Journal of Computer Applications ›› 2021, Vol. 41 ›› Issue (6): 1715-1722.DOI: 10.11772/j.issn.1001-9081.2020091428

Special Issue: 网络空间安全

• Cyber security • Previous Articles     Next Articles

Dynamic group based effective identity authentication and key agreement scheme in LTE-A networks

DU Xinyu, WANG Huaqun   

  1. School of Computer Science, Nanjing University of Posts and Telecommunications, Nanjing Jiangsu 210023, China
  • Received:2020-09-15 Revised:2020-11-12 Online:2021-06-10 Published:2020-11-26
  • Supported by:
    This work is partially supported by the National Natural Science Foundation of China (61872192).

LTE-A网络中基于动态组的有效的身份认证和密钥协商方案

杜心雨, 王化群   

  1. 南京邮电大学 计算机学院, 南京 210023
  • 通讯作者: 王化群
  • 作者简介:杜心雨(1996-),女,安徽宿州人,硕士研究生,主要研究方向:应用密码学、区块链;王化群(1974-),男,山东济宁人,教授,博士,CCF会员,主要研究方向:应用密码学、云计算安全、区块链。
  • 基金资助:
    国家自然科学基金资助项目(61872192)。

Abstract: As one of the communication methods in future mobile communications, Machine Type Communication (MTC) is an important mobile communication method in Internet of Things (IoT). When many MTC devices want to access the network at the same time, each MTC device needs to perform independent identity authentication, which will cause network congestion. In order to solve this problem and improve the security of key agreement of MTC device, a dynamic group based effective identity authentication and key agreement scheme was proposed in Long Term Evolution-Advanced (LTE-A) networks. Based on symmetric bivariate polynomials, the proposed scheme was able to authenticate a large number of MTC devices at the same time and establish independent session keys between the devices and the network. In the proposed scheme, multiple group authentications were supported, and the updating of access policies was provided. Compared with the scheme based on linear polynomials, bandwidth analysis shows that the bandwidth consumptions of the proposed scheme during transmission are optimized:the transmission bandwidth between the MTC devices in the Home Network (HN) and the Service Network (SN) is reduced by 132 bit for each group authentication, the transmission bandwidth between the MTC devices within the HN is reduced by 18.2%. Security analysis and experimental results show that the proposed scheme is safe in actual identity authentication and session key establishment, and can effectively avoid signaling congestion in the network.

Key words: access control, identity authentication, key agreement, Machine Type Communication (MTC), Long Term Evolution-Advanced (LET-A) network, symmetric bivariate polynomial

摘要: 机器类通信(MTC)作为未来移动通信中的通信方法之一,在物联网(IoT)中是一种重要的移动通信方法。当大量MTC设备同时想要访问网络时,每个MTC设备需要执行独立的身份认证,而这会导致网络拥塞。为了解决MTC设备在认证时的网络拥塞问题并提高其密钥协商的安全性,在LTE-A网络中提出了一种基于动态组的有效身份认证和密钥协商方案。该方案基于对称二次多项式,可以同时认证大量的MTC设备,并使这些设备分别与网络建立独立的会话密钥。该方案支持多次组认证,并且提供访问策略的更新。带宽分析表明,相较于基于线性多项式的方案,所提方案传输时的带宽消耗得到了优化:在家庭网络(HN)中的MTC设备与服务网络(SN)之间每次组认证传输带宽减少了132 bit,在HN内MTC设备之间的认证传输带宽减少了18.2%。安全性分析和实验结果表明,该方案在实际的身份认证和会话密钥建立中是安全的,能够有效避免网络中的信令拥塞。

关键词: 访问控制, 身份认证, 密钥协商, 机器类通信, LTE-A网络, 对称二元多项式

CLC Number: