STK空中下载技术的安全问题及对策

Solution of Security Problem of STK-based OTA System

该文介绍了用于手机SIM卡(用户识别卡)的应用工具包(STK)技术和空中下载技术,通过分析STK空中下载存在的安全问题,提出了多级动态密钥的身份认证方案来进行STK卡空中下载服务的双向认证,可以保证下载过程中用户身份的合法性,提供数据完整性、下载过程完整检查以及防重传攻击等功能。

SIM ToolKit(STK)of Subscriber Identity Card(SIM)and Over The Air(OTA)technology are introduced.To solve the security problem of STK-based OTA system,a multi-level dynamic password authentication scheme is applied to this system.The Scheme can check the identity of subscriber,ensure the integrality of data and resist replay attack,etc.