CN1953369A - A method, system and device to initiate and identify secret key update request - Google Patents

Abstract

The invention discloses a method for initiating a key update request. The method includes: when the network needs to update the key, generate a new key, obtain authentication parameters according to the generated new key, and use the obtained authentication key Parameters are sent to the terminal. The present invention also discloses a method for identifying whether to request to update the key. The method includes: after the terminal receives the authentication parameter sent by the network, according to the first key stored by itself and the first new key generated by itself, key, judge the consistency of the received authentication parameters, and determine whether the network requests to update the key. The invention also discloses a system for implementing key update request, a device for initiating a key update request and a device for identifying whether to request a key update. According to the method, system and device disclosed in the present invention, the network initiates a key update request according to the existing authentication process, and the terminal identifies whether the network requests to update the key.

Description

A method, system and apparatus for initiating and identifying rekey requests

technical field

The invention relates to authentication technology, in particular to a method, system and device for initiating and identifying a key update request in the authentication process.

Background technique

In the existing wireless communication system, such as in the WCDMA system, the International Mobile Subscriber Identity (IMSI), Authentication Key (KI) and Serial Number (SQN) are stored in the terminal, and the HLR/AUC on the network side stores There are IMSI, KI and SQN for the terminal for mutual authentication between the terminal and the network.

The following provides the process of implementing authentication in the existing wireless communication system, as shown in Figure 1, including the following steps:

Step 101: the network generates authentication parameters according to the key stored by itself, and sends the generated authentication parameters to the terminal.

Here, the authentication parameters generated by the network include random numbers (RAND), serial numbers, and message authentication codes (MAC-A). Wherein, the steps for the network to obtain the MAC-A in the authentication parameters are as follows: the network side first generates a random number, and calculates the MAC-A according to the generated random number, the key and the serial number stored by itself.

Step 102: The terminal performs consistency verification on the received authentication parameters according to the current key stored by itself, and if they are consistent, execute step 103; otherwise, execute step 106.

Here, after the terminal receives the authentication parameters, it generates the authentication parameters according to the key stored by itself and the random number and serial number in the received authentication parameters, and judges the received authentication parameters and its own Whether the generated authentication parameters are consistent.

Step 103: The terminal judges whether the serial number in the received authentication parameter is within an acceptable range, and if yes, executes step 104; otherwise, executes step 105.

Here, the terminal can determine whether the difference between the serial number in the received authentication parameter and the serial number stored by itself is within a certain range, for example, whether the difference between the two is greater than zero, or whether it is greater than 0 and less than 65536, etc., if the difference is within the range, it is determined that the serial number in the received authentication parameter is acceptable; otherwise, it is determined that the serial number in the received authentication parameter is not acceptable.

Step 104: The terminal determines that the authentication to the network is successful, and updates its own serial number according to the serial number in the received authentication parameter, and ends this process.

Step 105: The terminal determines that the serial number of the network is out of synchronization with its own serial number, initiates a process of synchronizing the serial number, and then ends the process.

Step 106: the terminal determines that the authentication to the network fails, and ends this process.

For the authentication process of WCDMA, refer to the relevant protocol specifications of 3GPP, and details will not be repeated here.

In the existing authentication method, the network and the terminal use a fixed root key, that is, the key used in the authentication process remains unchanged all the time. Although the method of using a fixed root key is relatively simple to implement and manage, it has great security risks.

The root key is easily leaked. When the root key is written by the card manufacturer, the root key may be leaked during the process; when the root key is written by the operator, the root key may also be leaked; when performing HLR/AUC During the maintenance process, the root key may also be leaked; hackers attack HLR/AUC to obtain the root key; intercept a certain number of authentication parameters used in the authentication process from the air interface, and the authentication response returned by the terminal, and pass a certain algorithm to calculate the root key. Under the above circumstances, the user simply cannot find out that the root key is leaked, and at this time, the legitimate interests of the user cannot be protected. Because, these users are hacked to use their own root key to perform illegal communication. In the existing method, as long as the root key is lost, there is no effective remedy, only to replace the user card and the relevant user data in the HLR/AUC at the same time.

In order to solve the above problems, in the existing authentication process, it is necessary to provide a key update mechanism. At this time, the request for key update is usually initiated by the network, and the network usually adds information requesting key update to the existing authentication parameters, and the terminal can only identify whether the network requests key update based on the information. This method of expressing a request to update key information to the terminal has the following disadvantages:

1. It will increase the content carried by the authentication parameters and affect the efficiency of the normal authentication process;

2. In the case that the authentication parameter cannot be expanded, it is also impossible to complete the request to update the key information through the authentication parameter;

3. If the key update request information is carried in the authentication parameter in plain text, the key update request information is easily intercepted, resulting in the leakage of the key update operation intention, thereby reducing security.

Contents of the invention

In view of this, the first main purpose of the present invention is to provide a method for initiating a key update request, so that the network can initiate a key update request according to the existing authentication process.

The second main purpose of the present invention is to provide a method for identifying whether to request a key update. When the network initiates a key update request according to the existing authentication process, the terminal can identify whether the network requests a key update.

The third object of the present invention is to provide a system for implementing key update request. When the network initiates a key update request according to the existing authentication process, the terminal identifies whether the network requests key update.

The fourth object of the present invention is to provide a device for initiating a key update request, so that the network can initiate a key update request according to the existing authentication process.

The fifth main purpose of the present invention is to provide a device for identifying whether to request a key update. When the network initiates a key update request according to the existing authentication process, it can identify whether the network requests a key update.

In order to achieve the first purpose above, the present invention provides a method for initiating a key update request, the method comprising:

The network judges whether the key needs to be updated, and if it is determined that the key needs to be updated, a new key is generated, and then the authentication parameter is obtained according to the generated new key, and the obtained authentication parameter is sent to the terminal.

A key is stored in the network;

The network generates a new key as follows: the network generates a random number RAND, and generates a new key according to the generated RAND and the key stored by itself.

