WO2011015060A1

WO2011015060A1 - Extensible authentication protocol authentication method, base station and authentication server thereof

Info

Publication number: WO2011015060A1
Application number: PCT/CN2010/072054
Authority: WO
Inventors: 张正阳
Original assignee: 中兴通讯股份有限公司
Priority date: 2009-08-05
Filing date: 2010-04-22
Publication date: 2011-02-10
Also published as: CN101635923A

Abstract

The present invention provides an Extensible Authentication Protocol (EAP) authentication method which includes: when a Mobile Subscriber Station (MSS) hands over from a current serving base station to a target base station, a Traffic Encryption Key (TEK) shared between said MSS and said serving base station is sent to an Authentication Server (AS) for backup before said handover; said AS sends said backed up TEK to said target base station at the time of said handover; and said MSS establishes a trust relationship with said target base station after said handover is completed, and said MSS and said target base station use said TEK to perform secure communication services; thereby a fast handover is realized. The present invention also provides an authentication server supporting EAP authentication and a base station thereof.

Description

Scalable authentication protocol authentication method, base station and authentication server

Technical field

The present invention relates to a mobile communication network authentication technology, and in particular to an EAP (Extensible Authentication Protocol) authentication method, a base station, and an authentication server that support fast handover in a high-speed motion scenario.

Background technique

With the rapid development of mobile communication technologies, in addition to providing basic voice services, mobile communication systems will also provide multimedia services such as multimedia, e-commerce, and online banking. These businesses are based on information security and cybersecurity.

The security mechanism of a mobile communication system is generally divided into two parts: identity authentication and key negotiation and encryption. The encryption technology is the core of secure communication, and identity authentication and key agreement are important guarantees for secure communication and protection of users and operators.

EAP is a public key algorithm based authentication authentication technology, which provides

(Subscriber Identity Module, User Identity Module) / USIM card, digital certificate, username/password mode, etc., including EAP-SIM, EAP-ATA, EAP-TLS, EAP-MSCHAPv2, etc. The certification and authorization model is shown in Figure 1. There are three entities in the authentication system: requester, authenticator, and authentication server. In EAP authentication, the actual authentication work is performed between the requester and the authentication server. The authenticator is between the requester and the authentication server. Its role is to forward the authentication information between the requester and the authentication server. The authentication message is encapsulated in the EAP protocol packet, and the EAP packet is encapsulated in a MAC (Media Access Control) layer PKM (Private Key Management) message between the requester and the authenticator. between the authenticator and the authentication server, the EAP packets are encapsulated into the other top AAA (authentication _{_¾} authorization _¾ Accounting, authentication, authorization, and Hutchison shell length) authentication protocol (e.g. Radius) transmitted.

In the mobile communication system shown in FIG. 1, a mobile terminal station (Mobile Subscriber Station, MSS for short) is a requester, and a base station (BS) is a base station. The authenticator, Authentication Server (AS), is the authentication server.

The EAP protocol uses a public key cryptosystem to establish a secure channel shared between the base station and the terminal. The shared secure channel then provides security for the TEK (Traffic Encryption Key) exchange. This two-layer mechanism of key distribution is designed so that when the TEK is updated, it will not cause excessive system load due to the impact of a large amount of public key operations.

Mobile broadband communication systems all need mobile communication services that support vehicle speed. In the process of MSS movement, it is inevitable to switch between BSs. The length of handover time seriously affects the communication quality of MSS during handover, in order to prevent switching time. The long cause of dropped calls or degraded service quality, MSS must perform fast switching and authentication.

As shown in the schematic diagram of network authentication and authorization during fast handover as shown in FIG. 2, the entire handover process involves four entities: a mobile terminal MSS, a current serving BS, a target BS, and an authentication server (or an authentication server, referred to as AS). During the handover process, the MSS usually re-enters the network with the target BS. The target BS needs to re-confirm the trust relationship with the MSS. Because the complexity of different authentication mechanisms is different, the length of the authentication time is different. The MSS must quickly establish a trust relationship with the target BS.

The traditional handover authentication method is: Before the MSS handover, a complete authentication is performed by the serving BS and the target BS, and a new AK (Authentication Key) and TEK are negotiated between the MSS and the target BS and then executed. Switch. Such switching is often caused by too long authentication time, which leads to different degrees of communication service quality after the establishment of a new trust relationship, especially for services with strong real-time requirements, such as voice, video, videophone, etc. More serious, users can see the problem of declining service quality such as pauses and interruptions. Therefore, in order to ensure the quality of service, it is necessary to provide a network authentication method that can support fast handover.

Summary of the invention

The technical problem to be solved by the present invention is to provide an extensible authentication protocol authentication method, a base station, and an authentication server, which can support fast handover in a high-speed motion scenario.

