KR20070108038A - Authentication method using privacy key management protocol in wireless broadband internet system and thereof system - Google Patents

Abstract

An authentication method using a PKM(Privacy Key Management) protocol in a portable Internet system and a system thereof are provided to reduce a delay time between a mobile terminal and a base station and improve the performance of the whole system by simplifying a process when the mobile terminal reenters a network or performs handover. A mobile terminal(400) transmits a RNG-REQ(Ranging Request) message for requesting access to a base station(402) when reentering a network in an idle state. The base station receives the RNG-REQ message and transmits the RNG-REQ message after including information about security update information in the RNG-REQ message in order to provide continuously a security service to the mobile terminal when it is necessary to update the security information(404).

Description

Authentication method and system using private key management protocol in portable internet system {AUTHENTICATION METHOD USING PRIVACY KEY MANAGEMENT PROTOCOL IN WIRELESS BROADBAND INTERNET SYSTEM AND THEREOF SYSTEM}

1 illustrates a hierarchical structure of a conventional IEEE 802.16e standard;

FIG. 2 is a diagram illustrating a three-stage SA-TEK procedure when a mobile terminal initially enters a network or undergoes reauthentication in an IEEE 802.16e system for better understanding of the present invention;

3 is a diagram illustrating a three-stage SA-TEK procedure when a mobile terminal reenters a handover or a network in an IEEE 802.16e system for better understanding of the present invention;

4 is a flowchart illustrating a three-stage SA-TEK function when a mobile terminal re-enters a network in a handover or idle mode in the portable Internet system according to the first embodiment of the present invention;

5 is a flowchart illustrating a three-stage SA-TEK function when a mobile terminal re-enters a network in a handover or idle mode in a portable Internet system according to a second embodiment of the present invention;

FIG. 6 is a flowchart illustrating a three-stage SA-TEK function when a mobile terminal re-enters a network in a handover or idle mode in the portable Internet system according to the first embodiment of the present invention.

FIG. 7 is a flowchart illustrating a three-stage SA-TEK function when a mobile terminal re-enters a network in a handover or idle mode in a portable Internet system according to a second embodiment of the present invention.

8 is a block diagram of a mobile terminal and a base station in a portable Internet system according to an embodiment of the present invention.

The present invention relates to a method and system for user authentication in a wireless communication system. In particular, a mobile key system uses a private key management protocol (PKM) for handover or reentry of a mobile terminal. A method and apparatus for performing authentication.

In general, a wireless communication system is a system developed for a case in which a fixed wired network cannot be connected to a terminal and used. Representative systems of such wireless communication systems include wireless LAN, WiBro, and mobile ad hoc networks, as well as general mobile communication systems that provide voice and data services.

Recently, due to the rapid development of computer, electronic, and communication technologies and increasing user demand for Internet services, there is an increasing need for a mobile communication system capable of efficiently providing Internet services. The most basic wireless communication service is a wireless voice call service that provides a voice call to a mobile terminal user wirelessly, which can provide a service regardless of time and place. It also supplements voice call service by providing text message service. In addition, there is an increasing demand for a wireless mobile communication system that can efficiently provide wireless Internet services due to the rapid increase in the demand for users' Internet services.

However, such a conventional mobile communication network has been developed mainly for voice service, which has a relatively small data transmission bandwidth, a high base station construction cost, and thus is slow and expensive to use, and there is a limitation of content available due to the small size of the mobile communication terminal. Have The IEEE 802.16 standardization group of the Institute of Electrical and Electronics Engineers (IEEE), one of the international standardization bodies, is a standard for providing wireless broadband Internet services to fixed terminals as IEEE 802.16, 802.16a, and 802.16 standards. The IEEE 802.16d standard, which integrates the b standard, is enacted. At the same time, the IEEE 802.16e standard is being proposed to provide wireless broadband Internet services to mobile terminals by improving IEEE 802.16d.

The IEEE 802.16d and 802.16e standards can transmit large amounts of data in a short time due to the wider bandwidth of data than the conventional wireless technology for voice service, and it is possible for all users to share the channel and use the channel efficiently. . Meanwhile, since the IEEE 802.16d standard is for providing broadband Internet service to a fixed terminal, the mobility of the terminal is not considered, and the IEEE 802.16e standard for providing broadband Internet service to a mobile terminal is also based on the IEEE 802.16d base. Currently, various service functions are lacking, including security functions for mobile terminals. Let's learn more about IEEE 802.16e.

