5G通信卡中SUCI隐私保护的研究  

Research on Privacy Protection of SUCI in 5G Communication Card

作　　者：阎占林 黄健文[1] 黄健 李俊磊 蔡秋艳[1] 杨光[1] YAN Zhanlin;HUANG Jianwen;HUANG Jian;LI Junlei;CAI Qiuyan;YANG Guang(Guangdong Research Institute of China Telecom Co. ,Ltd. ,Guangzhou 510630,China;Guangzhou Youyi Information Technology Co. ,Ltd. ,Guangzhou 510630,China)

机构地区：[1]中国电信股份有限公司广东研究院,广东广州510630 [2]广州优亿信息科技有限公司,广东广州510630

出　　处：《无线电工程》2020年第4期269-275,共7页Radio Engineering

摘　　要：通信卡作为移动用户的身份识别码和鉴权数据的载体,其安全是整个手机通信中的安全基础。2G、3G和4G通信中,卡片入网信息是由国际移动用户识别码(International Mobile Subscriber Identity,IMSI)提供,一般情况下,空口上不会出现IMSI,而是临时移动用户标识(Temporary Mobile Subscriber Iedntity,TMSI)(IMSI初步加密),但当网络没有存储TMSI的时候,就需要用户将IMSI发送给网络,IMSI会暴露在空中接口从而被不法分子获取。5G通信中,为了保证安全,抵抗重放攻击,引入了用户永久标识符(Subscription Permanent Identifier,SUPI)、隐藏性用户标识符(Subscription Concealed Identifier,SUCI)的概念,SUPI类型分为IMSI和网络特定标识符(Network Specific Identifier,NSI)2种类型,加密后的SUPI即成为了SUCI,它作为用户身份识别码和鉴权数据及的载体,不让IMSI暴露在空口中,从而保证了终端和网络鉴权安全正常的进行。As the carrier of identity code and authentication data of mobile users,the security of communication card is the security foundation of the whole mobile phone communication.In 2G,3G and 4G communications,the card access information is provided by IMSI.In general,IMSI is not showed at the air interface,but when the network does not store the TMSI corresponding to the user IMSI,the user needs to send the IMSI to the network.IMSI will be exposed to the air interface and obtained by illegal persons.In 5G communication,in order to ensure security and counter replay attack,the concepts of SUPI and SUCI are introduced.SUPI is divided into two types,i.e.IMSI and NSI.The encrypted SUPI becomes SUCI,which serves as the carrier of user identification code and authentication data and prevents IMSI from being exposed to the air interface,thus ensuring the security and normal operation of terminal and network authentication.

关 键 词：5G通信卡 用户永久标识符 隐私保护 隐藏性用户标识符 

分 类 号：TN918.91[电子电信—通信与信息系统]