WO2017167102A1

WO2017167102A1 - Methods for generating and verifying message integrity authentication information, device, and verification system

Info

Publication number: WO2017167102A1
Application number: PCT/CN2017/077726
Authority: WO
Inventors: 余媛芳; 杜忠达; 戴谦; 陆婷
Original assignee: 中兴通讯股份有限公司
Priority date: 2016-03-31
Filing date: 2017-03-22
Publication date: 2017-10-05
Also published as: CN107294723A

Abstract

Provided are methods for generating and verifying message integrity authentication information, a device, and a verification system. The method for generating message integrity authentication information comprises: a terminal generates first integrity authentication code information at least on the basis of the following information: restoration identifier information and identifier information of a cell transmitting a request message; the terminal generates second integrity authentication code information at least on the basis of the first integrity authentication code information and at least one of the following information items: a key, bearer information, a message direction, or a count value; and the terminal transmits the request message to a base station, wherein the request message carries the second integrity authentication code information and the restoration identifier information, in whole or in part. The invention solves a problem in the prior art in which restoration of a connection between a terminal and a network is not secure, thereby realizing integrity verification for a connection restored between a terminal and a network, and enhancing security.

Description

Method and device for generating and verifying message integrity authentication information and verification system

Technical field

The present invention relates to the field of communications, and in particular, to a method and apparatus for generating and verifying message integrity authentication information, and a verification system.

Background technique

Machine to Machine (M2M) communication is an important subject of the fifth generation of mobile communication technology (5G), and an important application field for wireless communication in the future. In the M2M project, the Narrow Band-Internet of Things (NB-IoT) research sub-project is proposed for the terminal characteristics such as low cost, low power consumption, low mobility, and low throughput. The NB-IoT low-cost terminal (User Equipment, UE for short) provides low-throughput wireless communication services in the 200khz frequency band.

In order to reduce the signaling overhead and reduce the power consumption of the NB-IoT terminal, the current research introduces a small data transmission method based on user plane optimization: the terminal establishes a complete connection with the network, uses DRB to transmit data, and after the data transmission is completed, the terminal and The network side saves the bearer information context, the AS security context, etc. through the suspend process. When the data is sent again, the two parties restore the previously saved context through the recovery process, and continue to use the DRB bearer to transmit data. Compared with the existing LTE processing, this method also saves signaling overhead.

When the terminal has uplink data to be sent, if there is a stored access bearer context, the recovery process of the air interface and the network side bearer may be triggered. When downlink data needs to be sent on the network side, the terminal is first paged, and then the terminal initiates a recovery process of the air interface and the network side bearer.

In the research process, the inventor found that in the small data transmission scheme optimized for the user plane, the connection recovery processing between the terminal and the network may be maliciously falsified, and effective security measures need to be considered to ensure the security of the connection recovery processing.

In view of the security problem of the connection recovery process between the terminal and the network in the related art, an effective solution has not been proposed yet.

Summary of the invention

The embodiment of the invention provides a method, a device and a verification system for generating and verifying message integrity authentication information, so as to at least solve the security problem of connection recovery processing between a terminal and a network in the related art.

According to an aspect of the embodiments of the present invention, a method for generating message integrity authentication information is provided, including: the terminal UE generates first integrity authentication code information based on at least the following information: recovering the identifier information, and transmitting the request message Identification information of the area, where the recovery identification information is used to identify context information required to trigger a user plane optimization manner stored before the recovery process; the terminal is based at least on the first integrity authentication code information and the following information One of the second integrity authentication code information is generated: a key, a bearer information, a message direction, and a count value; the terminal sends the request message to the base station, where the request message carries the second integrity Authentication code information, and part or all of the recovery identification information.

Optionally, the recovery identifier information includes at least one of the following: a terminal identifier, a global cell identifier, a physical cell identifier, a base station identifier, and a value of a preset bit length.

Optionally, the terminal is identified as a value between 16 and 24 bits in length.

Optionally, the global cell identifier includes at least one of the following: a global cell identifier of a cell where the terminal suspends context information, and a global cell identifier of a cell that stores the terminal context information.

Optionally, the physical cell identifier includes at least one of the following: a physical cell identifier of a cell in which the terminal suspends context information, and a physical cell identifier of a cell in which terminal context information is stored.

Optionally, the base station identifier includes at least one of: a base station identifier of a base station where the terminal suspends context information, and a base station identifier of a base station that stores the terminal context information.