IEEE 802.16e has established standards to provide wireless broadband Internet services for mobile terminals, and has a 2.3 GHz operating frequency band, orthogonal frequency division multiplexing (OFDM), orthogonal frequency division multiple access (OFDMA), and single carrier modulation (Single). The specification for Carrier Modulation) is presented. As a result, the data bandwidth is wider than that of the conventional voice service wireless technology, and thus a large amount of data can be transmitted in a short time, and the channel can be efficiently used.

Hereinafter, the hierarchical structure of the conventional IEEE 802.16e standard with respect to user information protection (authentication) will be briefly described.

1 is a diagram illustrating a hierarchical structure of the conventional IEEE 802.16e standard.

The IEEE 802.16e layer of FIG. 1 is largely composed of the MAC layer 110 and the PHY layer 120 which are the physical layers, and a plurality of management planes 130a and 130b that manage the MAC layer 110 and the PHY layer 120. , 130c). The MAC layer 110 is responsible for security functions for the Service Specific Convergence Sublayer (CS) 111, the MAC Common Part Sublayer (MAC CPS) 112, and the mobile terminal. The security sublayer (SS) 113 is divided into, each layer is interconnected through a service access point (SAP). The MAC layer 110 defined in IEEE 802.16e is characterized in that the MAC common auxiliary layer 112 and the security auxiliary layer 113 are connected to each other like the MAC layer structure defined in IEEE 802.16d.

The service acquiring auxiliary layer (CS) 111 performs a function of converting a service protocol such as digital audio / video multicast, digital telephone, Internet access, etc. to conform to the 802.16e MAC protocol. The MAC Common Aid Layer (MAC CPS) 112 performs a function of creating a frame to transmit and receive data and control access to a shared wireless medium, and according to a MAC protocol defining how and when a base station or subscriber starts transmission and reception. Control the flow of data and control signals. The PHY layer 120 is responsible for a frequency band, a modulation scheme, an error correction technique, synchronization between a base station and a mobile terminal, data rate, and frame structure for wireless transmission of data and control signals.

The SS 113 has a key management protocol that encrypts / decrypts packet data adjacent to the PHY layer 120 and manages and transmits key related information for user authentication and message authentication to allow legitimate user network entry. (PKM) function. The PKM protocol facilitates mutual authentication of the terminal and the base station as well as distribution of traffic keying material from the base station to the mobile terminal. In addition, it supports periodic reauthentication / reauthorization and key refresh. The PKM establishes a shared secret (AK) between the mobile station and the base station through authentication. This AK is used to generate a key for message authentication and a key for encrypting a Traffic Encryption Key (TEK).

The base station can allow the access of the subscriber by authenticating the mobile terminal or the user, and protects it from an attacker using the mobile terminal by impersonating a legitimate subscriber. The terminal attempts periodic re-authentication and key refreshing to obtain authentication and traffic keying material from the base station. PKMv2 of IEEE 802.16e provides authentication based on RSA (Rivest Shamir Adleman) and Extensible Authentication Protocol (EAP).

RSA authentication belongs to terminal authentication using X.509 certificate, EAP is mostly user authentication, and there is a method of terminal authentication. RSA certification does not always need to go online, but requires a CA (Certificate Authority) that provides an X.509 certificate, and requires modular exponentiation calculations, which requires a lot of resources such as CPU and power for encryption and decryption. On the other hand, EAP belonging to user authentication requires AAA (Authentication, Authorization, Accounting) server to be connected at all times, and the number of messages sent / received is higher than that of RSA.

When a valid AK is shared through RSA or EAP authentication, SA-TEK 3-way handshake, SA-TEK challenge, SA-TEK SA-TEK Request and SA-TEK Response are performed. When the mobile terminal reenters or hands over the network in the portable Internet system, the SA-TEK 3-step procedure is not performed quickly. You need a way to access the network.

The present invention relates to a method and apparatus for simplifying an authentication procedure when a mobile terminal reenters a handover or a network in a portable internet system.

In the mobile communication system according to the present invention, a system for authentication between a base station and a mobile terminal includes a mobile terminal for transmitting a ranging request (RNG-REQ) message to the base station to access the base station when reentering the network in an idle state. And in order to continue providing security service to the mobile terminal when updating of security association information for continuously providing security service to the mobile terminal after receiving the ranging request message. It includes the base station for transmitting the information indicating that the associated update information is included in the ranging response (RNG-RSP) message.

In the mobile communication system according to the present invention, a system for authentication between a base station and a mobile terminal includes: a mobile terminal transmitting a ranging request (RNG-REQ) message to the base station to access the base station when reentering the network in an idle state; And when security association information and a traffic encryption key (TEK) need to be updated to authenticate the mobile terminal after receiving the ranging request message. And a base station for transmitting a ranging response (RNG-RSP) message including predetermined information indicating an update of a traffic encryption key to the mobile terminal.