The network acquisition authentication parameters are: the network generates RAND, and generates authentication parameters according to the generated RAND and a new key; or, the network generates RAND, sets the serial number SQN, and generates And the new key generates authentication parameters.

The network judges whether it is necessary to update the key, and if it is determined that the key does not need to be updated, then obtains the authentication parameter according to the stored key, and sends the obtained authentication parameter to the terminal.

The authentication parameter generated by the network according to the RAND and the new key is: message authentication code MAC-A; the authentication parameter obtained by the network includes: the RAND and the MAC-A.

The acquisition of authentication parameters by the network is as follows: the network generates RAND, sets a serial number SQN, and generates authentication parameters according to the generated RAND, the set SQN and the new key.

The authentication parameter generated by the network according to the RAND, the SQN and the new key is: MAC-A; the authentication parameter obtained by the network includes: the RAND, the SQN and the MAC-A.

In order to achieve the second purpose above, the present invention provides a method for identifying a rekey request, the method comprising:

After receiving the authentication parameters sent by the network, the terminal judges the consistency of the received authentication parameters according to the first key stored by itself. If the consistency passes, it is determined that the network does not request to update the key; if the consistency is not If it passes, the first new key is generated, and the consistency of the received authentication parameters is judged according to the first new key generated by itself. If the consistency passes, it is determined that the network requests to update the key.

When the terminal receives the authentication parameter sent by the network, the network acquires the authentication parameter and sends the authentication parameter to the terminal.

The authentication parameters acquired by the network include: RAND; the first key is stored in the terminal; the terminal generates the first new key as follows: the terminal according to the RAND in the received authentication parameters and the stored key The first key generates the first new key.

The terminal judges the consistency of the received authentication parameters according to the first key as follows: the terminal obtains the expected message authentication code XMAC-A according to the first key, and judges that the XMAC-A and the received authentication Whether the weight parameters are consistent;

The terminal judges the consistency of the received authentication parameters according to the first new key as follows: the terminal obtains XMAC-A according to the first new key, and judges whether the XMAC-A and the received authentication parameters are unanimous.

The authentication parameters acquired by the network further include: MAC-A;

The terminal obtains the XMAC-A according to the first new key as follows: the terminal generates the XMAC-A according to the first new key and the received RAND;

The obtaining of the XMAC-A by the terminal according to the first key is as follows: the terminal generates the XMAC-A according to the first key and the received RAND.

The authentication parameters acquired by the network further include: SQN and MAC-A;

The terminal obtains the XMAC-A according to the first new key as follows: the terminal generates the XMAC-A according to the first new key and the received RAND and SQN;

The acquisition of the XMAC-A by the terminal according to the first key is as follows: the terminal generates the XMAC-A according to the first key and the received RAND and SQN.

The judging whether the XMAC-A is consistent with the received authentication parameter is: the terminal judges whether the received MAC-A is consistent with the XMAC-A generated by itself.

The terminal determines that the consistency of the received authentication parameters passes according to the first new key generated by itself, and further includes: the terminal determines that the network authentication is successful;

The terminal determines that the consistency of the received authentication parameters fails according to the first new key generated by itself, and the method further includes: the terminal determines that the network authentication fails.

The terminal further sets a first SQN;

Before the terminal determines that the network requests to update the key, the terminal further includes: the terminal judges whether the received SQN is acceptable according to the first SQN, and if so, determines that the network requests to update the key.

When the terminal determines that the received SQN is acceptable, the method further includes: the terminal determines that the network authentication is successful.

In order to achieve the third purpose above, the present invention provides a system for implementing a key update request, the system comprising: a key update initiating device and a key update request identifying device;

The key update initiating device is used to obtain authentication parameters, and send the obtained authentication parameters to the key update request identifying device;

The key update request identification device is used for determining whether to request key update according to the received authentication parameters.

In order to achieve the above fourth object, the present invention provides a device for initiating a key update request, the device comprising: an initiation request determination unit, a second key storage unit, a second new key generation unit, a random number generation unit, An authentication parameter acquisition unit, an authentication parameter sending unit;

The initiation request decision unit is used to decide whether to initiate a key update request, and send the decision result to the authentication parameter acquisition unit;

The second key storage unit is used to store the second key;

The second new key generation unit is used to generate a second new key;

The random number generating unit is used to generate random numbers;

The authentication parameter obtaining unit is used to obtain the second key from the second key storage unit or obtain the second key from the second new key generation unit according to the determination result obtained from the initiation request determination unit. A new key, obtaining a random number from the random number generating unit, and generating an authentication parameter according to the obtained key and the random number, and sending it to the authentication parameter sending unit;

The authentication parameter sending unit is used for sending the received authentication parameter to the key update request identification device.

The device further includes: a network serial number setting unit, configured to set a serial number; the authentication parameter acquisition unit is further configured to acquire a serial number from the network serial number setting unit, and according to the acquired serial number and the random number along with the key to generate authentication parameters.

In order to achieve the above-mentioned fifth purpose, the present invention provides a device for identifying whether to request a key update, the device includes: an authentication parameter receiving unit, a consistency verification unit, a first key storage unit, and a first new key generation unit, identify unit;

Wherein, the authentication parameter receiving unit is used to receive the authentication parameter sent by the network;

The first key storage unit is used to store the first key;

The consistency verification unit is used to obtain the first key stored by the first key storage unit, or obtain the first new key generated by the first new key generation unit, and according to the obtained key Verifying the consistency of the authentication parameters received by the authentication parameter receiving unit, and sending the verification result to the identification unit and the first new key generation unit;

The identification unit is used to determine whether the network requests to update the key according to the received verification result;

The first new key generation unit is used for generating a first new key according to the received verification result.

The consistency verification unit includes: an authentication parameter regeneration unit and an authentication parameter comparison unit;

The authentication parameter regeneration unit is used to obtain the first key from the first key storage unit, or obtain the first key from the first new key generation unit according to the comparison result received from the authentication parameter comparison unit. Obtain a first new key, and obtain an authentication parameter according to the obtained key, and send the obtained authentication parameter to the authentication parameter comparison unit;

The authentication parameter comparison unit is used to compare the authentication parameter received from the authentication parameter regeneration unit with the authentication parameter received by the authentication parameter receiving unit, and send the comparison result to the identification unit, The first new key generation unit and the authentication parameter regeneration unit.