Optionally, the value of the preset bit length includes at least one of the following: a value of a fixed bit length, and a value between 16 and 44 bits in length.

According to another aspect of the present invention, a method for verifying message integrity authentication information is provided, including: receiving, by a base station, a request message sent by a terminal UE, where the request message carries a second integrity authentication code information And recovering part or all of the identifier information, where the recovery identifier information is used to identify context information required to trigger a user plane optimization manner stored before the recovery process; and the base station generates third integrity authentication code information based on at least the following information. And the identifier information and the identifier information of the cell that receives the request message; the base station generates fourth integrity authentication code information based on at least one of the third integrity authentication code information and the following information: a key The bearer information, the message direction, and the count value; the base station verifies whether the generated fourth integrity authentication code information is consistent with the second integrity authentication code information, and if yes, determines the integrity of the request message. Sexual protection verification was successful.

Optionally, the base station identifier includes at least one of the following: a base station of the base station where the terminal suspends context information And identifying, a base station identifier of the base station storing the terminal context information.

According to still another aspect of the embodiments of the present invention, a device for generating message integrity authentication information is provided, where the terminal includes: a first generating module, configured to generate first integrity authentication code information based on at least the following information: a recovery identifier And the identifier information of the cell that sends the request message, where the recovery identifier information is used to identify context information required for triggering the user plane optimization manner stored before the recovery process; and the second generation module is configured to be based at least on the And generating, by the at least one of the first integrity authentication code information and the following information, a second integrity authentication code information: a key, a bearer information, a message direction, and a counter value; and a sending module, configured to send the request message to the base station, where The request message carries the second integrity authentication code information and part or all of the recovery identification information.

According to still another aspect of the embodiments of the present invention, a device for verifying message integrity authentication information is provided. The device is located at a base station, and includes: a receiving module, configured to receive a request message sent by the terminal UE, where the request message is carried in the request message. Having the second integrity authentication code information, and recovering part or all of the identification information, the recovery identification information is used to identify context information required to trigger the user plane optimization mode stored before the recovery process; the third generation module is set to Generating third integrity authentication code information based on the following information: the recovery identification information, and identification information of a cell that receives the request message; and a fourth generation module configured to be based at least on the third integrity authentication code information and At least one of the following information generates fourth integrity authentication code information: a key, a bearer information, a message direction, and a count value; and a verification module configured to verify the generated fourth integrity authentication code information and the second complete Whether the authentication code information is consistent, and if so, determining that the integrity protection of the request message is verified as .

According to still another aspect of the embodiments of the present invention, a verification system for message integrity authentication information includes: a terminal and a base station, where the terminal includes the foregoing apparatus for generating message integrity authentication information; and the base station includes The above verification device for message integrity authentication information.

According to the embodiment of the present invention, the terminal generates the first integrity authentication code information based on the following information: the recovery identifier information, and the identifier information of the cell that sends the request message, where the recovery identifier information is used to identify that the recovery process is triggered before Context information required for the stored user plane optimization mode; the terminal generates second integrity authentication code information based on at least one of the first integrity authentication code information and the following information: a key, a bearer information, a message direction, And the counting value; the terminal sends the request message to the base station, where the request message carries the second integrity authentication code information, and the manner of restoring part or all of the identifier information, and the related The security problem of connection recovery processing between the terminal and the network in the technology realizes the integrity authentication of the connection recovery processing between the terminal and the network, and improves the security.

DRAWINGS

The drawings described herein are intended to provide a further understanding of the invention, and are intended to be a part of the invention. In the drawing:

1 is a flowchart of a method for generating message integrity authentication information according to an embodiment of the present invention;

2 is a structural block diagram of an apparatus for generating message integrity authentication information according to an embodiment of the present invention;

3 is a flowchart of a method for verifying message integrity authentication information according to an embodiment of the present invention;

4 is a structural block diagram of a verification apparatus for message integrity authentication information according to an embodiment of the present invention;

FIG. 5 is a structural block diagram of a verification system for message integrity authentication information according to an embodiment of the present invention.

detailed description

The invention will be described in detail below with reference to the drawings in conjunction with the embodiments. It should be noted that the embodiments in the present application and the features in the embodiments may be combined with each other without conflict.

It is to be understood that the terms "first", "second" and the like in the specification and claims of the present invention are used to distinguish similar objects, and are not necessarily used to describe a particular order or order.

