IMS接入认证与密钥协商协议的优化方法

Optimized Procedure of Access Authentication and Key Agreement Protocol for IMS(IP Multimedia Subsystem)

认证与密钥协商协议(AKA)协议作为通用移动通信系统(UMTS)网络的接入认证和密钥分配协议,依然被IP多媒体子系统(IMS)网络所采用,但具体流程有些改变。文章分析了IMS接入AKA的过程,指出其存在一定安全漏洞,如假P-CSCF诱骗攻击、IMPI的安全传输等。针对上述漏洞,文章利用共享密钥和公钥认证中心,设计了一种改进的认证与密钥协商优化方案。最后通过安全性分析证明了所提出的方案能有效提高IMS认证与密钥协商协议的安全性。

As the access authentication and key agreement of the universal mobile telecommunications system CUMTS）, Authentication and Key Agreement （AKA） is also used in IP Multimedia Subsystem （IMS）, however, some specific flows have changed. This paper investigates into the process of Access Authentication and Key Agreement Protocol of IMS and analyzes some security leaks in it, such as fake P-CSCF decoy attacks, IMPI security transmission, etc. To solve the security problem, it presents an improved optimized procedure of AKA by using shared secret key and public key authentication center. Finally, it proves that this method can significandy enhance the security of IMS AKA through the security analysis.