In the mobile communication system according to the present invention, a method for authentication between a base station and a mobile terminal includes transmitting a ranging request (RNG-REQ) message to the base station to access the base station when the mobile terminal reenters the network in an idle state. And if the base station receives the ranging request message and updates the security association (SA) information for continuously providing the security service to the mobile terminal, the mobile station continues to provide the security service to the mobile terminal. And transmitting information indicating whether to update the security related information in a ranging response (RNG-RSP) message, and when the mobile terminal receives the ranging response message, the security association (Session Association). : Updates security-related (SA) information when information indicating whether to update SA information is included. It includes.

In the mobile communication system according to the present invention, a method for authentication between a base station and a mobile terminal includes transmitting a ranging request (RNG-REQ) message to the base station to access the base station when the mobile terminal reenters the network in an idle state. And informing that the security related information and the traffic encryption key are updated after the base station receives the ranging request message, when the security association information and the traffic encryption key are required to be renewed. Transmitting a ranging response (RNG-RSP) message including predetermined information to the mobile terminal, and when the mobile terminal receives the ranging response message, the security related information and the traffic encryption key. Updating the security-related information and the traffic encryption key when the information for renewing is set; The.

In the mobile communication system according to the present invention, a method for a mobile terminal to be authenticated by a base station includes a ranging request (RNG-REQ) message for requesting access to the base station from the base station when the mobile terminal is in a handover situation. Transmitting information and, when receiving a ranging response (RNG-RSP) message from the base station, whether the ranging response message includes information (SAID_Update TLV) indicating update of security association (SA) information; And updating security related information based on the information indicating the update of the security related information, if the inspection result includes the information SAID_Update TLV indicating the update of the security related information. .

In the mobile communication system according to the present invention, a method for a mobile terminal to be authenticated by a base station includes a ranging request (RNG-REQ) message for requesting access to the base station from the base station when the mobile terminal is in a handover situation. Transmitting a security response (SA) information and a traffic encryption key (TEK) in the ranging response message when receiving a ranging response (RNG-RSP) message from the base station. Checking whether the SA-TEK Update TLV is included, and if the result of the check includes the SA-TEK Update TLV, the SA-TEK Update TLV is updated. Updating the security-related information and the traffic encryption key based on the information and the information indicating the encryption key update.

In the mobile communication system according to the present invention, a mobile terminal apparatus for receiving authentication from a base station transmits a ranging request (RNG-REQ) message for requesting access to the base station and receives a ranging response (RNG-RSP) from the base station. A transceiver for receiving the message, and checking whether the ranging response message includes information (SAID_Update TLV) indicating update of security association (SA) information, and if so, instructing update of the security related information. And a controller for updating the security related information based on the information.

In the mobile communication system according to the present invention, a mobile terminal apparatus for receiving authentication from a base station transmits a ranging request (RNG-REQ) message for requesting access to the base station and receives a ranging response (RNG-RSP) from the base station. A transmission / reception unit for receiving a message and whether the ranging response message includes information (SAID_Update TLV) indicating update of security association (SA) information, and a security check result in the ranging response message. Checks whether the relevant information and the information indicating the update of the Traffic Encryption Key (SA-TEK Update TLV) are included, and the result of the check includes the information indicating the security-related information and the update of the traffic encryption key. The security-related information and the security-related information based on the security-related information and the information instructing to renew the traffic encryption key. And a control unit for updating the traffic encryption key.

Hereinafter, embodiments of the present invention will be described with reference to the accompanying drawings. In the following description of the present invention, when it is determined that a detailed description of a related known function or configuration may unnecessarily obscure the subject matter of the present invention, the detailed description thereof will be omitted.

FIG. 2 illustrates a security association-traffic encryption key (hereinafter referred to as “SA-TEK”) for mobile terminal initial entry into a network or reauthentication in an IEEE 802.16e system to facilitate understanding of the present invention. Is a diagram illustrating a three-step procedure.

In FIG. 2, a mobile station (MS) 200 and a base station (BS) 210 perform a SA-TEK challenge (AKID) 220 and a SA-TEK request. SA-TEK 3-way handshake (AKID, Security Capabilities) (230), SA-TEK Response (AKID, SA Descriptor) 240 Reconfirm the security matters negotiated through SBC-REQ / RSP, negotiate the actual encryption method of the traffic data and traffic encryption key ("TEK"), and Share information).

SA-TEK Request (230) message before counting all the SA ChallengeTimer in response to the SA-TEK Challenge (220) message sent by the base station (210) If it does not receive the SAChallengeMaxResends attempts to retransmit (222). If the SA-TEK Response 240 message is not received in the SATEK Timer SATEKTimer in response to the SA-TEK Request 230 message transmitted by the mobile station, SATEKRequestMaxResends. Attempt retransmission 232.

