一种适合全球移动网络的认证协议

A new protocol for authentication in global mobile network

提出一种基于公钥体制的，能够对全球移动网络中移动用户进行认证的协议．此协议的认证过程仅在移动用户和访问网络之间发生，访问网络可独立完成对移动用户的认证．当移动用户在归属网络注册时，归属网络向移动用户分发归属网络证明（ＨＮＣ），移动用户在ＨＮＣ中加入其私钥生成漫游认证密钥（ＲＡＫ）；当移动用户漫游时，移动用户向访问网络提交由ＲＡＫ生成的代理签名，访问网络可通过验证此签名来认证移动用户及其归属网络．

A new protocol, based on the public encryptpsystems, is proposed to implement authentication of mobile users in global mobile network. The interaction of the authentication is conducted only between the visited network VN and the mobile user, so the (VN) can authenticate the mobile user independently. While making contracts with the home network (HN),the user accesseds the home network certification (HNC) from the HN, then generates the roaming authentication key (RAK) using the HNC and his (her) secret key. While roaming,the mobile user sends the digital proxy signature signed by the RAK to the VN. The VN will authenticate the mobile user and the HN using this proxy signature.