一种基于NTRU的5G移动通信网络切片认证方法  

Slice Authentication Method Based on NTRU

作　　者：谢桢 季新生[1,2] 游伟 XIE Zhen;JI Xinsheng;YOU Wei(Information Engineering University,Zhengzhou 450001,China;Purple Mountain Laboratories,Nanjing 211111,China)

机构地区：[1]信息工程大学,河南郑州450001 [2]网络通信与安全紫金山实验室,江苏南京211111

出　　处：《信息工程大学学报》2023年第2期209-214,共6页Journal of Information Engineering University

基　　金：国家重点研发计划资助项目(2020YFB1806607);国家自然科学基金资助项目(61941114)。

摘　　要：通过分析第三代合作伙伴计划(3GPP)现行的标准,发现3GPP在R16版本中新增了切片认证功能,但只是把认证框架定义为可扩展认证协议(EAP)框架,并未定义认证算法。为解决现行3GPP R16标准在切片认证标准化工作中尚未规范认证方法的问题,提出了一种可以实现相互认证的基于数论研究单元(NTRU)的切片认证方法。用形式化的GNY逻辑对该方法的安全性进行证明,证明了方法可以达到其设定的安全目标。在Free 5GC平台上对方案进行效率分析,实验结果表明该认证方法具有良好的运行效率。By analyzing the current standard of 3rd generation partnership project(3GPP),it is found that 3GPP adds slice authentication function in R16,but only defines the authentication framework as extensible authentication protecol(EAP)framework and does not define the authenti-cation algorithm.To solve the problem that the current 3GPP R16 standard has not standardized the authentication method in the standardization of slice authentication,a slice authentication method based on number theory research unit(NTRU)which can realize mutual authentication is proposed.The security of the scheme is proved by formal GNY logic,and it is also proved that the scheme can achieve its set security goal.The efficiency of the scheme is analyzed on the free 5GC platform.The experimental results show that the scheme has good efficiency.

关 键 词：5G 网络切片 认证 NTRU算法 形式化分析 

分 类 号：TP393[自动化与计算机技术—计算机应用技术]