG. 2 that is received from the E-SN (C) through the terminal transceiver 710 and is processed by the protocol processing unit 720 in the PMM protocol. The EAP message processor 760 performs a message processing function such as parsing on the EAP request message, and the random key RANDOM and the server authentication code AUT_S included in the EAP request message are authenticated. In step 770, the EAP request message authentication code MAC_S is transmitted to the verification unit 780.

The authentication unit 770 uses a random key (RANDOM) transmitted from the EAP message processing unit 760, a pre-shared key (PSK) stored in the storage unit 750, and a subscriber root key (SRK) of FIG. 4. A device / user authentication key (AK) is generated according to the key generation method described above. Subsequently, the authentication unit 770 uses the PSK, SRK, RANDOM, AK, and "AUTH SERVER" stored in the storage unit to perform a server authentication code (AUTH_S) according to the code generation method shown in FIG. Create The server authentication code generated is compared with the server authentication code transmitted from the EAP message processor 760 to perform authentication on the authentication server that has transmitted the EAP request message.

The verification unit 780 uses the random key RANDOM delivered from the EAP message processing unit 760, the pre-shared key PSK and the subscriber root key SRK stored in the storage unit 750. Create a TEK using the key generation method described in In this case, the verification unit 780 may use the AK value generated by the authentication unit. Subsequently, the verification unit 780 generates an EAP request message authentication code (MAC_S) using the TEK, RANDOM, and the EAP PACKET of the received EAP request message. The integrity of the EAP request message is verified by comparing the generated EAP request message authentication code with the EAP request message authentication code transmitted from the EAP message processing unit 760.

The authentication key generation unit 740 described with reference to FIG. 4 using a random key RANDOM included in the received EAP request message, a preshared key PSK and a subscriber root key SRK stored in the storage unit. A device / user authentication key (AK), a TEK, and a master session key (MSK) are generated according to the key generation method. In this case, the authentication key generation unit 740 may use the AK and TEK values generated by the authentication unit 680 and the verification unit 690. Subsequently, the authentication key generation unit 740 generates a generated device / user authentication key (AK), a random key (RANDOM) included in the received EAP request message, and a PSK, SRK, " AUTH PEER "to generate the terminal authentication code (AUTH_P) according to the code generation method described in (B) of FIG. Finally, the authentication key generator 740 uses the generated TEK, the random key RANDOM included in the received EAP request message, and the EAP PACKET of the EAP response message to be transmitted. The EAP response message authentication code (MAC_P) is generated according to the code generation method.

The EAP message generator 730 may include an identifier and a random key (RANDOM) included in the received EAP request message, a terminal authentication code (AUTH_P) and an EAP response generated by the authentication key generator 740. A message authentication code (MAC_P) is used to generate the EAP response message shown in FIG. The generated EAP response message is PMM protocol processed by the protocol processor 720 and transmitted to the E-SN (C) through the terminal transceiver 710.

8 is a flowchart illustrating a method of performing device / user authentication using a single EAP message between a user terminal and an authentication server in a mobile communication system according to the present invention.

Between the UE 810 and the E-SN (C) 820, a packet mobility management (PMM) protocol for controlling session and mobility is located, and the E-SN (C) 820 Between the authentication server (AAA server, 830) is the Diameter protocol, which is an AAA protocol for authentication, authentication, and accounting in a mobile Internet environment. The E-SN (C) node 820 performs a function of mutually converting the PMM protocol and the Diameter protocol and maintains a session while performing device / user authentication. The PMM protocol provides location registration and location update functions, authentication and encryption functions, paging functions, and access management (transmit layer control message). [3GPP TS 23.060 V7.1.0 (2006-06), "3rd Generation Partnership Project; Technical Specification Group Services and System Aspects; General Packet Radio Service (GPRS); Service description; Stage 2 (Release 7) "]. Meanwhile, the Diameter protocol provides AAA functionality for new technologies such as roaming and mobile IP (IETF RFC 4072, "Diameter Extensible Authentication Protocol (EAP) Application").

Referring to FIG. 8, first, an E-SN (C) performs a PMM / EAP-Request / Identity message that encapsulates an EAP message requesting identification information (820) of a user terminal according to the PMM protocol. In operation S805, the UE transmits to the user terminal UE 810. Subsequently, the E-SN (C) 820 converts the PMM / EAP-Response / Identity message including the terminal identification information received from the UE 810 into a Diameter protocol, and converts the converted Diameter / EAP- The response / Identity message is transmitted to the authentication server (AAA server) 830 (S810 and S815).