FIG. 3 is a diagram illustrating a three-stage SA-TEK procedure when a mobile terminal reenters a handover or a network in an IEEE 802.16e system for better understanding of the present invention.

3 illustrates that when the mobile terminal 200 attempts handover or network reentry as shown by reference numeral 300, the base station 210 performs handover process optimization of a ranging response (RNG-RSP) message in step 302 (HO process optimization). ) Shows the procedure proposed by IEEE 802.16e when transmitting by setting bit # 1 (Omit PKM Authentication phase except TEK phase during current re-entry Processing) of TLV to 1.

In step 302, the base station 210 attaches and sends a SA challenge tuple serving as a SA-TEK challenge message to a ranging response (RNG-RSP) message and transmits a SA challenge timer ( SAChallengeTimer (with handover and network re-entry) has a SA challenge timer (SAChallengeTimer) longer than the initial network connection or re-authentication. When the base station 210 receives the SA-TEK Request 308 message from the mobile terminal 200 before the SA challenge timer 304 is terminated, the operation of the SA Challenge Timer 304 is performed. To exit.

If the SA-TEK request 308 message is not received even after the operation of the SA challenge timer 304 is terminated, the base station 210 initializes reauthentication or the mobile terminal 200 for the corresponding mobile terminal 200. Exclude from service provision.

When the ranging procedure is terminated (RNG-REQ / RSP), the negotiation procedure (SBC-REQ / RSP) is performed in step 306. However, when the network reentry or handover is performed in idle mode, it may be omitted depending on circumstances. The negotiation process is separate from the 306 SA-TEK phase 3.

In step 308, the mobile terminal 200 receiving the ranging response (RNG-RSP) message including the SA Challenge Tuple transmits a SA-TEK Request message. The mobile terminal 200 transmits a SA-TEK Request 308 message and simultaneously drives a SATEK timer SATEKTimer 307. The mobile terminal 200 terminates the operation of the SATEK timer SATEKTimer 307 when it receives the SA-TEK Response 312 message in the SATEK timer 310.

If the mobile terminal 200 does not receive the SA-TEK Response 312 message in the SATEK timer 310, the mobile terminal 200 retransmits the SA-TEK Request message, and the SATEKTimer. Restart 307. If there is no response after retransmission by SATEKRequestMaxResends 310, the mobile terminal 200 initializes reauthentication or attempts to access another base station.

Finally, in step 312, the base station 210 receiving the SA-TEK Request (308) message transmits a SA-TEK Response (SA-TEK Response) message, and the mobile station 200 transmits the SA-TEK Response. The SA-TEK 3-step procedure is terminated by safely receiving a SA-TEK Response message.

When the # 1 (second bit) of the ranging response (RNG-RSP) message handover process optimization (LV) field of step 302 is set to "1" in FIG. 3, the following meaning has the following meaning. . In the handover or network reentry process of the mobile terminal 200, authentication information related to AK is transmitted to a target base station (a base station to which the mobile terminal intends to handover or reenter the network) through a backbone between base stations. It means to skip the procedure. The authentication procedure defined in IEEE 802.16e means user authentication or terminal authentication based on EAP or RSA and generation of an authentication key (AK).

Therefore, when the mobile terminal 200 performs handover or reenters the network in Idle mode, if bit # 1 of the HO process optimization field is set to 1, a process for security between the mobile terminal 200 and the base station 210 is performed. Start with the SA-TEK 3-way handshake. The main purpose of the SA-TEK 3-step procedure in handover and network re-entry is the SA sharing between the base station 210 and the mobile terminal 200. The SA includes information on connection (unicast, multicast, multicast broadcast service (MBS), service type and algorithm for traffic encryption.

However, IEEE 802.16e presents a security-related identifier update (SAID_update) field in a type length value (TLV) list of a ranging response (RNG-RSP) message. The SAID_Update field is defined as a field for updating the SA so that the mobile terminal continues to provide security service from the new base station after the handover.

Therefore, when the mobile station 200 needs to update the SA between the base station 210 and the mobile station 200 in the process of handover or network reentry, the SA-TEK 3-step procedure defined in IEEE 802.16e is used for ranging response (RNG-). RSP) duplicates the SAID_update (SA Identifier_update) field of the message, so the above-described steps are performed once more. In addition, if a base station needs to update not only the SA but also the TEK, the SA-TEK Update TLV included in the SA-TEK Response message is attached instead of the SA Challenge Tuple defined in the general IEEE 802.16e. In this case, the 3-step procedure of SA-TEK can be omitted. In this case, the SA-TEK Update TLV is a field required for the mobile station to update the TEK as well as the SA in order to maintain security service to the new base station after the handover.