The device further includes: an acquisition unit;

The obtaining unit is used to obtain a random number and a serial number from the authentication parameter received by the authentication parameter receiving unit, and send the obtained random number and serial number to the authentication parameter regeneration unit;

The authentication parameter regeneration unit is configured to use the key obtained from the first key storage unit or the first new key generation unit and the random number and sequence number received from the acquisition unit, Get authentication parameters.

The device further includes: an authentication unit;

The authentication unit is used to obtain a consistency verification result from the consistency verification unit, and determine whether the authentication to the network is successful according to the obtained consistency verification result.

The device further includes: a terminal serial number setting unit, and a serial number acceptable judging unit;

The terminal serial number setting unit is used to set the serial number of the terminal, and send it to the acceptable judgment unit of the serial number;

The acquiring unit is configured to acquire a serial number from the authentication parameter received by the authentication parameter receiving unit, and send the acquired serial number to the serial number acceptable judging unit;

The serial number acceptance judgment unit is used to judge whether the serial number received from the acquisition unit is acceptable according to the serial number received from the terminal serial number setting unit, and send the judgment result to the identification unit and the authentication unit;

The identifying unit is further used to determine whether the network requests to renew the key according to the judgment result obtained from the serial number acceptable judging unit;

The authenticating unit is further configured to determine whether the authentication to the network is successful according to the judgment result obtained from the serial number acceptable judging unit.

According to the method for the network to initiate a key update request provided by the present invention, when the network needs to initiate a key update request, it generates a new key and generates authentication parameters according to the new key generated by itself; When the key is requested, the authentication parameter is generated according to the key saved by itself. Therefore, when the network initiates a key update request, no other content is added to the existing authentication parameters, and the key update request is initiated through the existing authentication process, thereby not affecting the efficiency of the normal authentication process. According to the present invention, even if a third party obtains the authentication parameter sent by the network to the terminal, it cannot identify whether the network has sent the update key request information, thus, while not occupying the authentication parameter information resource, the network can send The terminal will not leak the rekey request information when passing it.

According to the method for identifying whether to request to update the key provided by the present invention, after receiving the authentication parameters sent by the network, the terminal identifies whether the network requests to update the key according to the stored key and the generated new key. Therefore, when the network initiates a key update request according to the existing authentication process, the terminal can not only identify whether the network requests to update the key, but also authenticate the network.

According to the system for implementing key update request provided by the present invention, no other content is added to the existing authentication parameters, and the terminal recognizes the network’s request to update the key while completing network authentication, without adding normal authentication While burdening the process, it hides the intention of requesting to update the key and improves the system's ability to resist attacks.

According to the device for initiating a key update request provided by the present invention, the network can initiate a key update request according to the existing authentication process, and at the same time, the intention of requesting key update can be effectively hidden, and the anti-attack capability of the system is improved. According to the device for identifying whether to request to update the key provided by the present invention, when the network initiates a request to update the key according to the existing authentication process, it can identify whether the network requests to update the key, and can further determine whether the authentication to the network is success.

Description of drawings

Fig. 1 shows the flow chart of realizing authentication in the prior art;

Fig. 2 is a flow chart showing whether the terminal identifies whether the network requests to update the key in the embodiment of the present invention;

FIG. 3 is a flow chart showing whether the terminal identifies whether the network requests to update the key in Embodiment 1 of the present invention;

FIG. 4 is a flow chart showing whether the terminal identifies whether the network requests to update the key in Embodiment 2 of the present invention;

Fig. 5 shows that among the present invention, realizes the system structural diagram of requesting to update the key;

Fig. 6 is a structural diagram of a key update request identification device in the present invention.

Detailed ways

In order to make the object, technical solution and advantages of the present invention clearer, specific examples are given below to further describe the present invention in detail.

The present invention provides a method for requesting a key update, the main idea of which is: the network can initiate a key update request according to the existing authentication process; and after receiving the authentication parameters, the terminal successively And the new key generated by itself, identifying whether the network requests to update the key. Here, the network may transmit the key update request information to the terminal by using a new key generated by itself to generate an authentication parameter.

The method for the network to initiate a key update request to the terminal is given below, specifically: the network judges whether the key needs to be updated, if it is determined that the key needs to be updated, then generates a new key, and then obtains authentication parameters based on the generated new key , and send the obtained authentication parameters to the terminal; otherwise, obtain the authentication parameters according to the key saved by itself, and send the obtained authentication parameters to the terminal.

Usually, the network stores a key, and the method for the network to generate a new key is as follows: the network generates RAND, and generates a new key based on the generated RAND and the key stored by itself.

The authentication parameters obtained by the network may include RAND and MAC-A. The method for obtaining the authentication parameters is as follows: the network generates RAND, and generates MAC-A according to the generated RAND and the key. The authentication parameters obtained by the network may also include RAND, SQN, and MAC-A. The method for obtaining the authentication parameters is as follows: the network generates RAND, sets SQN, and generates MAC according to the generated RAND, the set SQN, and the key. -A. Among them, when the network initiates a key update request to the terminal, the key used in the process of obtaining authentication parameters is a new key generated by the network; when the network does not initiate a key update request to the terminal, the process of obtaining authentication parameters The key used in is the key saved by the network.

Below, in order to facilitate the distinction between the parameters of the terminal side and the network side, for the terminal side, use the first key, the first new key, and the first SQN description; for the network side, use the second key, the second new key, Second SQN description.

Figure 2 shows the implementation process of the terminal identifying whether the network requests to update the key, including the following steps:

Step 201: the network acquires authentication parameters, and sends the authentication parameters to the terminal.

Step 202: After receiving the authentication parameters sent by the network, the terminal judges the consistency of the received authentication parameters according to the first key stored by itself, if the consistency passes, then execute step 203, if the consistency fails , then step 204 is executed.

Step 203: the terminal determines that the network does not request to update the key, and ends this process.

In this step 203, the terminal may also determine that the authentication to the network is successful.

Steps 204-205: The terminal generates a first new key, and judges the consistency of the received authentication parameters according to the first new key generated by itself. If the consistency verification passes, it determines that the network requests to update the key.

Here, when the consistency verification is passed, the terminal may also determine that the authentication to the network is successful while determining that the network requests to update the key. When the terminal judges the consistency of the authentication parameters according to the first new key, if the consistency verification fails, the terminal may determine that the network authentication fails.

It can be seen from the above process that when the terminal identifies whether the network requests to update the key, it uses the first key and the first new key to verify the consistency of the authentication parameters transmitted by the network. Even if the third party obtains the authentication parameter sent by the network to the terminal, it cannot identify whether the network has sent the update key request information, so that while not occupying the information resources of the authentication parameter, the network can transmit the update key to the terminal. Information is not leaked when the key is requested.

In the above embodiment, generating the first new key by the terminal is as follows: the terminal generates the first new key according to the RAND in the received authentication parameter and the first key stored by itself.

In the above embodiment, the terminal judges the consistency of the received authentication parameters according to the first key as follows: the terminal obtains the expected message authentication code (XMAC-A) according to the first key, and judges that the XMAC-A Whether A is consistent with the received authentication parameter; the terminal judges the consistency of the received authentication parameter according to the first new key as follows: the terminal obtains XMAC-A according to the first new key, and judges that the Whether XMAC-A is consistent with the received authentication parameters.

In the above embodiment, when the network requests the terminal to update the key, the network obtains the authentication parameter as follows: generate RAND, and generate a second new key according to the generated RAND and the second key stored by itself, and Generate MAC-A according to the generated second new key. At this time, the authentication parameters obtained by the network include the RAND and MAC-A; when the network does not request the terminal to update the key, the network obtains the authentication parameter The authorization parameter is: generate RAND, and generate MAC-A according to the generated RAND and the second key stored by itself. At this time, the authentication parameters acquired by the network include the RAND and MAC-A. The terminal judging whether the XMAC-A is consistent with the received authentication parameter is as follows: the terminal judges whether the received MAC-A is consistent with the XMAC-A generated by itself.

In the above embodiment, the network may further set a second SQN, and when the network generates MAC-A, it may further proceed according to the set second SQN, and the authentication parameters acquired by the network include the RAND, the second SQN and the MAC-A. That is, when the network requests the terminal to update the key, the network generates MAC-A according to the RAND, the second new key, and the second SQN generated by itself; when the network does not request the terminal to update the key, the network generates MAC-A according to the The RAND of , the second key and the second SQN generate MAC-A. Correspondingly, the terminal obtains the XMAC-A according to the first new key as follows: the terminal generates the XMAC-A according to the first new key and the received RAND and the second SQN; the terminal generates the XMAC-A according to the first key The key acquisition XMAC-A is: the terminal generates the XMAC-A according to the first key, the received RAND and the second SQN.

In the above embodiment, the terminal determines that the consistency of the received authentication parameters passes according to the first new key generated by itself, and further includes: the terminal determines that the authentication to the network is successful; If the first new key determines that the consistency of the received authentication parameters fails, the method further includes: the terminal determines that the network authentication fails.

In the above embodiment, the first SQN may be further set in the terminal, and before the terminal determines that the network authentication is successful, it further includes: judging whether the received second SQN is acceptable according to the first SQN, and if so, determining The network authentication is successful; otherwise, it is determined that the second SQN loses synchronization with the first SQN.

The method for requesting key update in the present invention will be described in detail below through specific embodiments.

In the following embodiments, the second key and the second SQN are set on the network, and the first key and the first SQN are correspondingly set on the terminal.

Fig. 3 shows the flowchart of the first embodiment of the present invention, including the following steps:

Step 301: the network acquires authentication parameters, and sends the acquired authentication parameters to the terminal.

Here, the authentication parameters obtained by the network include: the RAND generated by itself, the second SQN set by itself, and the MAC-A generated by itself. The specific steps for obtaining the authentication parameters may be as follows: the network first generates RAND, and if the network needs to update the key, then generate a second new key according to the generated RAND and the second key, and generate a second new key according to the RAND and the generated second new key. The key generates the MAC-A; if the network does not need to update the key, the MAC-A is generated according to the RAND, the second SQN and the set second key.

After the network acquires the authentication parameter, the value of the second SQN may be further updated. Updating the value of the SQN may be to increase the second SQN by a random increment. For example, adding a random number between 1 and 256 to obtain a new second SQN value.

Step 302: After receiving the authentication parameters sent by the network, the terminal generates XMAC-A according to the first key stored by itself, the received RAND and the second SQN, and judges the received MAC-A and the generated XMAC - Whether A is consistent, for example, judge whether MAC-A and XMAC-A are the same, if they are consistent, execute step 303; if not, execute step 306.

Step 303: The terminal determines that the network does not request to update the key, and further verifies whether the second SQN is acceptable, and if acceptable, executes step 304; otherwise, executes step 305.

The terminal verifies whether the second SQN is acceptable, which may be to determine whether the difference between the first SQN and the second SQN is within a certain range, for example, to determine whether (first SQN-second SQN) is greater than 0, or (first SQN - whether the second SQN) is greater than 0 and less than 65536, etc. If the difference is within the range, it is determined that the second SQN is acceptable, otherwise, it is determined that the second SQN is not acceptable.

After passing the acceptability verification of the second SQN, the terminal may further update the first SQN according to the second SQN, for example, set the value of the first SQN to be equal to the value of the second SQN.

Step 304: The terminal determines that the authentication to the network is successful, and ends this procedure.

Step 305: The terminal determines that the second SQN loses synchronization with the first SQN, and ends this process.

