基于公钥体制的3GPP认证与密钥协商协议

对比了第三代移动通信系统中的认证与密钥协商协议，分析了第三代合作伙伴计划(3GPP)最新发布的系统架构演进(SAE) Re1ease 8标准的认证与密钥协商协议，指出了协议中存在的几个安全缺陷。针对协议的安全缺陷，结合公钥密码体制提出一种改进的3GPP SAE认证与密钥协商协议。改进协议利用公钥加密机制保护用户身份信息和网络域的用户认证向量，采用动态随机数方式生成本地认证中需要的密钥。对改进协议进行安全和效率分析的结果表明，该协议可以有效解决上述安全缺陷，能以较少的资源开销获取安全性能的提升。

3GPP authentication and key agreement protocol based on public key cryptosystem

The authentication and key agreement protocol adopted by 3rd Generation Partnership Project (3GPP) System Architecture Evolution (SAE) Release 8 standard was analyzed in contrast with 3G, and several security defects in SAE protocol were pointed out, then an improved 3 GPP SAE authentication and key agreement protocol was put forward based on public key cryptosystem. In the new protocol, user's identity information and authentication vector in network domain were encrypted based on public key cryptosystem, public parent key adopted in local authentication was generated by random data. The security and efficiency of the proposed new scheme was analyzed at last. The analysis results show that the proposal can effectively solve the problems mentioned above and improve the security of protocol with less cost.