In order to solve the above problems, the present invention provides an extensible authentication protocol authentication method, which includes Include: when the mobile terminal (MSS) switches from the current serving base station to the target progress, before the handover, the service encryption key (TEK) shared by the MSS and the serving base station is sent to the authentication server ( AS) backup;

At the time of the handover, the AS sends the backed up TEK to the target base station; and after the handover is completed, the MSS establishes a trust relationship with the target base station, the MSS and the target base station Using the TEK for secure communication services;

Thereby achieving fast switching.

The step of establishing a trust relationship between the MSS and the target base station includes: sending, by the MSS, an authentication request message that includes a digital certificate of the MSS to the target base station, requesting access to the target base station;

After receiving the authentication request message, the target base station sends the digital certificate to the AS for validity verification;

And if the digital certificate passes the validity verification, the target base station sends an authentication response message to the MSS, and includes an authentication key (AK) in the authentication response message, thereby verifying with the MSS. The certificate establishes a trust relationship.

The method further includes, if the digital certificate authentication fails the validity verification, the target base station rejects the MSS access.

The method further includes: after the MSS establishes a trust relationship with the target base station, the target base station transmits the TEK to the MSS by using the AK encryption; and the MSS obtains the TEK according to the AK decryption. .

The MSS includes a microwave access global interworking (WiMAX) terminal.

The present invention also provides an authentication server (AS) supporting scalable authentication protocol authentication, the AS setting being:

Receiving, by the serving base station, a service encryption key (TEK) shared by the serving base station and the MSS before the MSS handover;

Transmitting the TEK to the target base station when the MSS is switched, so that the target base station completes the handover of the MSS, establishes a trust relationship with the MSS, and uses the MSS with the MSS. Said TEK for secure communication services;

This supports fast switching.

The present invention also provides a serving base station supporting scalable authentication protocol authentication, the service base station being configured as:

Before the MSS handover, the service encryption key (TEK) shared by the MSS is sent to the authentication server, so that the AS sends the TEK to the target base station when the MSS switches, the target base station After the MSS handover is completed, and the trust relationship is established with the MSS, the TMS is used to perform a secure communication service with the MSS;

This supports fast switching.

The present invention also provides a target base station supporting scalable authentication protocol authentication, the target base station being set as:

Receiving, by the MSS, the serving base station and the TSK shared by the MSS, and after the MSS handover is completed, establishing a trust relationship with the MSS, using the TEK for secure communication with the MSS. Business

This supports fast switching.

The target base station is configured to: receive an authentication request message including a digital certificate of the MSS from the MSS, send the digital certificate to the AS for validity verification, and in the digital certificate When the validity verification is performed, an authentication response message is sent to the MSS, and an authentication key (AK) is included in the authentication response message, so that a trust relationship is established with the MSS through the verification certificate.

The target base station is further configured to reject the MSS access when the digital certificate authentication fails the validity verification.

The target base station is further configured to, after establishing a trust relationship with the MSS, transmit the TEK to the MSS by using the AK encryption, so that the MSS obtains the TEK according to the AK decryption.

The EAP authentication method for supporting fast handover proposed by the present invention introduces a backup mechanism of the service key before the handover, and ensures that the terminal quickly establishes a trust relationship with the new base station, and then quickly utilizes the backup password. The key carries out the communication service, which greatly improves the speed of handover authentication, and is very beneficial to the terminal's fast access authentication in the high-speed handover scenario of the wireless network. BRIEF abstract

The drawings are intended to provide a further understanding of the invention, and are intended to be a part of the description of the invention. In the drawings: Figure 1 is a schematic diagram of an EAP authentication and authorization model;

Figure 2 is a schematic diagram of network authentication and authorization during fast handover;

3 is a flowchart of an EAP authentication method for supporting fast handover according to an embodiment of the present invention; and FIG. 4 is a flowchart of an EAP authentication method for supporting fast handover according to an application example of the present invention.

Preferred embodiment of the invention

The present invention will be further described in detail below with reference to the accompanying drawings and specific embodiments.

As shown in FIG. 3, an EAP authentication method for supporting fast handover according to an embodiment of the present invention includes the following steps:

Step 301: Before the handover, the service encryption key (TEK) shared by the mobile terminal (MSS) and the current serving base station (BS) is sent to the authentication server (AS) for backup and storage;

Step 302: When switching, the AS sends the backed up service encryption key TEK to the target base station.

Step 303: After the handover, the mobile terminal and the target base station establish a trust relationship, and use the service encryption key TEK to perform a secure communication service.

