WLAN与LTE融合网络接入认证协议研究-通信与信息系统专业论文.docxVIP

万方数据 万方数据 摘要 LTE（ Long Term Evolution ，长期演进）作为 3GPP（The 3rd Generation Partnership Project，第三代合作伙伴计划）定义的移动通信网络标准的演进目标， 具备更高的传输速率、通信效率和频谱利用率。WLAN 作为一种高带宽、低成本 的无线接入网络，为用户提供到蜂窝网络的数据业务，成为 LTE 网络分流的最佳 补充方案。然而，在 WLAN 由一个热点局域网向具备移动性的无线补充覆盖网络 演进过程中，如何与 3GPP 标准的 LTE 网络进行对接为用户提供方便的蜂窝网络 数据业务访问需求，如何在不改变原有网络架构的前提下，为用户提供统一的接 入方式，成为异构网络融合研究的重点。本文研究的重点是对 WLAN 与 LTE 融合 网络的接入认证协议中存在一些安全问题进行改进。 本文首先提出了一种无证书短签名算法，该签名算法具有如下优势：（1）签 名长度只有 160 比特，签名端不需要对运算，验证端仅需两个对运算，具备了较 高的计算效率；（2）用户的公钥和私钥进行了绑定，避免了公钥替换攻击，同时 恶意的 KGC 在不知道用户完整私钥的情况下也无法实施攻击;（3）在随机预言机 模型下证明能够抵抗自适应选择消息攻击的存在性伪造。 在上述无证书短签名算法的基础上，我们对 WLAN 与 LTE 融合网络的接入认 证协议 EAP-AKA 中存在的安全隐患进行了改进，实现了用户身份的匿名性、不可 否认性、实体间的相互认证、会话密钥建立等安全特性，为用户提供了更高的接 入效率和安全通信保证。 关键词：无证书短签名 WLAN-LTE 融合网络 EAP-AKA 万方数据 万方数据 Abstract LTE (Long Term Evolution) is defined as the evolution target of mobile broadband network of 3GPP (The 3rd Generation Partnership Project), it can provide higher transmission rate, communication efficiency and spectrum utilization. As a kind of high bandwidth and low cost mobile access network, WLAN has been the best complement of LTE diversion scheme, which can offer cellular network service for users. However, it has been the research focus in the study of heterogeneous network integration in the process of WLAN evolving from a hot LAN to a wireless overlay network of mobility, how to dock with the 3GPP standard LTE network to provide users with convenient cellular network data access requirements, how to achieve the unified access under the premise of not changing the original network architecture. The paper mainly discusses the improving of some security problems in access authentication protocol in WLAN and LTE converged network. At first, we propose a certificateless short signature algorithm which owns the following advantages. (1) The signature length is 160 bits, there are no pairing operation in signing phrase and only involves two pairing operations in verifying phrase. (2) User’s private key is bounded with public key, the public ke