The authentication server (AAA server) 830 searches the subscriber information database of the server storage unit for the identification information included in the message received from the E-SN (C) 820, which the user terminal (UE) 810 sees. It is determined whether the subscriber is a single EAP authentication service according to the present invention (S820). When the user terminal UE 810 is a single EAP service subscriber, the device / user authentication (EAP-DUA) using the single EAP message according to the present invention is performed (S825).

The authentication server (AAA server) 830 stores PSK, SRK, AUTH PEER, and AUTH SERVER values matching the UEs 810 subscribed to the single EAP authentication service. The authentication server (AAA server) 830 uses the PSK and SRK matching the terminal subscribed to the single EAP authentication service and the RANDOM value generated by the random value generator and the key generation method shown in FIG. 4. AK, AK, TEK, and MSK are generated (S830). The AUTH_S value is generated using the PSK, SRK, RANDOM, the generated AK and AUTH SERVER, and the code generation method illustrated in FIG. 5A (S835). In addition, the MAC_S value is generated using the RANDOM, the generated TEK and the EAP PACKET of the EAP request message to be transmitted to the user terminal and the code generation method illustrated in FIG. 5C (S835).

Subsequently, the authentication server (AAA server) 830 transmits the Diameter / EAP-Request / EAP-DUA message containing the generated EAP-Request message (EAP-Request) shown in FIG. To the E-SN (C) 820 is transmitted (S840). The E-SN (C) 820 transmits the PMM / EAP-Request / EAP-DUA message obtained by converting the EAP request message to the PMM protocol (S845).

The UE 810 extracts the RANDOM value from the received EAP request message and uses the PSK and SRK values stored in the terminal storage unit and pre-AK, AK, TEK and MSK using the key generation method shown in FIG. 4. It generates (S850). The AUTH_S value is generated using the PSK, SRK, RANDOM, the generated AK and the AUTH SERVER stored in the terminal storage unit, and the code generation method shown in FIG. 5A, and the generated AUTH_S is the EAP request message. The AUTH_S is verified by comparing the AUTH_S value extracted from the SUT (S855). In addition, MAC_S is generated using the RANDOM, the generated TEK, the EAP PACKET of the received EAP request message, and the code generation method illustrated in FIG. 5C, and the generated MAC_S is extracted from the EAP request message. The MAC_S is verified by comparing with the MAC_S value (S855).

If the verification is successful, the user terminal UE 810 generates AUTH_P using the AK, PSK, SRK, RANDOM and AUTH_PEER and the code generation method shown in FIG. 5B, and the TEK, RANDOM and transmission. MAC_P is generated using the EAP PACKET of the EAP response message to be performed and the code generation method illustrated in FIG. 5C (S860). Subsequently, the EAP response message shown in FIG. 3 is generated to transmit the PMM / EAP-Response / EAP-DUA message included in the PMM protocol to the E-SN (C) 820 (S865). The E-SN (C) 820 transmits the Diameter / EAP-Response / EAP-DUA message obtained by converting the EAP response message to the Diameter protocol to an authentication server (AAA server) 830 (S870).

The authentication server (AAA server) 830 generates AUTH_P using AK, PSK, SRK, RANDOM and AUTH PEER and the code generation method shown in FIG. 5 (B), and generates the generated AUTH_P as a user terminal (UE, The device / user authentication is performed on the terminal by comparing the AUTH_P value of the EAP response message received from 810 (S875). In addition, by generating the MAC_P using the EAP PACKET of the TEK, RANDOM and the received EAP response message and the code generation method shown in Figure 5 (C), by comparing the generated MAC_P with the MAC_P value extracted from the EAP response message The integrity of the message is verified (S875). If the verification is successful, the authentication server (AAA server) 830 transmits a Diamete / EAP-Success message containing the success message to the Diameter protocol to the E-SN (C) 820 (S880), and the E-SN ( C) 820 transmits the PMM / EAP-Success message converted to the PMM protocol to the user terminal (UE) 810 (S885).

As described above, the method of the present invention may be implemented as a program and stored in a recording medium (CD-ROM, RAM, ROM, floppy disk, hard disk, magneto-optical disk, etc.) in a computer-readable form. Since this process can be easily implemented by those skilled in the art will not be described in more detail.

The present invention described above is capable of various substitutions, modifications, and changes without departing from the technical spirit of the present invention for those skilled in the art to which the present invention pertains. It is not limited by the drawings.

As described above, the present invention provides a single EAP device / user authentication method and apparatus capable of simultaneously performing device authentication and user authentication by processing a device authentication medium and a user authentication medium together using a single EAP message in a mobile communication system. It is effective.

