个人通信系统中的移动用户登记认证协议

Authentication protocol for mobile user registration in personal communication systems

基于个人通信系统的公钥Ｐ＆Ａ模型，设计了用户位置登记认证协议，并采用ＢＡＮ认证逻辑对协议的安全性进行了形式化证明，对协议的计算复杂性进行了定性分析．分析表明，所提出的协议与现有的协议相比具有许多新的安全特性．

Impersonation and eavesdropping are the crucial threats in wireless communication systems. In personal communication systems (PCS), it is necessary to provide security protection for the voice/data transmitted over wireless links, and perform mutual authentication between mobile user and serving network. Recently, many protocols are proposed for different mobile networks, such as GSM, IS 41, CDPD and wireless LAN. However, these protocols have different weaknesses when they are applied in the PCS environment. Based on the public key P&A model proposed in , this paper presents an authentication protocol for mobile user registration. Then the formalized security proof of the protocol using the BAN authentication logic, and the qualitative analysis about its computing complexity are given. Results show that many new security features are added to the proposed protocols when it is compared with the protocols available.