适用于多类移动场景的融合认证机制设计  

Design of Fusion Authentication Mechanism for Multi-class Mobile Scenarios

作　　者：王俊[1] 田永春[1] 王梦琦 杨波 WANG Jun;TIAN Yongchun;WANG Mengqi;YANG Bo(No.30 Institute of CETC,Chengdu Sichuan 610041,China;Representative Office of Air Force in Chengdu,Chengdu Sichuan 610041,China)

机构地区：[1]中国电子科技集团公司第三十研究所,四川成都610041 [2]空装驻成都地区某代表室,四川成都610000

出　　处：《通信技术》2022年第10期1329-1340,共12页Communications Technology

基　　金：国家科技重大专项新一代宽带无线移动通信网资助项目(2017ZX03001018);四川省科技厅重大专项资助项目(2017GZDZX0001)。

摘　　要：认证是移动通信系统的重要安全手段,主要用于鉴别功能实体的身份的合法性。为满足企业/行业用户远程移动业务应用的需求,依托移动运营商网络构建专网已成为业界的主流方式。目前业界认证的主流思路是在移动运营商提供的主认证、二次认证基础上叠加额外的用户面认证。这种思路在面向多类移动场景应用时存在不足。针对这一问题首先对不同利益相关方对认证的需求进行了分析;其次提出了一种全新的、灵活的融合认证机制,对普通垂直行业、关键行业两类行业应用以及大带宽、低功耗以及低时延等移动场景进行深入设计;最后给出了在实物和半实物环境中针对主认证、用户面认证以及二次认证试验验证的结果,证明了方案的优势,为5G面向垂直行业和关键行业应用提供理论支撑。Authentication is an important security mean for mobile communication systems,mainly used to identify the legitimacy of the identity of functional entities.In order to meet the needs of enterprise/industry users for remote mobile business applications,relying on mobile operator networks to build private networks has become the mainstream approach in the industry.The current mainstream idea of industry authentication is to superimpose additional user-level authentication on the basis of the main authentication and secondary authentication provided by mobile operators.This idea has shortcomings when it is applied to multiple types of mobile scenarios.This paper first analyzes the requirements of different stakeholders for authentication,and then proposes a new and flexible fusion authentication mechanism,which is designed in depth from the applications of common vertical industries,key industries and mobile scenarios such as high bandwidth,low power consumption and low delay.Finally,the results of main authentication,user authentication and secondary authentication in physical and semi-physical environment are given,which proves the advantages of the scheme and provides theoretical support for 5G application in vertical and key industries.

关 键 词：移动通信 5G 多类应用场景 认证 融合认证机制 

分 类 号：TN915[电子电信—通信与信息系统]