一种基于融合网络通用可组合安全的漫游认证协议

Universally Composable Secure Roaming Authentication Protocol for Interworking Networks

无线网络融合是通信业发展的趋势,其中安全问题是当前研究的关注点。针对以3G网络为核心网络,采用蓝牙、WiMAX和无线局域网为接入网络构成的融合网络中认证协议的安全和效率问题,提出了一种高效的漫游认证协议。该协议通过对无线接入网络身份进行验证,抵御了重定向攻击的行为,实现了漫游认证的密钥分发;采用局部化认证过程,减少了认证消息的传输延时,提高了认证协议的效率,并给出了在NS2环境下的性能仿真结果。通过通用可组合安全模型对新协议进行的安全性分析,证明该协议具有UC安全属性。

Security problems in interworking networks have attracted much attention of researchers recently. The typical interworking networks can be constructed with the core network WCDMA and the accessing networks WiMAX and WLAN. Considering security and efficiency issues, a roaming authentication protocol based on symmetric cryptographic algorithms was proposed for that network. It verified the identity of wireless access networks to prevent the redirection attack, and used the localized authentication mechanism to reduce the message transmission delay and improve the effi ciency of reauthentication process. The efficiency of proposed protocol was simulated in NS2. By analyzing the security of the proposed protocol with universally composable（UC）model, it proves that the proposed protocol satisfies the definition of UC security defined in the UC model.