The inventor found in the research process that the small data transmission scheme optimized for the user plane has the following problems:

Before the terminal triggers the recovery process, the preset terminal, the base station, and the associated core network element have stored various context information required for the user plane optimization mode, and need to define a valid identifier to identify the context information, so that the terminal and the base station can adopt the same The identity identifies and restores the correct context information, referred to herein as the recovery identity ResumeID. The recovery identifier is transmitted to the base station through a connection recovery request message sent by the terminal. Since the connection recovery request message is sent on the unprotected wireless signaling bearer SRB0, in order to protect the terminal's connection recovery request from being maliciously falsified, it is necessary to consider effective security measures to ensure the security of the connection recovery request.

In the present embodiment, a method for generating message integrity authentication information is provided in the embodiment. FIG. 1 is a flowchart of a method for generating message integrity authentication information according to an embodiment of the present invention, as shown in FIG. The process includes the following steps:

Step S102: The terminal generates, according to the following information, the first integrity authentication code information: the recovery identifier information, and the identifier information of the cell that sends the request message that includes the recovery identifier information, where the recovery identifier information is used to identify the trigger recovery. The context information required for the user plane optimization method stored before the process;

Step S104: The terminal generates second integrity authentication code information based on at least one of the first integrity authentication code information and the following information: a key, a bearer information, a message direction, and a count value;

Step S106: The terminal sends the request message to the base station, where the request message carries the second integrity authentication code information, and part or all of the recovery identifier information.

In this embodiment, the terminal generates the first integrity authentication code information by using the recovery identifier information for identifying the context information and the identifier information of the cell that sends the request message, and then generates the second complete based on the first integrity authentication code information. The authentication code information is carried, and the second integrity authentication code information is carried in the sent request message to perform integrity authentication with the base station, thereby solving the security problem of connection recovery processing between the terminal and the network in the related art, and realizing the terminal. The integrity authentication of the connection recovery process with the network improves security.

Optionally, the recovery identifier information may include at least one of the following: a terminal identifier, a global cell identifier, a physical cell identifier, a base station identifier, and a value of a preset bit length. The above various types of recovery identification information will be further described in detail below.

As a preferred implementation, if the terminal determines that the cell identifier is consistent with the cell identifier of the current request message of the terminal, the terminal may not carry the cell in the recovery identifier information in the request message. The part is identified to save uplink resources. Correspondingly, if the cell identification part is not included in the recovery identifier information received by the base station, it is considered to be consistent with the current cell, thereby constructing complete restoration identifier information.

If the restoration identification information includes a terminal identification, the terminal identification may be a value having a length between 16 and 24 bits.

If the restoration identifier information includes the global cell identifier, the global cell identifier may include at least one of the following: a global cell identifier of the cell in which the terminal suspends the context information, and a global cell identifier of the cell in which the terminal context information is stored.

The physical cell identifier may include at least one of the following: a physical cell identifier of a cell in which the terminal suspends context information, and a physical cell identifier of a cell storing terminal context information.

The base station identifier may include at least one of the following: a base station identifier of the base station where the terminal suspends the context information, and a base station identifier of the base station storing the terminal context information.

If the recovery identification information includes a value of a preset bit length, the value of the preset bit length may include a value of a fixed bit length, or a value having a length between 16 and 44 bits, which may include a terminal identifier and Cell identification, etc.

Through the description of the above embodiments, those skilled in the art can clearly understand that the method according to the above embodiment can be implemented by means of software plus a necessary general hardware platform, and of course, by hardware, but in many cases, the former is A better implementation. Based on such understanding, the technical solution of the present invention, which is essential or contributes to the prior art, may be embodied in the form of a software product stored in a storage medium (such as ROM/RAM, disk, The optical disc includes a number of instructions for causing a terminal device (which may be a cell phone, a computer, a server, or a network device, etc.) to perform the methods described in various embodiments of the present invention.

Corresponding to the sending method of the above message integrity authentication information, in this embodiment, a device for transmitting message integrity authentication information is provided, which is used to implement the above embodiments and preferred embodiments, and has not been described. Let me repeat. As used below, the term "module" may implement a combination of software and/or hardware of a predetermined function. Although the apparatus described in the following embodiments is preferably implemented in software, hardware, or a combination of software and hardware, is also possible and contemplated.

