利索-全球专利检索

  1. 登录
  2. 注册
发明公开
CN103098435A 中继节点设备认证机制 无效 - 撤回

中继节点设备认证机制
摘要：
本发明提出了一种中继节点认证解决方案。该解决方案包括中继节点和中继UICC的互认证，中继节点和网络的互认证，以及中继UICC和中继节点之间的安全信道建立。重用TS33.401中的AKA过程，从而不再需要额外的NAS消息。根据哪个MME-RN可以从HSS获取RN的公共密钥，在初始NAS消息中向网络发送IMEI，并执行针对DeNB的接入控制。MME-RN基于IMSI、IMEI和Kasme，产生会话密钥，利用RN的公共密钥对其进行加密，并将其发送给RN。UICC也产生相同的密钥，因此RN可以认证UICC和网络。当在UICC和RN之间发送的密钥或其他参数不匹配时，UICC或RN会发送具有新原因的认证拒绝消息，以通知网络。
摘要（英）：

A solution of relay node authentication is proposed. The solution includes mutual authentication of relay node and relay UICC, mutual authentication of relay node and network, secure channel establishment between relay UICC and relay node. AKA procedure in TS 33.401 is re-used so that no extra NAS message is needed. IMEI is sent to network in the initial NAS message, according to which MME-RN can retrieve RN's public key from HSS, and perform access control for DeNB. MME-RN will generate a session key based on IMSI, IMEI and Kasme, and encrypt it by RN's public key and send it to RN. UICC will also generate the same key and thus RN can authenticate both UICC and network. When the key or other parameters sent between UICC and RN do not match, UICC or RN will send Authentication Reject message with a new cause to inform network.

0/0