Step 306: The terminal generates the first new key, generates XMAC-A according to the generated first new key and the received RAND, and judges whether the received MAC-A is consistent with the generated XMAC-A, for example It is judged whether MAC-A and XMAC-A are the same, if they are consistent, execute step 307; if not, execute step 308.

Here, the terminal generating the first new key is: the terminal generates the first new key according to the received RAND in the authentication parameter and the first key stored by itself.

Step 307: The terminal determines that the network requests to update the key, and ends this process.

In this step 307, while the terminal determines that the network requests to update the key, it may further determine that the authentication to the network is successful.

Step 308: The terminal determines that the network authentication fails, and ends this process.

It can be seen from the above process that while authenticating the network, the terminal can also identify whether the network requests to update the key, so that the network will not leak the key update request information to the terminal.

In the above step 301, when the network needs to update the key, when generating the MAC-A, it can also be further performed according to the second SQN; correspondingly, in step 306, when generating the XMAC-A, further according to the second SQN is carried out. Correspondingly, before the terminal determines that the network requests to update the key, it further includes: judging whether the received second SQN is acceptable according to the first SQN, if yes, then determining that the network requests to update the key, otherwise, determining the second SQN and The first SQN is out of sync. For this situation, specific steps are described in detail in the second embodiment below.

The second embodiment is given below, that is, when the network needs to update the key, when generating MAC-A, based on the RAND and the second new key described in the first embodiment, it is further generated according to the second SQN . For this situation, corresponding to the flow chart shown in Figure 4, the following steps are included:

Step 401: the network acquires authentication parameters, and sends the acquired authentication parameters to the terminal.

Here, the authentication parameters acquired by the network include: the generated random number RAND, the set second SQN, and the generated message authentication code MAC-A. Wherein, the network first generates a random number RAND, and if the network needs to update the key, a second new key is generated according to the random number and the second key, and the second new key is generated according to the RAND, the second SQN and the generated second new key MAC-A; if the network does not need to update the key, then generate the MAC-A according to the RAND, the second SQN and the set second key.

After the network acquires the authentication parameter, the value of the second SQN may be further updated. Updating the value of the SQN may be to increase the second SQN by a random increment. For example, add a random number between 1 and 256 to obtain the new value of the second SQN.

Step 402: After receiving the authentication parameters sent by the network, the terminal generates XMAC-A according to the saved first key, received RAND and second SQN, and judges the received MAC-A and the generated XMAC-A Whether they are consistent, for example, judge whether MAC-A and XMAC-A are the same, if they are consistent, perform step 403; if not, perform step 405.

Step 403: The terminal determines that the network does not request to update the key, and further verifies whether the second SQN is acceptable, and if acceptable, executes step 404; otherwise, executes step 408.

Step 404: The terminal determines that the authentication to the network is successful, and ends this procedure.

Step 405: The terminal generates the first new key, generates XMAC-A according to the generated first new key, the received RAND and the second SQN, and judges whether the received MAC-A is consistent with the generated one, for example, judging the MAC - Whether A and XMAC-A are the same, if they are consistent, go to step 406; if not, go to step 409.

Here, the terminal generating the first new key is: the terminal generates the first new key according to the received RAND in the authentication parameter and the first key stored by itself.

Step 406: The terminal verifies whether the second SQN is acceptable, and if acceptable, executes step 407; otherwise, executes step 408.

Here, the terminal verifies whether the second SQN is acceptable, which may be to determine whether the difference between the first SQN and the second SQN is within a certain range, for example, whether (first SQN-second SQN) is greater than 0, or whether ( First SQN-Second SQN) is greater than 0 and less than 65536, and so on. If the difference is within the range, it is judged that the second SQN is acceptable; otherwise, it is judged that the second SQN is not acceptable.

Here, after passing the acceptability verification of the second SQN, the terminal may further update the first SQN according to the second SQN, for example, set the value of the first SQN to be equal to the value of the second SQN.

Step 407: The terminal determines that the network requests to update the key, and ends this process.

In this step 407, when the terminal determines that the network requests to update the key, it may further determine that the authentication to the network is successful.

Step 408: The terminal determines that the second SQN is out of synchronization with the first SQN, and ends this process.

Step 409: The terminal determines that the network authentication fails, and ends this process.

In this embodiment, step 406 may also be: the terminal does not perform the operation of verifying whether the second SQN is acceptable, and the terminal directly confirms that the network requests to update the key and ends this process without performing steps 407 and 408.

The aforementioned calculations for generating the second new key, the first new key, and generating MAC-A and XMAC-A values may be some digest calculations or encryption calculations, for example, may be performed using some well-known algorithms in the industry.

The above-mentioned first key and the second key may be a pair of symmetric keys, and in practice, they may be completely the same.

A system for implementing a key update request is given below. As shown in FIG. 5 , the system includes: a key update initiating device and a key update request identifying device. Wherein, the key update initiating means acquires authentication parameters, and sends the acquired authentication parameters to the key update request identification means; the key update request identification means, according to the received authentication parameters, Determines whether to request a rekey.

The internal structures of the key update initiating device and the key update request identifying device are introduced in detail below.

The internal structure of the key update initiation device is shown in Figure 5, as shown in Figure 5, the key update initiation device includes: an initiation request determination unit 500, a second key storage unit 501, a second new key generation unit 502, a network sequence A number setting unit 503, a random number generating unit 504, an authentication parameter acquiring unit 505, and an authentication parameter sending unit 506.

Wherein, the initiation request determination unit 500 determines whether to initiate a key update request, and sends the decision result to the authentication parameter acquisition unit; the second key storage unit 501 stores the second key; the second The new key generation unit 502 generates a second new key; the random number generation unit 504 generates a random number; The second key storage unit 501 obtains the second key or obtains the second new key from the second new key generation unit 502, obtains a random number from the random number generation unit 504, and according to the obtained key and the random number to generate an authentication parameter, and send it to the authentication parameter sending unit 506; the authentication parameter sending unit 506 sends the received authentication parameter to the key update request identification device. The network serial number setting unit 503 sets the serial number. At this time, the key update initiator obtains the serial number from the network serial number setting unit 503, and when generating authentication parameters, according to the acquired serial number and the obtained The above key and random number generation.