2 is a structural block diagram of a device for generating message integrity authentication information according to an embodiment of the present invention. The device is located at a terminal. As shown in FIG. 2, the device for generating message integrity authentication information includes:

The first generation module 22 is configured to generate the first integrity authentication code information based on the following information: the recovery identification information, and the identification information of the cell that sends the request message; the second generation module 24 is connected to the first generation module 22, and is configured to Generating second integrity authentication code information based on at least one of the first integrity authentication code information and the following information generated by the first generation module 22: a key, a bearer information, a message direction, and a count value; And the second generation module 24 is configured to send the request message to the base station, where the request message carries the second integrity authentication code information and part or all of the recovery identification information.

In this embodiment, a method for verifying message integrity authentication information is also provided. FIG. 3 is a flowchart of a method for verifying message integrity authentication information according to an embodiment of the present invention. As shown in FIG. 3, the method includes:

Step S302: The base station receives the request message sent by the terminal, where the request message carries the second integrity authentication code information, and recovers part or all of the identifier information, where the recovery identifier information is used to identify that the recovery process is triggered before The context information required for the stored user plane optimization method;

Step S304, the base station generates third integrity authentication code information based on at least the following information: the recovery identifier information, and identifier information of a cell that receives the request message;

Step S306, the base station generates fourth integrity authentication code information based on at least one of the third integrity authentication code information and the following information: a key, a bearer information, a message direction, and a count value;

Step S308, the base station verifies whether the generated fourth integrity authentication code information is consistent with the second integrity authentication code information, and if yes, determines that the integrity protection verification of the request message is successful.

In this embodiment, the base station generates the third integrity authentication code information by using the recovery identifier information for identifying the context information and the identifier information of the cell that sends the request message, and then generates the fourth information based on the third integrity authentication code information. Integrity authentication code information, and carrying the second integrity authentication code information in the request message received from the terminal for integrity authentication, thereby solving the security problem of connection recovery processing between the terminal and the network in the related art, and realizing the terminal The integrity authentication of the connection recovery process with the network improves security.

If the recovery identifier information includes the global cell identifier, the global cell identifier may include at least one of the following: a global cell identifier of the cell in which the terminal suspends context information, and a global cell in which the terminal context information is stored. Cell identification.

Corresponding to the verification method of the above message integrity authentication information, in this embodiment, a verification device for message integrity authentication information is provided, the device is located at the base station, and FIG. 4 is a verification of message integrity authentication information according to an embodiment of the present invention. The structural block diagram of the device, as shown in FIG. 4, the verification device of the message integrity authentication information includes:

The receiving module 42 is configured to receive a request message sent by the terminal, where the request message carries the second integrity authentication code information, and recovers part or all of the identifier information, where the recovery identifier information is used to identify the trigger recovery process. The context information required for the previously stored user plane optimization mode; the third generation module 44 is configured to generate the third integrity authentication code information based on at least the following information: the recovery identification information received by the receiving module 42 and the receiving the request message The fourth generation module 46 is connected to the third generation module 44, and is configured to generate a fourth according to at least one of the third integrity authentication code information generated by the third generation module 44 and the following information. Integrity authentication code information: a key, a bearer information, a message direction, and a count value. The verification module 48 is connected to the fourth generation module 46 and configured to verify the fourth integrity authentication code information generated by the fourth generation module 46. Whether the second integrity authentication code information received by the receiving module 42 is consistent, and if so, determining the request cancellation Integrity protection validation is successful.

It should be noted that each of the above modules may be implemented by software or hardware. For the latter, the foregoing may be implemented by, but not limited to, the foregoing modules are all located in the same processor; or, the modules are located in multiple In the processor.

In this embodiment, a terminal is further provided, including a first hardware processor, configured to perform the functions of each module in the device for generating the message integrity authentication information.

In this embodiment, a base station is further provided, including a second hardware processor, configured to perform the functions of each module in the verification device of the message integrity authentication information.

In this embodiment, a verification system for message integrity authentication information is also provided. FIG. 5 is a structural block diagram of a verification system for message integrity authentication information according to an embodiment of the present invention. As shown in FIG. 5, the system includes The terminal 20 and the base station 40, wherein the terminal 20 includes means for generating message integrity authentication information as shown in FIG. 2; the base station 40 includes verification means for message integrity authentication information as shown in FIG.

