【作者】 毛光灿；

【导师】 何大可；

【作者基本信息】 西南交通大学 ， 密码学， 2003， 硕士

【摘要】 移动通信技术飞速发展，随着移动通信这种先进的通信方式的普及，它在人们的社会生活中占有重要地位。人们频繁的使用移动通信进行信息交流，通信系统中信息的安全性以及网络资源使用的安全性将变得越来越重要。 本文着重研究了移动通信系统的安全。首先介绍了2G移动通信系统的安全特性和目标，具体实现安全目标的机制，2G系统存在的安全缺陷。然后对3G安全体系结构做了详细的分析和研究，概述了3G面临的安全威胁，安全原则，目标和要求。分析了3G的安全特征，对3G接入网络中的认证和密钥协商、数据机密性服务、数据完整性服务等机制进行了深入的探讨，对实现上述各种机制的算法和协议做了详细的介绍。然后，对3G加密标准算法KASUMI算法作了研究，介绍了算法的原理和构成，及其应用，对安全性做了一些分析。最后，依据3G发展的方向，结合密码学知识对3G系统采用PKI的需求和可行性进行了分析。针对3G现有安全特点，提出了基于3G安全接入机制AKA的用户证书颁发过程。另外，分析了目前移动通信系统采用单钥体制进行接入网络认证的缺点，采用公钥密码进行认证的优势和可行性。提出了一个基于公钥密码体制的移动通信认证方案。更多还原

【Abstract】 Nowadays, the communication technology is developing very quickly. Along with its popularity, mobile communication plays a more and more important role in people’s social life. As people frequently use mobile communication for information exchange, how to guarantee the security of the information transmitted in the communication system and the security of the network resources has become an urgent problem.This thesis is devoted to the security of the mobile communication system. It first introduces the security characteristics and objectives of 2G mobile communication system, the mechanism used in achieving such objectives, and the existing security defects. After that, it analyzes and studies the security architecture of the 3G mobile communication system. It covers the security menaces faced by 3G, the security principles, objectives and requirements. It also analyzes the security features of 3G. Detailed discussion is focused on the authentication and key agreement used in 3G’ s access network, and the mechanisms adopted for providing data encryption service and data integrity service. The algorithms and protocols used to implement the above mechanisms are introduced. An exhausting study of the standard 3G encryption algorithm-KASUMI is also made in this thesis, including its principles, components and applications. Its security is also analyzed. Finally, this thesis analyzes the requirements and feasibility of PKI in 3G system, taking both the developing trend of 3G and the cryptography skills into account. For the current security features of 3G, an issuing process of user certificate based on 3G security access mechanism AKA is put forward. Furthermore, the defect of the currently used single key mechanism in access network is discovered in this thesis. The advantages and feasibility of public-key authentication are demonstrated, based on which an authentication solution for mobile communication is brought forward.更多还原