| 摘要: |
| 针对3GPP AKA协议中存在的安全缺陷,在消息中加入访问网络的身份信息,利用秘密令牌机制,提出了一种可以防止重定向攻击、SQN同步缺陷和用户身份信息泄露的改进方案,并对其安全性和效率进行了分析。分析表明,本方案可以有效解决上述问题,以较少的资源开销就能获取协议效率和安全性能的提高。 |
| 关键词: 网络安全,3GPPAKA,认证,密钥协商,身份保护 |
| DOI： |
|
| 基金项目:国家高技术研究发展计划(863计划)项目 |
|
| Efficient 3GPP Authentication and Key Agreement(AKA) with Identity Protection |
|
| () |
| Abstract: |
| Considering the security of the 3GPP authentication and key agreement(AKA) protocol,an improved scheme is proposed to prevent the redirection attack,the flaw of SQN synchronization and leak of user's identity information by adding the identity of VLR and utilizing the secret token scheme.The security and efficiency of the proposed scheme is analysed.The analysis shows that the proposal can effectively solve the problems mentioned above,improve the security and the efficiency of the protocol with little resource cost. |
| Key words: network security,3GPP AKA,authentication,key agreement,identity protection |
《电讯技术》编辑部 