Key reconsul tation trigger method in general pilot system

The general guide system trigger method of heavy key negotiation

technical field

The invention relates to wireless communication field, referring to the wideband code multiple access cover (WCDMA, Wideband Code Division Multiple Access system( universal guide system (GBA, Generic Bootstrapping Structure of the key management method.

background technology

AN Biao Zhunyou the third generation partnership project (organizes 3GPP, 3rd GenerationPartnership And manufacturing), and R99, R4 and R5 three versions to achieve the finalization, a stage is carrying out at the operation of R6 thereof. Considered of multiple terminal device and application servers need to the position of the communication authenticate are, claims a R6 thereof configured of the general authentication frame (Generic Authentication Frame), concept claims a and authentication mechanism is a terminal and IP protocol using, a polymeric wire and authentication is in any method. GBA is in GAA pre-shared system secret key the authentication scheme.

The auxiliary digital 1 listed with the GBA reference electrode network entity and them the interface. And user equipment (UE, User Equipment) access request (NAF Network ApplicationFunction, network application function) is a part of application; the application needed by the key end of the protection. And the Digest HTTP protocol AKA negotiation of the button (BSF, Bootstrapping Server Function) ( HTTP Authentication: Basic and Digest AccessAuthentication of claims a RFC2617 and UE and server is obtained, simultaneously UE and BSF is further completed the entity authentication of terminal and network. The ownership user system (HSS, Household SubscriberSystem) is arranged on the working the information of the keys and concerned user place between the core nuclear area networks and user equipment shared, which is BSF providing the key data in consultation. The consultation completes, NAF to the BSF request key, BSF keeps a among them the safety tunnel is electrically connected with the key comprises at the time NAF. Communication between the UE and a NAF using the same end of the protection.

The key negotiation method, BSF will generate the life life of key (be by message time, can be current capacity, or the types' values) to transmit UE. The NAF to the BSF acquiring key, a BSF is further informing a lifetime of the key, and a informing a UE value of the same.

The present standard claim NAF polling wherein the lifetime for sharing system unceasingly key and UE, a discovering the key expired, a request for UE transmission a consult, simultaneously protocol for a limiting the Ua interface by. The UE wherein the support, wherein consult a new key and BSF. A see with a key negotiation heavy current and lifetime for key expired and trigger state, once the key is expired, it casing is; the application protocol according therefore corresponding claim terminate, affected by the continuity for UE between NAF and corresponding, wherein further affected the fixed operation of wireless communication system.

invention content

The technical problem that the invention flowing solve is a shortcoming with prior process of communication and UE and NAF of without having a wireless communication system according is of touching stably continuous, hoping to propose an and maintain the general guide system and UE and NAF are stably and trigger method of heavy key negotiation.

The invention is a general guide system trigger method for heavy key negotiation, comprising the following: surfaceThe original lifetime and upper lifetime for key, wherein the than a hard lifetime small deadline and lifetime for key; And when the soft lifetime phone, consultationThe consulting successfully, may use novel key plugged, deleted the original cutting key; Continuously or with the cutting key, a expired; and new key.

The invention claims a method for - comprising following steps: The first steps: BSF and UE end of the primary key negotiation, processThe second steps: Consulted successfully, BSF the lifetime for key by message notification to UE, UE the life life and upper lifetime, and calculated the lifetime (specifically method to limit according to the local strategy, which is characterized soft lifetime is less than hard lifetime, and a generally achieve a successful key negotiation to hard lifetime from flexible lifetime, so the key in the propping surface lifetime, a new key be is made here, and circumstances referred to device for operating a hose, network movement of hose, configuration correcting equal); Method for flexible lifetime computational capable of the following those methods, and is interposed between adjacent those methods: a) subtracts the upper lifetime a small fixed value and lifetime; b) is multiplied a hard lifetime part times, to 90%, and soft lifetime; c) subtracts the upper lifetime a small random value and lifetime, as sun visor definition to a random value range.

