3G中安全增强的AKA协议设计与分析  

DESIGN AND ANALYSIS OF SECURITY-ENHANCED PROTOCOL OF AUTHENTICATION AND KEY AGREEMENT FOR 3G

作　　者：边瑞昭[1] 刘曼华[2] 王惠芳[3] 马自堂[3] 

机构地区：[1]南京军区司令部,江苏南京210000 [2]周口师范学院,河南周口466001 [3]解放军信息工程大学电子技术学院,河南郑州450004

出　　处：《计算机应用与软件》2010年第1期264-268,共5页Computer Applications and Software

摘　　要：提出了3G安全保密系统框架,设计了安全增强的认证与密钥协商协议,并对其进行了基于SVO逻辑的安全性分析。结果表明,SE-AKA协议在永久身份保密、双向认证、不可否认性等方面的安全性都优于3GPP-AKA协议,使UMTS接入网络能够抵抗改向攻击和主动攻击。而且协议中消除了重同步机制,避免了序列号操作困难带来的危害。这些安全功能满足了3G环境下特殊部门高级别的安全需求。The framework of cryptography system for 3G is proposed,a security-enhanced protocol of authentication and key agreement is designed,and its attribute of security is formally analyzed based on logic SVO.The conclusion indicates that protocol SE-AKA can provided security services of permanent identity secrecy,bidirectional authentication of identity,secure agreement of keys and non-repudiation service,etc.,which are all superior to the security of 3GPP-AKA protocol,so that the access network of UMTS can resist redirection attack and active attack.And the re-synchronization mechanism is eliminated in the protocol,so that the harm caused by the difficulty of sequence numbers＇ operation is avoided.These security functions fulfil the high-level security requirements of special departments in the circumstance of the 3G network.

关 键 词：3G 安全保密系统 认证与密钥协商协议 协议设计 形式化分析 

分 类 号：TP309[自动化与计算机技术—计算机系统结构] TN929.533[自动化与计算机技术—计算机科学与技术]