The present invention can be applied to a WiMAX (Worldwide Interoperability for Microwave Access) mobile broadband communication system. WiMAX is an emerging wireless broadband access technology that is a new air interface standard for mobile and microwave frequency bands. Therefore, WiMAX combines the three characteristics of wireless, broadband and mobile, and can be used as a wireless extension technology for cable and DSL (Digital Subscriber Loop). Connecting 802.11 wireless access hotspots to the Internet can also connect environments such as corporate and home to wired backbone lines, and is also a set of standards for providing data services within the metropolitan area in the IEEE 802 standard.

The WiMAX security mechanism uses a PKM-based EAP authentication method, which defines a secure way for a base station BS to distribute key data to a subscriber station SS, including authentication authentication, key exchange, and data encryption. The goal is to provide access. Control and ensure the confidentiality of the data link.

Key management implements key negotiation and maintenance for each security association, distributes keys for established security associations, and performs key updates when appropriate, mainly for negotiation of authentication key AK and service encryption key TEK. And updates. The PKM-EAP-based authentication method solves the problem that the one-way authentication and authentication mechanism lacks scalability, and is more suitable for fast authentication in a mobile scenario.

FIG. 4 is a specific example of an EAP authentication method for supporting fast handover according to the present invention. In this example, the entire authentication and authorization working process (including initial authentication and fast handover authentication) is described as follows:

Step 401: The MSS establishes an initial wireless connection with the serving BS, and the MSS sends an “authentication request message” to the BS, where the authentication request message includes an X.509 digital certificate of the MSS.

Step 402: The service BS sends the certificate to the authentication server, and the authentication server checks the validity of the certificate.

Step 403: If the certificate authentication is passed, the serving BS sends an “authentication response message” to the MSS, where the authentication response message includes an authentication key (AK) of the serving BS; otherwise, the serving BS rejects the access request of the MSS;

At this point, the MSS and the service BS establish a trust relationship by verifying the certificate.

Step 404: The MSS sends a "TEK request message" to the serving BS to request a service encryption key (TEK);

Step 405: The service BS applies for the TEK to the authentication server.

Step 406, the TEK application is successful, the serving BS sends a "TEK response message" to the MSS, the TEK response message carries the TEK, and the TEK uses AK encryption, and the MSS uses the AK decryption transmitted by the serving BS in step 403 to obtain the TEK;

At this point, the initial authentication and authorization process ends, and the MSS and the serving BS can use TEK. Conduct confidential business communications.

Step 407, in the service communication process, the MS and the service BS periodically update the AK and the TEK to ensure the security of the communication;

Step 408: Before the handover, the serving BS sends the currently used service encryption key (TEK) to the authentication server for backup and storage;

Step 409, when switching, the authentication server sends the backed up service encryption key (TEK) to the target BS;

Step 410, after the handover, the MSS and the target BS repeat steps 401 to 403 to quickly establish a trust relationship, and then the target BS transmits the backed up TEK to the MSS using the newly negotiated AK encryption, and the two parties share the backup service encryption key TEK;

Step 411: The MSS and the target BS continue the communication service by using the backed up service encryption key (TEK).

At this point, the fast authentication during the switching process ends.

Referring to FIG. 2, the present invention also provides an EAP authentication system that supports fast handover, including a mobile terminal (MSS), a serving base station (serving BS), a target base station (target BS), and an authentication server (AS), where:

The service BS is configured to send a service encryption key (TEK) shared with the MSS to the AS backup before the MSS handover;

An authentication server (AS) is configured to send the backed up TEK to the target BS when the MSS switches;

After the target BS is set to complete the MSS handover, after establishing a trust relationship with the MSS, the MSS uses the backed up TEK to continue the communication service.

Further, the MSS is configured to send an authentication request message including an X.509 digital certificate of the MSS to the target BS when establishing a trust relationship with the target BS, requesting access to the target BS;

After receiving the authentication request message, the target BS sends the digital certificate to the AS for validity verification, and sends an authentication response message to the MSS when the digital certificate passes the verification. The authentication response message (AK) is included in the certificate response message, thereby establishing a trust relationship with the MSS through the verification certificate; if the digital certificate authentication fails the verification, the MSS access is denied.

Further, after the target BS is set to establish a trust relationship with the MSS, the TEK is transmitted to the MSS by using AK encryption;

The MSS is set to obtain the TEK based on AK decryption.

Among them, the MSS includes but is not limited to a WiMAX terminal.

The present invention provides a serving base station supporting scalable authentication protocol authentication, the serving base station being configured as:

This supports fast switching.

The target BS is configured to: receive a digital certificate including the MSS from the MSS, and send an authentication response message to the MSS when the digital certificate passes the validity verification, where the authentication response is The message includes an authentication key (AK) to establish a trust relationship with the MSS through the verification certificate.