The following description is made in conjunction with the preferred embodiments, and the following preferred embodiments incorporate the above-described embodiments and preferred embodiments thereof.

Example 1

In this embodiment, a method for generating and transmitting message integrity authentication code information of a terminal is provided, including:

The terminal constructs the first integrity authentication code information based on the following information: the recovery identification information, and the identification information of the cell that transmits the request message including part or all of the restoration identification information.

The terminal generates second integrity verification code information based on the following information: first integrity authentication code information, key KEY, bearer information BEARER, message direction DIRECTION, count value COUNT. The definition of the key KEY, the bearer information BEARER, the message direction DIRECTION, and the count value COUNT can be referred to the 3GPP specifications.

The terminal sends a request message carrying part or all of the recovery identifier information and the second integrity authentication code information to the base station.

Optionally, if the cell that sends the recovery request message is the same as the cell in the recovery identifier, and the cell identifier information is included in the recovery identifier, the terminal may not send the cell identity information in the recovery identifier information, where the cell identity information may be At least one of the following: a global cell identifier, a physical cell identifier, and a base station identifier.

Optionally, the global cell identifier includes at least one of the following: a global cell identifier of a cell in which the terminal suspends context information, and a global cell identifier of a cell in which the terminal context information is stored.

Optionally, the physical cell identifier includes at least one of the following: a physical cell identifier of a cell where the terminal suspends context information, and a physical cell identifier of a cell storing terminal context information.

Optionally, the base station identifier includes at least one of the following: a base station identifier of the base station where the terminal suspends the context information, and a base station identifier of the base station storing the terminal context information.

Example 2

In this embodiment, a method for generating and verifying message integrity authentication code information of a base station is provided, including:

The base station generates the third integrity authentication code information based on at least one of the following information: recovering the identification information, and receiving identification information of a cell that includes part or all of the request information of the restoration identification information.

The base station generates fourth integrity verification code information based on the following information: third integrity authentication code information, key KEY, bearing Load information BEARER, message direction DIRECTION, count value COUNT.

The base station verifies that the generated fourth integrity authentication code information is consistent with the second integrity authentication code information received by the request message, and then considers that the request message integrity protection verification is successful.

Optionally, if the cell identity information is not included in the recovery identifier received by the base station, the base station considers that the cell identity information in the restoration identifier is the same as the cell in which the received request message is located, and the base station may construct the cell identity information of the current cell. The complete identifier information, the cell identifier information may be at least one of the following: a global cell identifier, a physical cell identifier, and a base station identifier.

Example 3

In this embodiment, a terminal and network connection recovery processing method is provided, including the following steps:

Step 1: The base station receives a request message that is sent by the terminal and carries the recovery identifier information and the second integrity authentication code information, where the request message is used to request the base station to restore the connection between the terminal and the network.

The base station generates the third message integrity authentication code information based on the following information: the recovery identifier information, and the identifier information of the cell that receives the request message including the restoration identifier information.

The base station generates fourth integrity verification code information based on the following information: third integrity authentication code information, key KEY, bearer information BEARER, message direction DIRECTION, count value COUNT.

Step 2: The base station restores the connection with the terminal according to the recovery identification information.

Optionally, before step 1 above, the base station may, but is not limited to, transmit all or part of the information of the restoration identifier information to the terminal. For example, the base station may, but is not limited to, transmit all or part of the information of the recovery identifier to the terminal when the context information is suspended.

Optionally, before step 1 above, the base station may, but is not limited to, allocate a resource required for sending the request message to the terminal.

Optionally, the foregoing request message may include, but is not limited to, one of the following: a recovery request message, and a message carrying the recovery identification information.

Optionally, the message carrying the recovery identifier information may include, but is not limited to, at least one of the following: a radio resource control RRC connection request message, and an RRC connection re-establishment request message.

Optionally, the recovery identifier information may include, but is not limited to, at least one of the following: a terminal identifier, a global cell identifier, a physical cell identifier, a base station identifier, and a value of a preset bit length.

Optionally, the global cell identifier may include, but is not limited to, at least one of the following: a global cell identifier of the cell where the terminal suspends the context information, and a global cell identifier of the cell storing the terminal context information.

Optionally, the physical cell identifier may include, but is not limited to, at least one of the following: a physical cell identifier of a cell where the terminal suspends context information, and a physical cell identifier of a cell storing terminal context information.

