WPKI技术应用在3G安全体系中的研究和实现.pdfVIP

WPKI 技术应用在3G 安全体系中的研究与实现 1,2,3 4 1,2,3 1,2,3 1,2,3 张方舟 谷秭 冯彦君 叶润国 秦刚 1 (中国科学院网络信息中心 北京 100080) 2 (中国科学院计算技术研究所 北京 100080) 3 (中国科学院研究生院 北京 100039) 4 (中国网通集团北京市通信公司 北京 100031) {zhangfz, fengyj, yerunguo, gqin}@; erin_1225@163.com 摘要：通过分析3G 安全体系结构和移动通信系统的安全威胁，得出了3G 体系结构存在的安全隐患。针对这些安全隐患，结合WPKI 的相应特点，本文提出了一种基于SSL 握手协议的用户与服务网络的AKA 机制，即在3G 体系结构中部署WPKI 体系，使得无线 终端侧实现了私密性、数据完整性等保护功能。最后模拟实现了一套完整的鉴权认证过程，实验结果表明：该机制能够很好的完成 无线终端侧和服务网络之间双方的身份认证、加密传输、完整性保护等在3G 安全体系中非常必要的功能。 关键词：3G WPKI SSL 安全体系 J2ME 中图法分类号 TP393 The study and implementation of WPKI technology in 3G security architecture 1, 2,3 4 1, 2,3 1, 2,3 1, 2,3 Zhang Fang-Zhou , Gu Zi , Feng Yan-Jun , Ye Run-Guo , Qin Gang 1 (The Computer Network Information Center, Chinese Academy of Sciences, Beijing 100080) 2 (Institute of Computing Technology, Chinese Academy of Sciences, Beijing 100080) 3 (Graduate School of the Chinese Academy of Sciences, Beijing 100039) 4(China Netcom Group Beijing Communication Corporation) Abstract: The paper summarizes the security threats 3G architecture is facing by analyzing the security features of 3G security architecture and mobile communications system. To solve these security problems, an AKA mechanism, which is based on SSL handshake protocol, is proposed. The AKA mechanism is achieved by deploying WPKI technology in 3G architecture, thus providing wireless terminals with security mechanisms like data privacy, data integrity, etc. By simulating the complete authentication process, the proposed mechanism is proved to be competent for providing authentication, data privacy, integrity protection between wireless terminals and servicing network. Keywords: 3G WPKI SSL Security Architecture J2ME 题，并增加了新的安全功能。对于上面提到的 GSM 网 1 前言