In the key update initiating device, when the second new key generation unit 502 generates a second new key, it obtains a random number from the random number generation unit 504, and obtains a random number from the second key storage unit 501 Obtain a second key, and generate the second new key according to the obtained random number and the second key.

In the key update initiating device, when the initiation request determining unit 500 decides to initiate a key update, the authentication parameter acquisition unit 505 acquires a second new key from the second new key generation unit 502; When the initiation request determining unit 500 decides not to initiate a key update, the authentication parameter obtaining unit 505 obtains a second key from the second key storage unit 501 .

The internal structure diagram of the key update request identification device is given below, as shown in Figure 6, the device includes: authentication parameter receiving unit 601, consistency verification unit 602, first key storage unit 603, first new A key generation unit 604 and an identification unit 605 . The device may further include: an acquisition unit 606 , an authentication unit 607 , a terminal serial number setting unit 608 , and a serial number acceptance judgment unit 609 . The functions completed by each unit are described below.

The authentication parameter receiving unit 601 receives the authentication parameter sent by the authentication parameter sending unit 506; the first key saving unit 603 saves the first key; The key storage unit 603 obtains the first key, or obtains the first new key from the first new key generation unit 604, and verifies the authentication parameter received by the authentication parameter receiving unit 601 according to the obtained key. The consistency of authentication parameters, and send the verification result to the identification unit 605 and the first new key generation unit 604; the identification unit 605 determines whether the network requests to update the key according to the received verification result ; The first new key generating unit 604 generates a first new key according to the received verification result, and generates the first new key when the received verification result is that the consistency verification fails.

The consistency verification unit 602 includes: an authentication parameter regeneration unit 602-1 and an authentication parameter comparison unit 602-2. The authentication parameter regeneration unit 602-1 obtains the first key from the first key storage unit 603 according to the comparison result received from the authentication parameter comparison unit 602-2, or obtains the first key from the first The new key generation unit 604 obtains the first new key, obtains the authentication parameter according to the obtained key, and sends the obtained authentication parameter to the authentication parameter comparison unit 602-2; The parameter comparison unit 602-2 compares the authentication parameter received from the authentication parameter regeneration unit 602-1 with the authentication parameter received by the authentication parameter receiving unit 601, and sends the comparison result to the identification unit 605. The first new key generation unit 604 and the authentication parameter regeneration unit 602-1. At this time, the first new key generating unit 604 generates the first new key according to the received comparison result, and generates the first new key when the received comparison result is inconsistent.

Here, the authentication parameter comparison unit 602-2 feeds back the comparison result to the authentication parameter regeneration unit 602-1; the authentication parameter regeneration unit 602-1 decides whether to start from the first new The key generation unit 604 acquires the first new key. The authentication parameter regeneration unit 602-1 obtains the first key from the first key storage unit 603 for the first time, and then when receiving a result that the comparison result is inconsistent from the authentication parameter comparison unit 602-2, Obtain the first new key from the first new key generation unit 604 .

The acquisition unit 606 in the key update request identification device acquires a random number and a serial number from the authentication parameter received by the authentication parameter receiving unit 601, and sends the acquired random number and serial number to to the authentication parameter regeneration unit 602-1; the authentication parameter regeneration unit 602-1 is used to Key and the random number and serial number received from the obtaining unit 606 to obtain authentication parameters.

When the first new key generation unit 604 generates the first new key, it obtains the random number in the authentication parameter from the acquisition unit 606, and obtains the first key from the first key storage unit 603 , and generate the first new key according to the obtained random number and the first key.

Here, the functions realized by the obtaining unit 606 can be realized by the authentication parameter receiving unit 601, that is, the authentication parameter receiving unit 601 obtains random numbers and serial numbers from the received authentication parameters, and sends them to the required units, for example, the authentication parameter regeneration unit 602-1, the first new key generation unit 604, and the authentication parameter comparison unit 602-2.

The device for identifying a key update request further includes an authentication unit 607, and the authentication unit 607 obtains a consistency verification result from the consistency verification unit 602, and determines whether the authentication to the network is based on the obtained consistency verification result. success. If the result of the consistency verification is that the consistency verification is passed, it is determined that the network authentication is successful, otherwise, it is determined that the network authentication fails.

The device for identifying the key update request further includes: a terminal serial number setting unit 608 and a serial number acceptable judging unit 609 . The terminal serial number setting unit 608 sets the terminal serial number and sends it to the serial number acceptable judgment unit 609; the acquiring unit 606 acquires the serial number from the authentication parameter received by the authentication parameter receiving unit number, and the acquired serial number is sent to the serial number acceptable judging unit 609; the serial number acceptable judging unit 609 judges from the acquired Whether the serial number received by unit 606 is acceptable, and the judgment result is sent to the identification unit 605 and the authentication unit 607; , to determine whether the network requests to update the key; the authentication unit 607 further determines whether the authentication to the network is successful according to the judgment result obtained from the serial number acceptance judgment unit 609 .

The above-mentioned key update initiating device may be set on the network side, and the above-mentioned key update request identifying device may be set inside the terminal. The key update initiating means can initiate key update in the manner of initiating an authentication process; and through the key update request identifying means, not only can identify whether the network requests key update, but also can authenticate the network.

The above descriptions are only preferred embodiments of the present invention, and are not intended to limit the present invention. Any modifications, equivalent replacements, improvements, etc. made within the spirit and principles of the present invention shall be included in the scope of the present invention. within the scope of protection.

