一种基于公钥技术的3G安全体系结构及其实现  

A PKI-based3G Security Architecture and its Implementation

作　　者：张方舟[1] 王东安[1] 叶润国[1] 徐浩[1] 宋成[1] 

机构地区：[1]中国科学院网络信息中心

出　　处：《计算机工程与应用》2005年第11期124-126,188,共4页Computer Engineering and Applications

基　　金：中科院知识创新工程下一代因特网综合环境(编号:2001AA2130)子项目(编号:2001AA112136)资助

摘　　要：通过分析3G安全体系结构和移动通信系统的安全威胁,得出了3G体系结构存在的安全隐患。针对这些安全隐患,结合WPKI的相应特点,该文提出了一种基于SSL握手协议的用户与服务网络的AKA机制,即在3G体系结构中部署WPKI体系,使得无线终端侧实现了私密性、数据完整性等保护功能。最后模拟实现了一套完整的鉴权认证过程,实验结果表明:该机制能够很好地完成无线终端侧和服务网络之间双方的身份认证、加密传输、完整性保护等在3G安全体系中非常必要的功能。The paper summarizes the security threats3G architecture is facing by analyzing the security features of3G security architecture and mobile communications system.To solve these security problems ,an AKA mechanism,which is based on SSL handshake protocol,is proposed.The AKA mechanism is achieved by deploying WPKI technology in3G architecture,thus providing wireless terminals with security mechanisms like data privacy,data integrity,etc.By simulating the complete authentication process,the proposed mechanism is proved to be competent for providing authentication,data privacy,integrity protection between wireless terminals and servicing network.

关 键 词：认证和密钥协商 3G 无线公钥基础设施 安全套接字层 安全体系 

分 类 号：TP393[自动化与计算机技术—计算机应用技术]