3G-WLAN融合网络的票据认证协议

Ticket Authentication Protocol in 3G-WLAN Integrated Networks

针对第三代移动通信网(3G网络)与无线局域网(WLAN)融合网络接入的安全和效率需求,提出一种基于漫游票据的本地化认证协议.该协议借助介质独立信息服务发现移动用户所在位置附近的WLAN网络,预先确定可能的目标网络并向家乡网络请求漫游票据;移动用户在接入目标WLAN时,利用相应的漫游票据实现快速安全的接入认证.最后在Canetti-Krawczyk模型下证明了该协议的安全性.仿真实验结果表明,该协议认证延迟短,消息传递少.

In order to meet the security and efficiency requirements of the access in 3G Network and WLAN（Wireless Local Area Networks） integrated networks,a localized authentication protocol is proposed based on the roaming ticket.With the aid of the media-independent information service,the mobile user adopting the proposed protocol can find neighbor WLANs,from which one possible target network is chosen in advance.Then,the mobile user requests a roaming ticket for the target network from his home network.As a result,when the mobile user is entering the target network,a fast and safe authentication can be achieved by using the corresponding ticket.Finally,the security of the proposed protocol is verified through the Canetti-Krawczyk model.Simulated results show that the protocol costs less time and needs less message passing.