【摘要】 cdma20001x无线接入安全基于对称密钥技术,为用户提供匿名服务、基于质询/应答的认证服务、语音保密、控制信令加密和用户数据加密,采用CAVE、专用长码掩码、ORYX和E-CMEA四种安全算法。安全协议依赖于主密钥(A-Key)和移动台的电子序列号(ESN),A-Key仅对移动台和归属位置寄存器/认证中心是可知的,不直接参与认证和保密,而是用于产生共享秘密数据(SSD),再由SSD生成子密钥用于语音、信令和用户数据的保密。本文研究上述安全机制,分析其安全漏洞。更多还原

【Abstract】 The wireless access security of cdma20001x,which is based on symmetric cryptography,provides anonymity,challenge response authentication,voice,signaling and data privacy,and four algorithms are used,namely CAVE,PLCM,ORYX and E-CMEA.The security protocols rely on an authentication key(A-Key)and the electronic serial number(ESN)of the mobile.A-Key,which is only shared between HLR/AC and the mobile,is not used directly to authentication and privacy,but to generate a shared secret data SSD.SSD is used to generate sub-keys to scramble voice and encrypt signaling/data messages.The above security mechanisms are studied and the security limits are analyzed.更多还原