【摘要】 提出了3G安全保密系统框架,设计了安全增强的认证与密钥协商协议,并对其进行了基于SVO逻辑的安全性分析。结果表明,SE-AKA协议在永久身份保密、双向认证、不可否认性等方面的安全性都优于3GPP-AKA协议,使UMTS接入网络能够抵抗改向攻击和主动攻击。而且协议中消除了重同步机制,避免了序列号操作困难带来的危害。这些安全功能满足了3G环境下特殊部门高级别的安全需求。更多还原

【Abstract】 The framework of cryptography system for 3G is proposed,a security-enhanced protocol of authentication and key agreement is designed,and its attribute of security is formally analyzed based on logic SVO.The conclusion indicates that protocol SE-AKA can provided security services of permanent identity secrecy,bidirectional authentication of identity,secure agreement of keys and non-repudiation service,etc.,which are all superior to the security of 3GPP-AKA protocol,so that the access network of UMTS can resist redirection attack and active attack.And the re-synchronization mechanism is eliminated in the protocol,so that the harm caused by the difficulty of sequence numbers’ operation is avoided.These security functions fulfil the high-level security requirements of special departments in the circumstance of the 3G network.更多还原