3GPP 네트워크에서 효율적인 인증 데이터 관리를 위한 개선된 AKA 프로토콜

국문 초록 (Abstract)

본 논문에서는 3GPP 네트워크에서 USIM 기반의 사용자 인증 기법을 제안한다. 제안 기법은 기존의 3GPP 네트워크 접속을 위한 인증 방식에서 발생 가능한 Sequence Number 동기 문제, 인증 데이터 Overhead 문제, 네트워크 간 시그널링 Overhead 문제 등을 개선한다. 제안 기법은 기존의 USIM 기반의 AKA 인증 프로토콜을 기본 모델로 사용하고 단말과 SN이 공유한 SK와 Time Stamp를 통해서 AKA 인증 절차를 수행하도록 한다. 이렇게 함으로써 인증 벡터의 Sequence Number의 동기 여부를 확인할 필요 없이 Time Stamp 값으로 인증 벡터의 맵핑을 수행하여 Sequence Number 동기 문제를 해결할 수 있다. 뿐만 아니라 하나의 인증 벡터만을 관리하여 사용하기 때문에 SN에서의 인증 데이터 Overhead문제를 해결하고, SN과 HN 사이의 시그널링 Overhead 문제를 개선할 수 있다.

다국어 초록 (Multilingual Abstract)

In this paper, we propose a USIM-based Authentication Scheme for 3GPP Network Access. The proposed scheme improves the problems of existing authentication protocol in 3GPP Network such as sequence number synchronization problem, the storage overhead of authentication data, and bandwidth consumption between Serving Network and Home Network. Our proposal is based on the USIM-based Authentication and Key Agreement Protocol that is defined in 3GPP Specification. In our scheme, mobile nodes share a SK with Serving Network and use a time stamp when mobile nodes are performing an authentication procedure with Serving Network. By using time stamp, there is no reason for using sequence number to match the authentication vector between mobile nodes and networks. So, synchronization problem can be solved in our scheme. As well as our scheme uses an authentication vector, the storage overhead of authentication data in Serving Network and bandwidth consumption between networks can be improved.

목차 (Table of Contents)

• 요약
• ABSTRACT
• Ⅰ. 서론
• Ⅱ. 관련 기술 및 문제점 분석
• Ⅲ. 제안하는 3GPP-AKA 프로토콜
• Ⅳ. 제안 기법 성능 비교 및 분석
• Ⅴ. 결론
• 참고문헌
• 〈著者紹介〉

참고문헌 (Reference)

1 P. Karger, "Security issues in a CDPD wireless network" 2 (2): 16-27, 1995

2 M. Zhang, "Security analysis and enhancements of 3GPP authentication and key agreement protocol" 4 (4): 734-742, 2005

3 ETSI, "Recommendation gsm 02.09: Security related network functions. Technical report" European Telecommunications Standards Institute 1993

4 L. Harn, "Modifications to enhance the security of GSM" 1995

5 C. Lee, "Enhanced privacy and authentication for the global system for mobile communications" 5 (5): 231-243, 1999

6 W. Juang, "Efficient 3GPP authentication and key agreement with robust user privacy protection" 2720-2725, 2007

7 H. Lin, "Authentication protocols for personal communication System" 25 (25): 256-261, 1995

8 C. Huang, "Authentication and key agreement protocol for UMTS with low bandwidth consumption" 392-397, 2005

9 I. Goldberg, "Architectural considerations for cryptanalytic hardware, Chapter 10 of Cracking DES: Secrets of Encryption Research, Wiretap Politics & Chip Design" O’'Reilly 1998

10 "3GPP, “TSG services and system aspects, 3G security, security architecture (R5),” 3GPP TS 33.102 V5.5"

11 "3GPP, “TSG services and system aspects, 3G security, report on the evaluation of 3GPP standard confidentiality and integrity algorithm, version 1.1.0,” 3GPP TR 33.909"

12 "3GPP, “TSG services and system aspects, 3G security, formal analysis of the 3G authentication protocol, version 3.1.0,” 3GPP TR 33.902"