3GPP-WLAN interworking에서의 효율적인 보안 메커니즘
Efficient security mechanism in 3GPP-WLAN interworking
0
조회
0
다운로드
0
인용
0
참고문헌
초록
3GPP-WLAN(3rd Generation Partnership Project-Wireless Local Area Network) interworking은 WLAN UE(user equipment)에 의한 3GPP 시스템내에서 자원 이용과 서비스 접근을 의미하며, 3GPP 서비스와 기능을 WLAN 액세스 환경으로 확장함으로써, 3GPP 시스템에 무선 액세스 기술로 WLAN을 보완적으로 이용하는 것을 목적으로 한다. 본 논문에서는 3GPP-WLAN interworking에서 UE 개시 터널 설정을 위한 효율적인 메커니즘을 제안한다. 제안된 메커니즘은 UE와 3GPP AAA(Authentication, Authorization, Accounting) 서버 사이의 인증과 키 일치 과정에서 미리 분배된 비밀키에 기반한다. 따라서 UE에서 많은 계산을 필요로 하는 모듈러 지수승 연산과 공개키 서명 연산을 피할 수 있다. 또한 제안된 기법은 UE와 PDGW(Packet Data Gateway) 사이에 상호 인증과 세션 키 설정을 제공한다.
Abstract
3GPP(3rd Generation Project Partnership)-WLAN(Wireless Local Area Network) interworking refers to the utilisation of resources and access to services within the 3GPP system by the WLAN UE(User Equipment) and user respectively. The intent of 3GPP-WLAN Interworking is to extend 3GPP services and functionality to the WLAN access environment. We propose an efficient mechanism for the setup of UE-initiated tunnels in 3GPP-WLAN interworking. The proposed mechanism is based on a secret key which is pre-distributed in the process of authentication and key agreement between UE and 3GPP AAA(Authentication, Authorization, Accounting) server. Therefore it can avoid modular exponentiation and public key signature which need a large amount of computation in UE. Also the proposed scheme provides mutual authentication and session key establishment between UE and PDGW(Packet Data Gateway).
참고문헌 (12)
- "3GPP system to Wireless Local Area Network Interworking; System Description"
- "3GPP system to WLAN Interworking; Functional and architectural definition", pp.3~
- "3G Security; Security Architecture", pp.3~
- "WLAN Interworking Security", pp.3~
- "3G Security; Specification of the MILENAGE Algorithm Set"
- "EAP AKA Authentication", pp.11~
- "PPP Extensible Authentication Protocol"
- "IP Encapsulating Security Payload"
- "Internet Key Exchange Protocol"
- "Draft Supplement to Standard for Telecommunications and Information Exchange Between Systems - LAN", MAN Specific Requirements - Part 11, March2002, ~
- "June 2000: "Remote Authentication Dial In User Service"
- "September 2003 : Diameter base protocol" (2003)