Claims (31)

1. A method for initiating a key update request, characterized in that the method comprises: The network judges whether the key needs to be updated, and if it is determined that the key needs to be updated, a new key is generated, and then the authentication parameter is obtained according to the generated new key, and the obtained authentication parameter is sent to the terminal. 2. The method of claim 1, wherein: A key is stored in the network; The network generates a new key as follows: the network generates a random number RAND, and generates a new key according to the generated RAND and the key stored by itself. 3. The method according to claim 2, wherein the network obtains the authentication parameter as follows: the network generates RAND, and generates the authentication parameter according to the generated RAND and the new key. 4. The method according to claim 3, wherein the authentication parameters generated by the network according to the RAND and the new key are: message authentication code MAC-A; The authentication parameters acquired by the network include: the RAND and MAC-A. 5. The method according to claim 2, wherein the network obtains the authentication parameters as follows: the network generates RAND, sets the serial number SQN, and generates the authentication parameter according to the generated RAND, the set SQN and the new key. weight parameter. 6. The method according to claim 5, wherein the authentication parameters generated by the network according to RAND, SQN and the new key are: MAC-A; The authentication parameters acquired by the network include: the RAND, the SQN and the MAC-A. 7. A method for identifying a rekey request as claimed in claim 1, comprising: After receiving the authentication parameters sent by the network, the terminal judges the consistency of the received authentication parameters according to the first key stored by itself. If the consistency passes, it is determined that the network does not request to update the key; if the consistency is not If it passes, the first new key is generated, and the consistency of the received authentication parameters is judged according to the first new key generated by itself. If the consistency passes, it is determined that the network requests to update the key. 8. The method of claim 7, wherein: When the terminal receives the authentication parameter sent by the network, the network acquires the authentication parameter and sends the authentication parameter to the terminal. 9. The method of claim 8, wherein: The authentication parameters acquired by the network include: RAND; The first key is stored in the terminal; The generating of the first new key by the terminal is as follows: the terminal generates the first new key according to the RAND in the received authentication parameter and the first key stored by itself. 10. The method of claim 9, wherein: The terminal judges the consistency of the received authentication parameters according to the first key as follows: the terminal obtains the expected message authentication code XMAC-A according to the first key, and judges that the XMAC-A and the received authentication Whether the weight parameters are consistent; The terminal judges the consistency of the received authentication parameters according to the first new key as follows: the terminal obtains XMAC-A according to the first new key, and judges whether the XMAC-A and the received authentication parameters are unanimous. 11. The method of claim 10, wherein: The authentication parameters acquired by the network further include: MAC-A; The terminal obtains the XMAC-A according to the first new key as follows: the terminal generates the XMAC-A according to the first new key and the received RAND; The obtaining of the XMAC-A by the terminal according to the first key is as follows: the terminal generates the XMAC-A according to the first key and the received RAND. 12. The method of claim 10, wherein: The authentication parameters acquired by the network further include: SQN and MAC-A; The terminal obtains the XMAC-A according to the first new key as follows: the terminal generates the XMAC-A according to the first new key and the received RAND and SQN; The acquisition of the XMAC-A by the terminal according to the first key is as follows: the terminal generates the XMAC-A according to the first key and the received RAND and SQN. 13. A method according to claim 11 or 12, characterized in that The judging whether the XMAC-A is consistent with the received authentication parameter is: the terminal judges whether the received MAC-A is consistent with the XMAC-A generated by itself. 14. The method of claim 7, wherein: The terminal determines that the consistency of the received authentication parameters passes according to the first new key generated by itself, and further includes: the terminal determines that the network authentication is successful; The terminal determines that the consistency of the received authentication parameters fails according to the first new key generated by itself, and the method further includes: the terminal determines that the network authentication fails. 15. The method of claim 12, wherein: The terminal further sets a first SQN; Before the terminal determines that the network requests to update the key, the terminal further includes: the terminal judges whether the received SQN is acceptable according to the first SQN, and if so, determines that the network requests to update the key. 16. The method according to claim 15, wherein when the terminal determines that the received SQN is acceptable, further comprising: the terminal determines that the network authentication is successful. 17. A system for implementing a key update request, characterized in that the system includes: a key update initiating device and a key update request identification device; The key update initiating device is used to obtain authentication parameters, and send the obtained authentication parameters to the key update request identifying device; The key update request identification device is used for determining whether to request key update according to the received authentication parameters. 18. The system according to claim 17, wherein the key update initiating device comprises: an initiation request determination unit, a second key storage unit, a second new key generation unit, a random number generation unit, an authentication An authorization parameter acquisition unit, an authentication parameter sending unit; The initiation request decision unit is used to decide whether to initiate a key update request, and send the decision result to the authentication parameter acquisition unit; The second key storage unit is used to store the second key; The second new key generation unit is used to generate a second new key; The random number generating unit is used to generate random numbers; The authentication parameter obtaining unit is used to obtain the second key from the second key storage unit or obtain the second key from the second new key generation unit according to the determination result obtained from the initiation request determination unit. A new key, obtaining a random number from the random number generating unit, and generating an authentication parameter according to the obtained key and the random number, and sending it to the authentication parameter sending unit; The authentication parameter sending unit is used for sending the received authentication parameter to the key update request identification device. 19. The system according to claim 18, wherein the key update initiating device further comprises: a network serial number setting unit, configured to set the serial number; The authentication parameter acquiring unit is further configured to acquire a serial number from the network serial number setting unit, and generate an authentication parameter according to the acquired serial number, the random number and the key. 20. The system according to claim 18, wherein the key update request identification device comprises: an authentication parameter receiving unit, a consistency verification unit, a first key storage unit, and a first new key generation unit , the identification unit; Wherein, the authentication parameter receiving unit is used to receive the authentication parameter sent by the authentication parameter sending unit; The first key storage unit is used to store the first key; The consistency verification unit is used to obtain the first key from the first key storage unit, or obtain the first new key from the first new key generation unit, and verify the obtained key according to the obtained key. the consistency of the authentication parameters received by the authentication parameter receiving unit, and send the verification result to the identification unit and the first new key generation unit; The identification unit is used to determine whether the network requests to update the key according to the received verification result; The first new key generation unit is used for generating a first new key according to the received verification result. 