The target base station is further configured to: after establishing a trust relationship with the MSS, transmit the TEK to the MSS by using the AK encryption, so that the MSS obtains the AK decryption according to the AK. The TEK is obtained.

In summary, the present invention has the following advantages and effects as compared with the prior art:

1) Fast authentication

If you do not use fast authentication, you need to repeat all the steps of 401 407 after the handover, re-apply, generate and respond to the new service encryption key, and the delay caused by the complex authentication process will be greatly increased. The service encryption key backup mechanism can greatly improve the speed of key negotiation after handover, and meet the requirements of fast handover under high-speed mobile conditions, and the quality of real-time services is not affected.

2) Strong security

The transmission of the service encryption key is completed by the authentication server. The closed transmission medium ensures the security of the network, and can prevent attacks such as man-in-the-middle attacks, identity forgery, eavesdropping, and interception, and accelerates without sacrificing system security. The speed of key negotiation greatly increases the speed of EAP authentication.

Since the method and the technology of the present invention have greater versatility, the broadband technology used by the mobile terminal includes but is not limited to WiMAX technology, and other mobile terminals based on 3G (3rd Generation, third generation mobile communication) technology can also Using and referring to the design concept of the present invention, the 3G technology here includes but is not limited to TD-SCDMA (Time Division-Synchronous Code Division Multiple Access), CDMA2000, WCDMA (Wideband CDMA, Wideband Code Division Multiple Access) , HSDPA (High Speed Downlink Packet Access), HSUPA (High Speed Uplink Packet Access), LTE (Long Term Evolution), etc., according to a simple modification of the invention And play are within the scope of the invention.

The above description is only the preferred embodiment of the present invention, and is not intended to limit the present invention, and various modifications and changes can be made to the present invention. Any modifications, equivalent substitutions, improvements, etc. made within the spirit and scope of the present invention are intended to be included within the scope of the present invention.

Industrial applicability

The EAP authentication method for supporting fast handover proposed by the present invention introduces a service confidentiality before handover The key backup mechanism ensures that the terminal quickly establishes a trust relationship with the new base station, and quickly uses the backup key to carry out the communication service, which greatly improves the speed of handover authentication, and is very beneficial for the terminal to quickly access authentication in the high-speed handover scenario of the wireless network. .

Claims

Claim

1. An extensible authentication protocol authentication method, comprising: when a mobile terminal (MSS) switches from a current serving base station to a target progress,

Before the switching, sending a service encryption key (TEK) shared by the MSS and the serving base station to an authentication server (AS) backup;

Thereby achieving fast switching.

2. The method of claim 1 wherein

The step of establishing a trust relationship between the MSS and the target base station includes:

Sending, by the MSS, an authentication request message including a digital certificate of the MSS to the target base station, requesting access to the target base station;

3. The method of claim 2, further comprising

If the digital certificate authentication fails the validity verification, the target base station rejects the MSS access.

4. The method of claim 2, further comprising

After the MSS establishes a trust relationship with the target base station, the target base station transmits the TEK to the MSS by using the AK encryption; and the MSS obtains the TEK according to the AK decryption.

The method according to any one of claims 1 to 4, wherein

The MSS includes a Worldwide Interoperability for Microwave Access (WiMAX) terminal.

6. An authentication server (AS) supporting scalable authentication protocol authentication, the AS setting being:

Transmitting the TEK to the target base station when the MSS is switched, so that after the MSS handover is completed, the target base station establishes a trust relationship with the MSS, and uses the TEK to perform secure communication with the MSS. Business

This supports fast switching.

7. A serving base station supporting scalable authentication protocol authentication, the serving base station is configured to: send a service encryption key (TEK) shared with the MSS to an authentication server before the MSS handover, so that The AS sends the TEK to the target base station when the MSS is switched, and after the MSS completes the handover, and establishes a trust relationship with the MSS, the AS uses the TEK to perform security with the MSS. Communication service;

This supports fast switching.

8. A target base station supporting scalable authentication protocol authentication, wherein the target base station is configured to: when the MSS is switched, receive a TEK shared by the serving base station and the MSS sent by the AS, and switch at the MSS After the trust relationship is established with the MSS, use the TEK to perform a secure communication service with the MSS.

This supports fast switching.

9. The target base station according to claim 8, wherein

The target base station is configured to: receive an authentication request message including a digital certificate of the MSS from the MSS, send the digital certificate to the AS for validity verification, and pass the digital certificate When the validity verification is performed, an authentication response message is sent to the MSS, and an authentication key (AK) is included in the authentication response message, so that a trust relationship is established with the MSS through the verification certificate.

10. The target base station according to claim 9, wherein The MSS access is denied.

11. The target base station according to claim 9, wherein