Optionally, the base station identifier may include, but is not limited to, at least one of the following: a base station identifier of the base station where the terminal suspends the context information, and a base station identifier of the base station storing the terminal context information.

Alternatively, the value of the preset bit length may be, but is not limited to, at least one of the following: a value of a fixed bit length, and a value between 16 and 44 bits in length.

Example 4

In this embodiment, a terminal and network connection recovery processing method is provided, and the method includes:

The terminal sends a request message carrying the recovery identifier information and the second message integrity authentication code information to the base station, where the request message is used to request the base station to restore the connection between the terminal and the network.

The second integrity verification code information is generated based on the following information: first integrity authentication code information, key KEY, bearer information BEARER, message direction DIRECTION, count value COUNT.

The first integrity authentication code information is constructed based on the following information: recovery identification information, and identification information of a cell that transmits a request message including the restoration identification information.

Optionally, the terminal may receive the base station before the terminal sends the request message carrying the recovery identifier information to the base station. The assigned recovery identification information.

Optionally, the manner in which the terminal receives the recovery identifier information that is allocated by the base station when the context information is suspended may include: the terminal receives the recovery identifier information allocated by the base station by using the connection suspension message when suspending the context information; and/or the terminal is The resume identification information allocated by the base station is received through the connection release message when the context information is suspended.

Optionally, the request message may include, but is not limited to, one of the following: a recovery request message, and a message carrying the recovery identification information.

Embodiments of the present invention also provide a storage medium. Optionally, in the embodiment, the foregoing storage medium may be configured to store program code for performing the following steps:

Step S102: The terminal generates, according to the following information, the first integrity authentication code information: the recovery identifier information, and the identifier information of the cell that sends the request message that includes the recovery identifier information, where the recovery identifier information is used to identify the trigger recovery process. Context information required for user plane optimization before storage;

Step S104, the terminal generates second integrity authentication code information based on the following information: the first integrity authentication code information, a key, bearer information, a message direction, and a count value;

Step S106: The terminal sends a request message carrying the second integrity authentication code information to the base station.

Optionally, the storage medium is further arranged to store program code for performing the following steps:

Step S302, the base station generates third integrity authentication code information based on at least the following information: recovering the identification information, and connecting And the identifier information of the cell that includes the request message of the recovery identifier information, where the recovery identifier information is used to identify context information required for triggering the user plane optimization mode stored before the recovery process;

Step S304, the base station generates fourth integrity authentication code information based on the following information: the third integrity authentication code information, a key, bearer information, a message direction, and a count value;

Step S306, the base station verifies whether the generated fourth integrity authentication code information is consistent with the second integrity authentication code information received from the terminal by using the request message, and if yes, determines the integrity protection of the request message. The verification was successful.

Optionally, in this embodiment, the foregoing storage medium may include, but not limited to, a USB flash drive, a Read-Only Memory (ROM), a Random Access Memory (RAM), a mobile hard disk, and a magnetic memory. A variety of media that can store program code, such as a disc or a disc.

It will be apparent to those skilled in the art that the various modules or steps of the present invention described above can be implemented by a general-purpose computing device that can be centralized on a single computing device or distributed across a network of multiple computing devices. Alternatively, they may be implemented by program code executable by the computing device such that they may be stored in the storage device by the computing device and, in some cases, may be different from the order herein. The steps shown or described are performed, or they are separately fabricated into individual integrated circuit modules, or a plurality of modules or steps thereof are fabricated as a single integrated circuit module. Thus, the invention is not limited to any specific combination of hardware and software.

The above description is only the preferred embodiment of the present invention, and is not intended to limit the present invention, and various modifications and changes can be made to the present invention. Any modifications, equivalent substitutions, improvements, etc. made within the spirit and scope of the present invention are intended to be included within the scope of the present invention.

Industrial applicability

As described above, the method, device, and verification system for generating and verifying message integrity authentication information provided by the embodiments of the present invention have the following beneficial effects: integrity authentication of connection recovery processing between the terminal and the network is implemented, and security is improved. .