The third steps: NAF to the key for BSF request consulted, BSF is the key at the same time is informs the lifetime for key, further NAF the key and upper lifetime, calculated the lifetime for key, calculated the processor and second step; the sameThe fourth steps: UE and NAF unceasingly inspect the lifetime for key, a UE first discovered of the key is at the lifetime, informs (short), NAF is connected to the corresponding on consultative request message to the NAF transmission (Bootstrapping Renegotiation Request), and time U-SHAPED STRUCTURE and BSF with a on the second key to consult; during consultation, and UE NAF a casing with the original key protection method, dataThe fifth steps: A NAF first discovered of the key is at the lifetime, transmit the heavy consultative request message to UE (Bootstrapping Renegotiation Request), and UE a fixed at the time of the second key to consult with BSF, similar; during consultation, and UE NAF a casing is a key and a protection method, dataThe sixth steps: The consulted completes successfully, and NAF obtained the key, and UE NAF may use novel key plugged; Continuously or with the original key, a key expired and novel key, aA negotiating failure, and UE and NAF gradually with the original key, which at the upper lifetime is a key, wherein the heating negotiation and fixed by UE and NAF local, strategyThe seventh steps: UE and NAF recomputate the lifetime of novel key, a duplicates the front of said support part at the invention six operations, is finished the communication.

The invention claims a method and a plurality of the original lifetime and upper lifetime for key, is a than a hard lifetime small deadline and lifetime for key, wherein the available for prior technology trigger manner so the communication at the problem; and ensuring consistency between datum of the continuity, wherein it further operation of ensuring consistency between datum system.

Brief description for drawings

Digital 1) is GBA a moulded relief map.

The digital 2) is UE first of the flexible lifetime the NAF loop consultation phone short schematic drawing.

The digital is 3 NAF first of the flexible lifetime to the transport UE consultation phone short schematic drawing.

detailed description of illustrated embodiments

A a method for powering the further emitter to the invention claims a light of the auxiliary shape and detailed description of illustrated embodiments.

The GBA of the present disclosure propose trigger method of heavy key negotiation and lifetime and upper lifetime for key, wherein the than a hard lifetime small deadline and lifetime for key, which is at the lifetime consulted on the phone, comprising consulting successfully, can immediately uses the novel key, deleted the original cutting key, a casing is a cutting key, a expired, which the new key. To the communication of uninterrupted working.

Concretely invention as follows: Between NAF and UE there is no key of sharing, therefore BSF and UE end of the primary key negotiation, processA consulted successfully, BSF the lifetime for key by message notification to UE, UE the life life and upper lifetime, and calculated according to the local policy the lifetime, the specific method which is limit, wherein the processor is a flexible lifetime is less than the upper lifetime, and a generally achieve a successful key negotiation to the upper lifetime from the lifetime, so the key in the propping surface lifetime, and new key be for using, here and circumstances referred to the operation the normal, network movement of hose, configuration correcting equal; Method for flexible lifetime computational capable of the following those methods, and is interposed between adjacent those methods: (1) Subtracts a small fixed value the upper lifetime and lifetime; (2) Is multiplied is reflected times the upper lifetime, to 90%, and soft lifetime; (3) Subtracts a small random of the upper lifetime and lifetime, as sun visor definition to a random value range. A NAF to the key for BSF request consulted, BSF is the key at the same time is informs the lifetime for key, further NAF the key and upper lifetime, calculated the lifetime for key, calculated the principle of the front and.

UE and NAF unceasingly inspect the lifetime for key, a UE first discovered of the key is at the lifetime, wherein inform (notify), NAF is connected to the corresponding consultative trigger message to the NAF transmission, at the time and UE BSF with a on the second key to consult; during consultation, and UE NAF a casing with the original key and application data. A NAF first discovered of the key is at the lifetime, a UE transmission consultation trigger message, at the time UE is in a on the second key to consult with BSF, similar; during consultation, and UE NAF a casing with the original key connected to the application data. The consulted completes successfully, and NAF obtained the key, and UE NAF may use novel key plugged; Continuously or with the original key, a key expired and novel key, aA negotiating failure, and UE and NAF gradually with the original key, which at the upper lifetime is a key, wherein the heating negotiation and fixed by UE and NAF local strategy. Finally, and UE NAF recomputate the lifetime of novel key, a unceasingly the inspected of lifetime for key is opened with a front of the thickness is the communication and UE and NAF.

The invention, which effectively solves the original bidirectional manner so the communication at the problem, method of simple, is easy for.