In particular, the present invention encrypts the device authentication medium and the user authentication medium into a single medium so that device authentication and user authentication can be performed as a single EAP message, thereby increasing authentication and security, and efficiently using radio resources. It can be effective.

In addition, the present invention reduces the number of times of authentication signal transmission and reception in the wireless / wired interval compared to the double EAP authentication method by performing the device / user authentication with a single EAP message, thereby reducing the processing time of the device / user authentication It can be effective.

Claims (38)

An authentication server for performing device and user authentication for a terminal performing packet mobile communication, A storage unit which stores a device authentication medium and a user authentication medium for the terminal; A message generator for generating a random value to be transmitted to the terminal, generating a request message including the random value information, and transmitting the generated request message to the terminal; A message processor for receiving a response message to the request message from the terminal and extracting a terminal authentication code from the received response message; And Authentication unit for generating a terminal authentication code from the random value, the device authentication medium and the user authentication medium, and performing the device and user authentication for the terminal by comparing the generated terminal authentication code and the extracted terminal authentication code Authentication server comprising a. The method of claim 1, Terminal authentication code extracted from the response message, And a device authentication medium and a user authentication medium stored in the terminal, and a random value included in a request message received by the terminal from the authentication server. The method according to claim 1 or 2, The storage unit, Stores the terminal authentication code generation medium for generating the terminal authentication code, The authentication unit, A device and a user authentication medium generation unit for generating a preliminary authentication key by encrypting the random value and the device authentication medium, and generating a device and a user authentication medium by encrypting the preliminary authentication key and the user authentication medium; And And a terminal authentication code generation unit for generating a terminal authentication code by encrypting the device and the user authentication medium and the terminal authentication code generation medium. The method of claim 3, wherein The preliminary authentication key and the device and the user authentication medium, Generated by AES (Advanced Encryption Standard) encryption method. The terminal authentication code, Authentication server, characterized in that generated by the Cipher-based Message Authentication Code-Advanced Encryption Standard (CMAC-AES) encryption method. The method of claim 3, wherein The message processing unit, Extracting a message authentication code from the response message, generating a message authentication code from the packet length of the response message and the device and user authentication medium, and comparing the generated message authentication code with the extracted message authentication code; Verification unit to verify the integrity of the message Authentication server further comprising. The method of claim 5, The verification unit, A verification medium generator for encrypting the device and the user authentication medium to generate a verification medium for verifying packet data integrity of the response message; And Message authentication code generation unit for generating a message authentication code by encrypting the verification medium and the packet length of the response message Authentication server comprising a. The method of claim 6, The verification medium, Generated by AES (Advanced Encryption Standard) encryption method. The message authentication code is, Authentication server, characterized in that generated by the Cipher-based Message Authentication Code-Advanced Encryption Standard (CMAC-AES) encryption method. A terminal that receives device and user authentication by accessing an authentication server through packet mobile communication, A storage unit for storing the device authentication medium and the user authentication medium; A message processing unit which extracts a random value generated by the authentication server from the request message received from the authentication server; Authentication key generation unit for generating a terminal authentication code from the random value, the device authentication medium and the user authentication medium; And Message generation unit for generating a response message containing the terminal authentication code and transmits to the authentication server Terminal comprising a. The method of claim 8, The storage unit, Stores the terminal authentication code generation medium for generating the terminal authentication code, The authentication key generation unit, A device and a user authentication medium generation unit for generating a preliminary authentication key by encrypting the random value and the device authentication medium, and generating a device and a user authentication medium by encrypting the preliminary authentication key and the user authentication medium; And Terminal authentication code generation unit for generating a terminal authentication code by encrypting the device and the user authentication medium and the terminal authentication code generation medium Terminal comprising a. The method of claim 9, The preliminary authentication key and the device and the user authentication medium, Generated by AES (Advanced Encryption Standard) encryption method. The terminal authentication code, Terminal, characterized in that it is generated by the Cipher-based Message Authentication Code-Advanced Encryption Standard (CMAC-AES) encryption scheme. The method of claim 9, The authentication key generation unit, A verification medium generator for encrypting the device and the user authentication medium to generate a verification medium for verifying packet data integrity of the response message; And Further comprising a message authentication code generation unit for generating a message authentication code by encrypting the packet length of the verification medium and the response message, The message generator, And generating a response message including the terminal authentication code and the message authentication code and transmitting the response message to the authentication server. The method of claim 11, The verification medium, Generated by AES (Advanced Encryption Standard) encryption method. The message authentication code is, Terminal, characterized in that it is generated by the Cipher-based Message Authentication Code-Advanced Encryption Standard (CMAC-AES) encryption scheme. An apparatus and user authentication system for performing IP-based packet mobile communication, Encrypts the first device authentication medium and the first user authentication medium to generate a first device and a user authentication medium, and generates and authenticates a terminal authentication message including a first terminal authentication code generated from the first device and the user authentication medium A terminal for transmitting to a server; And Storing a second device authentication medium that is identical to the first device authentication medium and a second user authentication medium that is identical to the first user authentication medium, encrypting the second device authentication medium and the second user authentication medium, Generating a user authentication medium and comparing the second terminal authentication code generated from the second device and the user authentication medium with the first terminal authentication code included in the terminal authentication message to perform device and user authentication for the terminal. Authentication server Device and user authentication system comprising a. The method of claim 13, The terminal, Encrypts the random value generated by the authentication server and the first device authentication medium to generate a first preliminary authentication key, encrypts the first preliminary authentication key and the first user authentication medium, and then encrypts the first device and the user. Create an authentication medium, The authentication server Generating a second preliminary authentication key by encrypting the generated random value and the second device authentication medium, and generating a second device and a user authentication medium by encrypting the second preliminary authentication key and the second user authentication medium. Device and user authentication system, characterized in that. The method of claim 14, The first preliminary authentication key, the second preliminary authentication key, the first device and the user authentication medium, the second device and the user authentication medium, Device and user authentication system, characterized in that generated by the AES (Advanced Encryption Standard) encryption scheme. The method according to claim 14 or 15, The first terminal authentication code, It is generated from the first device and the user authentication medium and the first terminal authentication code generating medium which is a fixed value stored in the terminal for generating the first terminal authentication code, The second terminal authentication code, Characterized in that the second device and the user authentication medium and the second terminal authentication code for generating the second terminal authentication code generating medium stored in the same fixed value as the first terminal authentication code generating medium in the authentication server, characterized in that the generated Device and user authentication system. The method of claim 16, The first terminal authentication code and the second terminal authentication code, Device and user authentication system, characterized in that generated by the CMAC-AES (Cipher-based Message Authentication Code-Advanced Encryption Standard) encryption scheme. The method of claim 17, The terminal and the authentication server, Device and user authentication system characterized in that the device and user authentication using the EAP (Extensible Authentication Protocol). An authentication server that performs device and user authentication according to EAP (Extensible Authentication Protocol) for a terminal performing packet mobile communication. A storage unit storing a device authentication medium, a user authentication medium, and a server authentication code generation medium for the terminal; Random key generation unit for generating a random key; An authentication key generation unit for generating a preliminary authentication key by encrypting the random key and the device authentication medium, and generating a device and a user authentication medium by encrypting the preliminary authentication key and the user authentication medium; An authentication code generator for encrypting the device and the user authentication medium and the server authentication code generation medium to generate a server authentication code; An EAP request message generation unit generating an EAP request message including the random key and the server authentication code; And Transmitting and receiving unit for transmitting the generated EAP request message to the terminal and receives an EAP response message for the EAP request message from the terminal Device and user authentication server comprising a. The method of claim 19, The preliminary authentication key, the device and the user authentication medium, Generated by AES (Advanced Encryption Standard) encryption method. The server authentication code, Device and user authentication server, characterized in that generated by the Cipher-based Message Authentication Code-Advanced Encryption Standard (CMAC-AES) encryption. The method of claim 19, The authentication key generation unit, Generate a message verification agent by encrypting the device and user authentication agent, The authentication code generation unit, Generate a request message authentication code by encrypting the message verification medium and the packet length of the EAP request message, The message generator, And an EAP request message including the random key, the server authentication code, and the request message authentication code. The method of claim 21, The message verification medium, Generated by AES (Advanced Encryption Standard) encryption method. The request message authentication code is, Device and user authentication server, characterized in that generated by the Cipher-based Message Authentication Code-Advanced Encryption Standard (CMAC-AES) encryption. The method of claim 19, The storage unit further stores the terminal authentication code generation medium, A message processing unit which extracts a terminal authentication code from the EAP response message; And The terminal authentication code is generated by encrypting the device and user authentication medium generated by the authentication key generation unit and the terminal authentication code generation medium, and comparing the generated terminal authentication code with the extracted terminal authentication code for the terminal. Authentication unit that performs device and user authentication Device and user authentication server further comprising. The method of claim 23, The terminal authentication code is, Device and user authentication server, characterized in that generated by the Cipher-based Message Authentication Code-Advanced Encryption Standard (CMAC-AES) encryption. The method of claim 21, The message processing unit extracts a response message authentication code from the EAP response message, Generating the response message authentication code by encrypting the