Before describing the present invention, the present invention has been briefly described in two ways as follows. First, when SA (Security Association) information is required to be updated, SAID_Update instead of SA Challenge Tuple of ranging response (RNG-RSP) message is included and transmitted. Omit the procedure.

Second, when renewing SA and Traffic Encryption Key (TEK) is needed, the concept of adding SA Challenge Tuple to ranging response (RNG-RSP) message in general IEEE 802.16e portable Internet system In the present invention, the SA-TEK Update TLV included in the SA-TEK Response message is transmitted instead of the SA Challenge Tuple. This allows the base station to simply send a ranging response (RNG-RSP) message without performing the SA-TEK 3-way handshake, eliminating unnecessary steps in network reentry or handover situations. have.

FIG. 4 is a flowchart illustrating a three-stage SA-TEK function when a mobile terminal re-enters a network in a handover or idle mode in the portable Internet system according to the first embodiment of the present invention.

Referring to FIG. 4, in step 404, the mobile terminal 400 performs network reentry and handover with the base station 402 through a ranging request (RNG-REQ) message. In step 406, the base station 402 performs a lane. Transmit by setting bit # 1 (Omit PKM Authentication phase except TEK phase during current re-entry Processing) of HO process optimization TLV in RNC-RSP message to 1, and in ranging response (RNG-RSP) message Transmit without inserting SA Challenge Tuple. The mobile terminal 400 checks whether the security response identifier update (SAID_update) field is included in the ranging response message received in the network reentry and handover state, and processes the update of the SAID when the security identification identifier update (SAID_update) is included. The main function of the existing three-step SA-TEK procedure is performed. That is, the base station 402 can omit steps 304 and 307 to 312 of FIG. 3 by transmitting the SA challenge tuple without inserting an SA challenge tuple into a ranging response (RNG-RSP) message in step 406. .

5 is a flowchart illustrating a three-stage SA-TEK function when a mobile terminal re-enters a network in a handover or idle mode in the portable Internet system according to the second embodiment of the present invention. In a typical IEEE 802.16e system, as in step 500, when a mobile terminal attempts to reenter a network from a handover or idle mode through a ranging request (RNG-REQ) message, an SA challenge is applied to a ranging response (RNG-RSP) message. Continue with the SA-TEK three-step process by adding a SA Challenge Tuple.

The SA-TEK Response (SA-TEK Response) message of the three-step SA-TEK procedure includes an element that the base station informs the UE of the SA and TEK update. Therefore, according to the second embodiment of the present invention, the SA-TEK Update TLV of the SA-TEK Response message is attached to the ranging response (RNG-RSP) message so that the SA and TEK can be updated simultaneously. The three-step SA-TEK procedure is omitted. Therefore, the base station 402 can process the main function of the SA-TEK 3-step procedure only by transmitting a ranging response (RNG-RSP) message including the SA-TEK Update TLV. That is, in FIG. 5, the base station 402 attaches the SA-TEK Update TLV to the ranging response (RNG-RSP) message in step 502 and transmits it, thereby omitting steps 304 and 307 through 312 of FIG. 3.

FIG. 6 is a flowchart illustrating a three-stage SA-TEK function when a mobile terminal re-enters a network in a handover or idle mode in the portable Internet system according to the first embodiment of the present invention.

Referring to FIG. 6, the mobile terminal performs network reentry and handover with a base station through a ranging request (RNG-REQ) message in step 602, and bit # 1 (Omit PKM Authentication) of HO process optimization TLV in step 604. Receive a ranging response (RNG-RSP) message with phase except TEK phase during current re-entry Processing set to 1. In step 606, the SAID_update TLV field indicating security-related information update of a ranging response (RNG-RSP) message is checked. If a SAID-Update TLV is included in the ranging response message, the SAID_update TLV field is defined in the SAID-Update TLV field. As described above, the SA of the mobile terminal is updated.

On the other hand, if the SAID_update TLV field is not included in the check result of step 606, the mobile station determines whether an SA challenge tuple is attached in step 610. If it is determined that there is no SA Challenge Tuple, the process ends the three-step SA-TEK process, and if the SA Challenge Tuple is confirmed, the process proceeds to step 612 and the existing IEEE 802.16e as shown in FIG. Performs a three-step SA-TEK procedure.

FIG. 7 is a flowchart illustrating a three-stage SA-TEK function when a mobile terminal re-enters a network in a handover or idle mode in the portable Internet system according to the second embodiment of the present invention.

