LTE鉴权在小型核心网侧的新实现

发布时间：2018-04-24 20:36

本文选题：LTE + 小型核心网　；参考：《武汉邮电科学研究院》2014年硕士论文

【摘要】：移动通信作为通信领域中最具活力、最具发展前途的一种通信方式,它改变了社会,也改变了人类的生活方式。随着生活品质的提高,移动电话成为了人们生活中不可或缺的通信终端,为人们的生活带来了极大的便利。但是,随着移动通信技术的发展,其通信系统的安全性也引起了人们的重视,手机盗号的情况时有发生。为了防止这种现象的出现,从以往的1G通信系统到3G通信系统,对用户的鉴权与认证也越来越严格。如今,以长期演进(Long Term Evolution,LTE)为代表的4G移动通信系统,继承了3G系统的安全体系设计,并且在结构完善和功能增强方面都有新的进展。LTE作为新一代的移动通信系统,其容量和性能都较之前的系统有所优化。在LTE系统中,核心网,作为一个庞大的系统,对整个网络的运行、管理和安全起到了非常重要的作用。但是,考虑到一些容量需求较小和功能需求较为简单的情况,本文引入了一种小型的核心网。它将实际核心网中移动管理实体(Mobility Management Entity,MME)、归属用户服务器(Home Subscriber Server,HSS)、服务网关(Serving Gateway,S-GW)、分组数据网关(PDN Gateway, P-GW)等功能实体的主要功能集成到一起,可以在特定场合的专网中运行,或者作为一种测试工具,来检验基站和用户设备(User Equipment, UE)的功能。为了满足用户的安全性需求,则需要在该小型核心网侧设计满足要求的鉴权过程,保护用户不被黑客攻击。在原有的实际网络环境中,MME是通过向HSS服务器获取鉴权参数,然后下发鉴权请求消息给UE进行鉴权。本文秉承该小型核心网的简单有效的设计原则,通过在该小型核心网内部增加安全模块来计算并传递鉴权参数,来实现用户的鉴权。本文提出的这种设计,使得HSS中计算鉴权参数的功能集成到了小型核心网中,主要有三个方面的优势：第一,避免了小型核心网与HSS服务器Sa6接口繁琐的协议栈代码的编写；第二,可以减少购买HSS服务器来实现鉴权功能的成本。第三,可以更灵活的配置鉴权过程中的可选参数,来配合各种情况的测试。
[Abstract]:As one of the most dynamic and promising communication methods in the field of communication, mobile communication has changed the society and the way of human life. With the improvement of quality of life, mobile phone has become an indispensable communication terminal in people's life, which brings great convenience to people's life. However, with the development of mobile communication technology, the security of the communication system has attracted people's attention. In order to prevent this phenomenon from 1G communication system to 3G communication system the authentication and authentication of users is becoming more and more strict. Nowadays, the 4G mobile communication system, represented by long term long Term Evolution (LTE), inherits the security architecture design of 3G system, and has made new progress in improving the structure and enhancing the function. LTE is a new generation of mobile communication system. Its capacity and performance are better than the previous system. In the LTE system, the core network, as a huge system, plays a very important role in the operation, management and security of the whole network. However, considering the small capacity requirement and simple function requirement, a small core network is introduced in this paper. It integrates the main functions of mobility Management entity, home user server home Subscriber server, service gateway serving Gateway-S-GWN, packet data gateway PDN Gateway, P-GW) and other functional entities in the actual core network, and can run on a special network in a specific situation. Or as a test tool to verify the function of base station and user equipment user equipment (UEE). In order to meet the security requirements of users, it is necessary to design authentication process on the core network side to protect users from hackers. In the original network environment, MME obtains authentication parameters from HSS server, then sends authentication request message to UE for authentication. Based on the simple and effective design principle of the small core network, this paper calculates and transmits the authentication parameters by adding the security module inside the small core network to realize the authentication of the user. This design, which makes the function of calculating authentication parameters in HSS integrated into small core network, has three main advantages: firstly, the protocol stack code of Sa6 interface between small core network and HSS server is avoided; Second, you can reduce the cost of purchasing HSS servers to enable authentication. Thirdly, the optional parameters in the authentication process can be configured more flexibly to cooperate with the testing in various situations.
【学位授予单位】：武汉邮电科学研究院
【学位级别】：硕士
【学位授予年份】：2014
【分类号】：TN929.5

【相似文献】