21. The system according to claim 20, wherein the consistency verification unit comprises: an authentication parameter regeneration unit and an authentication parameter comparison unit; The authentication parameter regeneration unit is used to obtain the first key from the first key storage unit, or obtain the first key from the first new key generation unit according to the comparison result received from the authentication parameter comparison unit. Obtain a first new key, and obtain an authentication parameter according to the obtained key, and send the obtained authentication parameter to the authentication parameter comparison unit; The authentication parameter comparison unit is used to compare the authentication parameter received from the authentication parameter regeneration unit with the authentication parameter received by the authentication parameter receiving unit, and send the comparison result to the identification unit, The first new key generation unit and the authentication parameter regeneration unit. 22. The system according to claim 20, wherein the key update request identification device further comprises: an acquisition unit; The obtaining unit is used to obtain a random number and a serial number from the authentication parameter received by the authentication parameter receiving unit, and send the obtained random number and serial number to the authentication parameter regeneration unit; The authentication parameter regeneration unit is configured to use the key obtained from the first key storage unit or the first new key generation unit and the random number and sequence number received from the acquisition unit, Get authentication parameters. 23. The system according to claim 20, 21 or 22, wherein the key update request identification device further comprises: an authentication unit; The authentication unit is used to obtain a consistency verification result from the consistency verification unit, and determine whether the authentication to the network is successful according to the obtained consistency verification result. 24. The system according to claim 23, wherein the key update request identification device further comprises: a terminal serial number setting unit, and a serial number acceptance judging unit; The terminal serial number setting unit is used to set the serial number of the terminal, and send it to the acceptable judgment unit of the serial number; The acquiring unit is configured to acquire a serial number from the authentication parameter received by the authentication parameter receiving unit, and send the acquired serial number to the serial number acceptable judging unit; The serial number acceptance judgment unit is used to judge whether the serial number received from the acquisition unit is acceptable according to the serial number received from the terminal serial number setting unit, and send the judgment result to the identification unit and the authentication unit; The identifying unit is further used to determine whether the network requests to renew the key according to the judgment result obtained from the serial number acceptable judging unit; The authenticating unit is further configured to determine whether the authentication to the network is successful according to the judgment result obtained from the serial number acceptable judging unit. 25. A device for initiating a key update request, characterized in that the device includes: an initiation request determination unit, a second key storage unit, a second new key generation unit, a random number generation unit, and an authentication parameter acquisition unit , an authentication parameter sending unit; The initiation request decision unit is used to decide whether to initiate a key update request, and send the decision result to the authentication parameter acquisition unit; The second key storage unit is used to store the second key; The second new key generation unit is used to generate a second new key; The random number generating unit is used to generate random numbers; The authentication parameter obtaining unit is used to obtain the second key from the second key storage unit or obtain the second key from the second new key generation unit according to the determination result obtained from the initiation request determination unit. A new key, obtaining a random number from the random number generating unit, and generating an authentication parameter according to the obtained key and the random number, and sending it to the authentication parameter sending unit; The authentication parameter sending unit is used for sending the received authentication parameter to the key update request identification device. 26. The device according to claim 25, further comprising: a network serial number setting unit, used to set the serial number; The authentication parameter acquiring unit is further configured to acquire a serial number from the network serial number setting unit, and generate an authentication parameter according to the acquired serial number, the random number and the key. 27. A device for identifying whether to request a key update, characterized in that the device includes: an authentication parameter receiving unit, a consistency verification unit, a first key storage unit, a first new key generation unit, and an identification unit; Wherein, the authentication parameter receiving unit is used to receive the authentication parameter sent by the network; The first key storage unit is used to store the first key; The consistency verification unit is used to obtain the first key stored by the first key storage unit, or obtain the first new key generated by the first new key generation unit, and according to the obtained key Verifying the consistency of the authentication parameters received by the authentication parameter receiving unit, and sending the verification result to the identification unit and the first new key generation unit; The identification unit is used to determine whether the network requests to update the key according to the received verification result; The first new key generation unit is used for generating a first new key according to the received verification result. 28. The device according to claim 27, wherein the consistency verification unit comprises: an authentication parameter regeneration unit and an authentication parameter comparison unit; The authentication parameter regeneration unit is used to obtain the first key from the first key storage unit, or obtain the first key from the first new key generation unit according to the comparison result received from the authentication parameter comparison unit. Obtain a first new key, and obtain an authentication parameter according to the obtained key, and send the obtained authentication parameter to the authentication parameter comparison unit; The authentication parameter comparison unit is used to compare the authentication parameter received from the authentication parameter regeneration unit with the authentication parameter received by the authentication parameter receiving unit, and send the comparison result to the identification unit, The first new key generation unit and the authentication parameter regeneration unit. 29. The device according to claim 28, further comprising: an acquisition unit; The obtaining unit is used to obtain a random number and a serial number from the authentication parameter received by the authentication parameter receiving unit, and send the obtained random number and serial number to the authentication parameter regeneration unit; The authentication parameter regeneration unit is configured to use the key obtained from the first key storage unit or the first new key generation unit and the random number and sequence number received from the acquisition unit, Get authentication parameters. 30. The device according to claim 27, 28 or 29, characterized in that the device further comprises: an authentication unit; The authentication unit is used to obtain a consistency verification result from the consistency verification unit, and determine whether the authentication to the network is successful according to the obtained consistency verification result. 31. The device according to claim 30, further comprising: a terminal serial number setting unit, and a serial number acceptable judging unit; The terminal serial number setting unit is used to set the serial number of the terminal, and send it to the acceptable judgment unit of the serial number; The acquiring unit is configured to acquire a serial number from the authentication parameter received by the authentication parameter receiving unit, and send the acquired serial number to the serial number acceptable judging unit; The serial number acceptance judgment unit is used to judge whether the serial number received from the acquisition unit is acceptable according to the serial number received from the terminal serial number setting unit, and send the judgment result to the identification unit and the authentication unit; The identifying unit is further used to determine whether the network requests to renew the key according to the judgment result obtained from the serial number acceptable judging unit; The authenticating unit is further configured to determine whether the authentication to the network is successful according to the judgment result obtained from the serial number acceptable judging unit.

Images