Referring to FIG. 7, the mobile terminal performs network reentry and handover with a base station through a ranging request (RNG-REQ) message in step 702, and bit # 1 (Omit PKM Authentication) of HO process optimization TLV in step 704. Receive a ranging response (RNG-RSP) message with phase except TEK phase during current re-entry Processing set to 1.

In step 706, the mobile station checks whether the ranging response message includes SA-TEK Update TLV, which is security related-traffic encryption key update indication information, and proceeds to step 708. In step 708, the mobile station checks the SA-TEK Update TLV, updates the SA and the TEK already stored based on the SA-TEK Update TLV, which is the security related-traffic encryption key update indication information of the ranging response message, and ends. do. On the other hand, if the SA-TEK Update TLV cannot be confirmed in the ranging response (RNG-RSP) message received as a result of the check of step 706, the SA-TEK step 3 procedure is terminated.

8 is a block diagram of a mobile terminal 400 and a base station 402 in a portable Internet system according to an embodiment of the present invention.

The transmitter / receiver 400b of the mobile terminal 400 performs wireless communication with the base station 402, demodulates the received signal, provides the control signal to the controller 400a, modulates the signal generated by the controller 400a, and then codes it. Transmit to base station 402 via an antenna. The controller 400a generates and transmits a ranging request (RNG-REQ) message to be transmitted to the base station 402 when reentering the network or a handover situation occurs.

According to the first embodiment of the present invention, after the mobile terminal 400 transmits a ranging request (RNG-REG) message to the base station 402, the ranging response (RNG) not including an SA challenge tuple (SA Challenge Tuple) Upon receiving the -RSP) message, the control unit 400a updates the SA indicated by the SAID_update field without performing a 3-way handshake performed by a general IEEE 802.16e system. On the other hand, when the SA Challenge Tuple receives the ranging response (RNG-RSP) message set, the controller 400a performs the three-step procedure.

According to the second exemplary embodiment, the control unit 400a transmits a ranging request (RNG-RSP) including a SA-TEK Update TLV from the base station 402 after transmitting a ranging request (RNG-REG) message to the base station 402. Upon receipt of the message, it updates the SA and TEK and does not perform the three step procedure.

In the base station 402, the transceiver 402a communicates with the mobile terminal 400 wirelessly, demodulates and decodes a signal received from the mobile terminal 400, and provides the demodulated signal to the scheduler and the controller 402b or the scheduler and controller ( The signal generated in 402b is encoded and then modulated and transmitted to the mobile terminal 400 through an antenna.

According to an embodiment of the present invention, the scheduler and the controller 402b may use a SA challenge tuple of a ranging response (RNG-RSP) message when the mobile terminal 400 reenters the network in a handover state or an idle mode. In this case, a three-step SA-TEK procedure with the mobile terminal 400 may be omitted. When a change in the SAID is required according to the first embodiment, a security-related identifier is updated in a ranging response (RNG-RSP) message. SAID_update) field is transmitted. On the other hand, when the TEK needs to be changed, a ranging response (RNG-RSP) message in which the SA Challenge Tuple is set is transmitted to the mobile terminal 400 to perform the three-step procedure. In addition, according to the second embodiment, the scheduler and the controller 402b transmit a ranging response (RNG-RSP) message including a SA-TEK Update TLV to the mobile terminal 400 when the SA and the TEK need to be updated. 400) may update the SA and TEK, and may omit the SA-TEK 3-step procedure.

Looking at the improvement method according to the embodiments of the present invention as described above are as follows. First, in the first embodiment of the present invention, when the mobile terminal 400 is performing reentry or handover from the idle mode to the network, and the second bit # 1 of the HO process optimization field is 1, the base station 402 is If there is no update of the TEK in the ranging response (RNG-RSP) message sent, and there is an update of the SA, the typical SA-TEK three-step procedure function is the base station 402 is the SA challenge in the ranging response (RNG-RSP) message The SA Challenge Tuple may be omitted and replaced using a security-related identifier update (SAID_update) field.

In the second embodiment of the present invention, instead of performing a three-stage SA-TEK procedure between the mobile station 400 and the base station 402, the base station 102 may send a SA- message to a ranging response (RNG-RSP) message. By attaching and performing the TEK Update TLV, the mobile terminal 400 may increase the execution efficiency for reentry or handover into the network in the idle mode.

By doing so, the base station 202 in general IEEE 802.16e transmits a ranging response (RNG-RSP) message, the mobile terminal 200 transmits a SA-TEK Request message, and the base station 202 (3) process of transmitting a SA-TEK response message may be performed by transmitting only a ranging response (RNG-RSP) message from the base station 402 according to the first and second embodiments. This speeds up handover or network re-entry.

