LTE-R认证与密钥协商协议的安全分析及改进

Security Analysis and Improvement of LTE-R Authentication and Key Agreement Protocol

安全高效的车地身份认证方案是铁路安全运行的基础,结合列控系统数据安全传输对移动通信系统的需求和铁路无线通信网的发展方向,提出一种基于伪随机数和哈希函数的LTE-R车地通信身份认证协议。设计了由国际移动用户识别码(IMSI)和随机数生成的能够替换IMSI传输的匿名身份(PID),解决了由IMSI泄露导致的安全问题;利用临时生成的认证密钥NK代替永久根密钥K完成认证流程,提高了根密钥K的安全性。利用认证测试方法对协议的正确性进行了证明。分析证实,本文提出的LTE-R身份认证方案具有很好的安全性和匿名性,计算效率与通信消耗较好。

Safe and efficient vehicle-ground identity authentication scheme is the basis for the safe railway operation. Combined with the requirements of secure data transmission of train control system for mobile communication system and the development direction of railway wireless communication network, a LTE-R vehicle-ground identity authentication protocol based on pseudo-random number and hash function is proposed. The IMSI transmission is replaced by the anonymous identity PID generated by IMSI and random number, which solves the security problem caused by IMSI leakage. The authentication process is completed by using the temporarily generated authentication key NK instead of the permanent root key K, and the security of root key K is improved. The correctness of the protocol is proved by the certification test method. The analysis confirms that the LTE-R identity authentication scheme proposed in this paper has good security and anonymity, and the computational communication consumption meets the efficiency requirements.