Claims

A method for generating message integrity authentication information includes:

The terminal UE generates the first integrity authentication code information based on the following information: the recovery identifier information, and the identifier information of the cell that sends the request message, where the recovery identifier information is used to identify the user plane optimization manner that is stored before the trigger recovery process is triggered. The required context information;

The terminal generates second integrity authentication code information based on at least one of the first integrity authentication code information and the following information: a key, a bearer information, a message direction, and a count value;

The terminal sends the request message to the base station, where the request message carries the second integrity authentication code information and part or all of the recovery identifier information.
The method according to claim 1, wherein the restoration identification information comprises at least one of the following: a terminal identifier, a global cell identifier, a physical cell identifier, a base station identifier, and a value of a preset bit length.
The method of claim 2 wherein said terminal identification is a value having a length between 16 and 24 bits.
The method according to claim 2, wherein the global cell identifier comprises at least one of: a global cell identifier of a cell in which the terminal suspends context information, and a global cell identifier of a cell in which the terminal context information is stored.
The method according to claim 2, wherein the physical cell identifier comprises at least one of: a physical cell identifier of a cell in which the terminal suspends context information, and a physical cell identifier of a cell in which terminal context information is stored.
The method according to claim 2, wherein the base station identifier comprises at least one of: a base station identifier of a base station where the terminal suspends context information, and a base station identifier of a base station storing the terminal context information.
The method of claim 2, wherein the value of the predetermined bit length comprises at least one of a value of a fixed bit length and a value between 16 and 44 bits in length.
A method for verifying message integrity authentication information includes:

The base station receives the request message sent by the terminal UE, where the request message carries the second integrity authentication code information, and recovers part or all of the identifier information, where the recovery identifier information is used to identify the storage that is stored before the trigger recovery process is triggered. Context information required for user plane optimization;

The base station generates third integrity authentication code information based on the following information: the restoration identifier information, and identifier information of a cell that receives the request message;

The base station generates fourth integrity authentication code information based on at least one of the third integrity authentication code information and the following information: a key, a bearer information, a message direction, and a count value;

And determining, by the base station, whether the generated fourth integrity authentication code information is consistent with the second integrity authentication code information, and if yes, determining that the integrity protection verification of the request message is successful.
The method according to claim 8, wherein the restoration identification information comprises at least one of the following: a terminal identifier, a global cell identifier, a physical cell identifier, a base station identifier, and a value of a preset bit length.
The method of claim 9 wherein said terminal identification is a value having a length between 16 and 24 bits.
The method according to claim 9, wherein the global cell identifier comprises at least one of: a global cell identifier of a cell in which the terminal suspends context information, and a global cell identifier of a cell in which the terminal context information is stored.
The method according to claim 9, wherein the physical cell identifier comprises at least one of: a physical cell identifier of a cell in which the terminal suspends context information, and a physical cell identifier of a cell in which terminal context information is stored.
The method according to claim 9, wherein the base station identifier comprises at least one of: a base station identifier of a base station where the terminal suspends context information, and a base station identifier of a base station storing the terminal context information.
The method of claim 9, wherein the value of the predetermined bit length comprises at least one of: a value of a fixed bit length, a value having a length between 16 and 44 bits.
A device for generating message integrity authentication information, located at the terminal UE, includes:

The first generation module is configured to generate first integrity authentication code information based on the following information: the recovery identification information, and the identification information of the cell that sends the request message, where the recovery identification information is used to identify that the recovery process is stored before the recovery process Context information required for user plane optimization;

a second generating module, configured to generate second integrity authentication code information based on at least one of the first integrity authentication code information and the following information: a key, a bearer information, a message direction, and a count value;

The sending module is configured to send the request message to the base station, where the request message carries the second integrity authentication code information and part or all of the recovery identifier information.
A device for verifying message integrity authentication information, located at a base station, comprising:

The receiving module is configured to receive the request message sent by the terminal UE, where the request message carries the second integrity authentication code information, and recovers part or all of the identifier information, where the recovery identifier information is used to identify the trigger recovery process. Context information required for user plane optimization before storage;

a third generation module, configured to generate third integrity authentication code information based on at least the following information: the recovery identifier information, and identifier information of a cell that receives the request message;

a fourth generation module, configured to generate fourth integrity authentication code information based on at least one of the third integrity authentication code information and the following information: a key, a bearer information, a message direction, and a count value;

And the verification module is configured to verify whether the generated fourth integrity authentication code information is consistent with the second integrity authentication code information, and if yes, determine that the integrity protection verification of the request message is successful.
An authentication system for message integrity authentication information, including: a terminal UE and a base station, where

The terminal includes the apparatus for generating message integrity authentication information according to claim 15;

The base station includes the verification device of the message integrity authentication information according to claim 16.