In a typical IEEE 802.16e system, a mobile station receives a ranging response (RNG-RSP) message, sends a SA-TEK request message, and then sends a SA-TEK response message from a base station. It must be received, but there is a possibility of a message loss. If a message loss occurs, it may take more time (maximum (SATEKTimer (time counted by SATEK timer)) x (SATEKRequestMaxResends-1) + α). In this case, SATEKTimer is a time that a mobile terminal waits to retransmit the message after sending a SA-TEK request message and if it does not receive a SA-TEK response message within this time, the SA Resend the TEK request message. For reference, the standard defines "Time Prior to re-send of SA-TEK Request (in seconds)". If SA-TEK response message is not received within the time counted by the SATEK timer, the SA-TEK request message is retransmitted. . SATEKRequestMaxResends is the maximum number of retransmissions of SA-TEK Request messages, where 0≤α <SATEKTimer.

Therefore, in the embodiment of the present invention, since the base station only needs to transmit a ranging response (RNG-RSP) message, the base station may occur in the transmission and reception of the SA-TEK Request and SA-TEK Response messages. Delays can be prevented.

Another effect of the present invention is to increase the probability of handover success when the mobile terminal performs handover due to the fast processing speed on the system. In general, in a mobile communication system, message loss may occur at a cell boundary, and thus message retransmission may occur. The timer for receiving a SA-TEK Request message and a SA-TEK Response message proposed by the IEEE 802.16e system has a relatively large value. Therefore, when a message is lost, a relatively long delay time due to retransmission increases the probability that a mobile terminal located at a cell boundary can leave the cell before terminating handover or before network reentry in idle mode is completed. . In this process, the mobile station loses synchronization and must reconnect to the network. In the embodiment of the present invention, as described above, the handover may not be performed again, and delay time due to network reconnection, which occurs when the mobile terminal loses synchronization, may be prevented.

As described above, by simplifying the procedure in the case of reentry or handover of the mobile terminal into the network, the delay time between the mobile terminal and the base station can be reduced, thereby improving the performance of the entire system.

Claims (24)