message verification medium generated by the authentication key generation unit and the packet length of the EAP response message, and comparing the generated response message authentication code with the extracted response message authentication code. Verification unit to verify the integrity of the response message Device and user authentication server further comprising. The method of claim 25, The response message authentication code is, Device and user authentication server, characterized in that generated by the Cipher-based Message Authentication Code-Advanced Encryption Standard (CMAC-AES) encryption. A terminal that accesses an authentication server through packet mobile communication and performs device and user authentication according to EAP (Extensible Authentication Protocol), A transceiver for receiving an EAP request message from the authentication server and transmitting an EAP response message to the authentication server; A message processing unit which extracts a random key and a server authentication code generated by the authentication server from the EAP request message; A storage unit storing a device authentication medium, a user authentication medium, and a server authentication code generation medium; An authentication key generation unit for generating a preliminary authentication key by encrypting the random key and the device authentication medium, and generating a device and a user authentication medium by encrypting the preliminary authentication key and the user authentication medium; And An authentication unit for generating a server authentication code by encrypting the device and the user authentication medium and the server authentication code generation medium, and performing the device and user authentication by comparing the generated server authentication code and the extracted server authentication code Device and user authentication terminal comprising a. The method of claim 27, The preliminary authentication key, the device and the user authentication medium, Generated by AES (Advanced Encryption Standard) encryption method. The server authentication code, Device and user authentication terminal, characterized in that generated by the CMAC-AES (Cipher-based Message Authentication Code-Advanced Encryption Standard) encryption scheme. The method of claim 27, The message processing unit extracts a request message authentication code from the EAP request message, The authentication key generation unit encrypts the device and the user authentication medium to generate a request message verification medium, Generating a request message authentication code by encrypting the request message verification medium and the packet length of the EAP request message, and verifying the integrity of the EAP request message by comparing the generated request message authentication code with the extracted request message authentication code. Verification unit Device and user authentication terminal further comprising. The method of claim 29, The message verification medium, Generated by AES (Advanced Encryption Standard) encryption method. The request message authentication code is, Device and user authentication terminal, characterized in that generated by the CMAC-AES (Cipher-based Message Authentication Code-Advanced Encryption Standard) encryption scheme. The method of claim 29, The storage unit, The apparatus further stores a terminal authentication code generation medium, generates a terminal authentication code by encrypting the device and the user authentication medium and the terminal authentication code generation medium, encrypts the packet length of the message verification medium and the EAP response message, and generates a response message. Authentication code generation unit for generating an authentication code; And Message generation unit for generating an EAP response message including the terminal authentication code and the response message authentication code generated by the authentication code generation unit Device and user authentication terminal further comprising. The method of claim 31, wherein The terminal authentication code and response message authentication code, Device and user authentication terminal, characterized in that generated by the CMAC-AES (Cipher-based Message Authentication Code-Advanced Encryption Standard) encryption scheme. A method of performing device and user authentication using a single EAP (Extensible Authentication Protocol) message. Generating a preliminary authentication key by encrypting a device authentication medium and a random value; Generating a device and a user authentication medium by encrypting the preliminary authentication key and the user authentication medium; Generating a first device and a user authentication code using the device and a user authentication medium; Extracting a second device and a user authentication code from the received EAP message; And Performing device and user authentication by comparing the first device and user authentication code with the second device and user authentication code Device and user authentication method comprising a. The method of claim 33, wherein The preliminary authentication key and the device and the user authentication medium, Device and user authentication method, characterized in that generated by the AES (Advanced Encryption Standard) encryption method. The method of claim 34, wherein The first device and the user authentication code, CMAC-AES (Cipher-based Message Authentication Code-Advanced) using the device and the user authentication medium as an input key and 'string concatenation of the device authentication medium, the user authentication medium, the random value and the authentication code generation medium' as an input string. Encryption Standard) A device and a user authentication method characterized by being generated by an encryption method. The method of claim 33, wherein Encrypting the device and a user authentication medium to generate a message verification medium; Generating a first EAP message authentication code using the message verification medium and the packet length of the received EAP message; Extracting a second EAP message authentication code from the received EAP message; And Verifying data integrity of the received EAP message by comparing the first EAP message authentication code with the second EAP message authentication code. Device and user authentication method further comprising. The method of claim 36, The message verification medium, Device and user authentication method, characterized in that generated by the AES (Advanced Encryption Standard) encryption method. The method of claim 37, wherein The first EAP message authentication code, Generated by CMAC-AES (Cipher-based Message Authentication Code-Advanced Encryption Standard) encryption method using the message verification medium as an input key and 'string concatenation of the packet length and the random value of the received EAP message' as an input string. Device and user authentication method characterized in that.

Images