基于IMS的移动通信专网认证和密钥协商方法研究

Research on Authentication and Key Agreement Method of IMS-based Mobile Communication Private Network

为适应行业移动通信专网发展和保密通话业务需求,文章针对专网独立业务控制特点,在应用IMS技术架构的移动通信专网中,提出一种向前兼容的专网功能结构模型。文章研究分析了多个可应用于IMS专网的认证和密钥协商方案,并根据归属地服务器是否参与认证过程,分端到端、端到服务器两类应用场景,综合比较各类认证和密钥协商方案的安全性能和运算开销,最后给出较优方案,为专网通信安全相关机制建设提供参考。

In order to adapt to the development of the industry's mobile communication private network and the demand for confidential call services,in view of the independent service control characteristics of the private network,a forward compatible private network functional structure model is proposed in the mobile communication private network using IMS technology architecture,focusing on research and analysis of several authentication and key agreement schemes which can be applied to IMS private network.According to whether the home server participates in the authentication process,this article is divided into two types of application scenarios,end-to-end and end-to-server,and comprehensively compares the security performance and computing overhead of various authentication and key agreement schemes,and gives a better scheme,which is a private network provide reference for the construction of communication security related mechanisms.