In a system for authentication between a base station and a mobile terminal in a mobile communication system, A mobile terminal for transmitting a ranging request (RNG-REQ) message to the base station to request access to the base station when reentering the network in an idle state; After receiving the ranging request message, if security update is required to update security association information to continue providing security service to the mobile terminal, the security related update to continue providing security service to the mobile terminal. And a base station for transmitting information indicating that information is included in a ranging response (RNG-RSP) message. According to claim 1, The information for the base station to provide a security service to the mobile terminal is a private key management protocol in a portable Internet system, characterized in that the Session Association Identifier_Update (TLV) Type Length Value (TLV) field for authentication of the terminal. Used authentication system. The method of claim 2, The base station transmits excluding a security related challenge tuple including attributes of a security related-traffic encryption key challenge message in the ranging response message, using a private key management protocol in a portable internet system. Authentication system. According to claim 1, And the mobile terminal transmits the ranging request message in a handover situation. According to claim 1, And the base station transmits the ranging response message by setting the second bit of the hand off process optimization field to "1" and transmitting the second bit in the ranging response message. In a system for authentication between a base station and a mobile terminal in a mobile communication system, A mobile terminal for transmitting a ranging request (RNG-REQ) message to the base station in order to access the base station when reentering the network in an idle state; After the ranging request message is received, if the security association information and the traffic encryption key (TEK) need to be renewed to authenticate the mobile terminal, the security related information and the traffic encryption key are updated. And a base station for transmitting a ranging response (RNG-RSP) message including the predetermined information to the mobile terminal to inform the mobile terminal. The method of claim 6, The predetermined information included in the ranging response message by the base station is a security association traffic encryption key update TLV (Security Association Traffic Encryption Key Update Type Length Value) authentication system using a private key management protocol in a portable Internet system. . The method of claim 6, And the mobile terminal transmits the ranging request message in a handover situation. The method of claim 6, And the base station transmits by setting the second bit of the handover process optimization field of the ranging response message to "1". A method for authentication between a base station and a mobile terminal in a mobile communication system, Transmitting a ranging request (RNG-REQ) message to the base station to access the base station when the mobile terminal reenters the network in an idle state; When the base station receives the ranging request message and needs to update security association (SA) information for continuously providing a security service to the mobile terminal, the security for continuing to provide a security service to the mobile terminal. Including information indicating whether related information is updated in a ranging response (RNG-RSP) message and transmitting the same; And when the mobile terminal receives the ranging response message, updating information related to security (SA) when information indicating whether to update the session association (SA) information is included. Authentication method using a private key management protocol in a portable Internet system. The method of claim 10, Information indicating whether to update the security association (SA) information is a security association identifier (Session Association Identifier_Update) field for authentication of the mobile terminal. Way. The method of claim 11, wherein The base station further includes the step of transmitting a security related challenge tuple (SA Challenge Tuple) including the attributes of a security-related-encryption key challenge message in the ranging response message. Authentication method using key management protocol. The method of claim 10, The mobile terminal further comprises the step of transmitting the ranging request message in a handover situation, the authentication method using a private key management protocol in a portable Internet system. A method for authentication between a base station and a mobile terminal in a mobile communication system, Transmitting a ranging request (RNG-REQ) message to the base station to access the base station when the mobile terminal reenters the network in an idle state; After the base station receives the ranging request message, if the security association information and the traffic encryption key are required to be renewed, predetermined information for updating the security related information and the traffic encryption key is provided. Transmitting a ranging response (RNG-RSP) message to the mobile terminal; And when the mobile terminal receives the ranging response message, when the security related information and the information for renewing the traffic encryption key are set, updating the security related and traffic encryption key. Authentication method using private key management protocol in Internet system. The method of claim 14, And the predetermined information is a security related (SA) and a traffic encryption key (SA-TEK Update TLV) field. The method of claim 14, The mobile terminal further comprises the step of transmitting the ranging request message in a handover situation, the authentication method using a private key management protocol in a portable Internet system. A method for a mobile terminal to authenticate with a base station in a mobile communication system, Transmitting a ranging request (RNG-REQ) message for requesting access to the base station to the base station when the mobile terminal is in a handover situation; When receiving a ranging response (RNG-RSP) message from the base station, checking whether the ranging response message includes information (SAID_Update TLV) indicating update of Security Association (SA) information; , And if the check result includes the information SAID_Update TLV indicating the update of the security related information, updating the security related information based on the information indicating the update of the security related information. Authentication method using private key management protocol in system. The method of claim 17, And transmitting a ranging request (RNG-REQ) message for requesting access to the base station to the base station when the mobile terminal re-enters the network. Authentication method used. A method for a mobile terminal to authenticate with a base station in a mobile communication system, Transmitting a ranging request (RNG-REQ) message for requesting access to the base station to the base station when the mobile terminal is in a handover situation; When receiving a ranging response (RNG-RSP) message from the base station, information indicating security association (SA) information and a traffic encryption key (TEK) update in the ranging response message (SA-). TEK Update TLV) is included, If the check result includes the security-related information and the information indicating the update of the traffic encryption key (SA-TEK Update TLV), the security-related information and the traffic encryption key are based on the security-related information and the information indicating the update of the encryption key. Authentication method using a private key management protocol in a portable Internet system, characterized in that it comprises the step of updating the. The method of claim 19, And transmitting a ranging request (RNG-REQ) message for requesting access to the base station to the base station when the mobile terminal re-enters the network. Authentication method used. A mobile terminal apparatus for receiving authentication from a base station in a mobile communication system, A transceiver for transmitting a ranging request (RNG-REQ) message for requesting access to the base station and receiving a ranging response (RNG-RSP) message from the base station; Examine whether the ranging response message includes information (SAID_Update TLV) indicating update of Security Association (SA) information, and if included, security related information based on information indicating update of security related information. Authentication apparatus using a private key management protocol in a portable Internet system, characterized in that it comprises a control unit for updating. The method of claim 21, The control unit performs a three-step SA-TEK procedure defined in IEEE 802.16e if the ranging response message does not include information indicating update of the security related information. Authentication device using private key management protocol. A mobile terminal apparatus for receiving authentication from a base station in a mobile communication system, A transceiver for transmitting a ranging request (RNG-REQ) message for requesting access to the base station and receiving a ranging response (RNG-RSP) message from the base station; Examine whether the ranging response message includes information (SAID_Update TLV) indicating update of Security Association (SA) information, and the security response information and traffic encryption key (Traffic) are included in the ranging response message. Encryption Key) Checks whether the information indicating the update (SA-TEK Update TLV) is included, and if the result of the check includes the information indicating the security-related information and the traffic interaction key update, the security-related information and traffic An authentication device using a private key management protocol in a portable Internet system, comprising a control unit for updating security-related information and a traffic encryption key based on information instructing update of an encryption key. The method of claim 23, wherein The controller performs a three-step SA-TEK procedure defined in IEEE 802.16e if the ranging response message does not include the security related information and the information indicating the update of the traffic encryption key. Authentication device using private key management protocol in Internet system.

Images