一种基于公钥技术的3G安全体系结构及其实现

A PKI-based3G Security Architecture and its Implementation

通过分析3G安全体系结构和移动通信系统的安全威胁,得出了3G体系结构存在的安全隐患。针对这些安全隐患,结合WPKI的相应特点,该文提出了一种基于SSL握手协议的用户与服务网络的AKA机制,即在3G体系结构中部署WPKI体系,使得无线终端侧实现了私密性、数据完整性等保护功能。最后模拟实现了一套完整的鉴权认证过程,实验结果表明:该机制能够很好地完成无线终端侧和服务网络之间双方的身份认证、加密传输、完整性保护等在3G安全体系中非常必要的功能。

The paper summarizes the security threats3G architecture is facing by analyzing the security features of3G security architecture and mobile communications system.To solve these security problems ,an AKA mechanism,which is based on SSL handshake protocol,is proposed.The AKA mechanism is achieved by deploying WPKI technology in3G architecture,thus providing wireless terminals with security mechanisms like data privacy,data integrity,etc.By simulating the complete authentication process,the proposed mechanism is proved to be competent for providing authentication,data privacy,integrity protection between wireless terminals and servicing network.