UMTSAKA机制中序列号安全性分析  

Research on SQN's Security in UMTS AKA

作　　者：贾其兰 白媛[1,2,3] 王倩[1,2,3] 张会兵[2] 

机构地区：[1]天津理工大学计算机与通信工程学院,天津300384 [2]桂林电子科技大学广西可信软件重点实验室,广西桂林541004 [3]天津理工大学通信器件与技术教育部工程研究中心,天津300384

出　　处：《北京邮电大学学报》2015年第B06期87-91,共5页Journal of Beijing University of Posts and Telecommunications

基　　金：天津市科技创新专项资金项目(10FDZDGX00400);广西可信软件重点实验室研究课题项目(kx201332);国家自然科学基金项目(61272450)

摘　　要：对认证与密钥协商协议(UMTS AKA)中无和有序列号SQN进行了3种攻击场景模拟并得到结论:SQN的使用不能有效抵抗重放攻击.基于此,进一步分析并仿真了使用一次性随机数抵抗重放攻击的3种改进协议,结果表明:AP-AKA和基于公钥密码学的AKA能够有效抵抗重放攻击,但是AP-AKA增加了实体的存储和计算资源,基于公钥密码学的AKA增加了算法的复杂性,而S-AKA只能部分抵抗重放攻击.Three types of attacks＇ scenarios were described when there exists or not sequence number （SQN） in UMTS AKA. Analysis shows that the use of SQN cannot resist replay attacks effectively. Based on that, three new protocols using one-time random number were further analyzed and simulated to resist replay attacks. It is shown that AP-AKA and AKA based on public key cryptography can effectively a- gainst replay attacks. However, AP-AKA will add storage and computing resources of entities and AKA based on public key cryptography promotes the complexity of algorithm, but S-AKA only keeps against re- play attacks partially.

关 键 词：认证与密钥协商 重放攻击 序列号 一次性随机数 

分 类 号：TP929.5[自动化与计算机技术]