移動(dòng)網(wǎng)絡(luò)安全標(biāo)準(zhǔn)與協(xié)議-文庫吧資料
2025-01-27 09:17本頁面
【正文】 CK,IK,KSI，計(jì)算更新 USIM中的 Kc， CKSN。NASNASContextUE U/G ),Context(Response(IMSI,Signature?NASTokenRAI,Request(PTMSI,KSIRAI,PTMSI)RAUSignature,Request(PTMSI,old=NAS=NAS=UTRANEUTRAN)NAS,Selected)NASResponse(GUTI,TAIAVsBearers,Context(CK,IK,KSI),Response(IMSI,messageCompleteRequest(eKSI,LVTAI.(native0x19|NONCEue|0x0004|NONCEmme|0x0004)UE MMEo MMEnUE注冊(cè)到 MMEo中 TAU Request=message.49IntraLTESetupInitialreceivingNCC,Kenb)eNB:Modification(UEKenb)UE(UEContextKnasint,Knasenc不存貯MME傳遞 Kenb給 ENBMMETarget?對(duì)于 FullNativeECMIDLENCP/FCF/xEUSIM MEMECF/MNCP/F NCP/FCF/M?UEECM?CONNECTED(EncAlg,.ASNASNH?f(Kasme,Kenb)NCC?1EPS,ContextECMCONNECTEDKnasenc= f(Kasme,0x15|0x01|0x0001|EEA1/2|0x0001)Knasint= f(Kasme,0x15|0x02|0x0001|EIA1/2|0x0001)Kenb = f(Kasme,0x11|UL NAS Count|0x0004 )NH0 = f(Kasme,0x12|Kenb|len(Kenb)=0x0020=32 )NH* = f(Kasme,0x12|NH |len(NH) )NCP/FCF/MEUSIM MECFKnasint對(duì)初始化的 NAS消息進(jìn)行 .KnasencInitialECMIDLEUSIMtoFromEPS.MMERequestCFsets.RequestCFsetsandwithEMMDEREGISTEREDNCPCFEUSIM MEUSIM MENCPCF(E)USIM MECF AttachRejectNCPCFNCPCFME EUSIMNCPME (E)USIM MEMENCPCFME USIM MENCPCFAwaywithwithdrawnTowithoff?UEint Detach without Power off?MMEint Detach Explicitly with reattach?MMEint Detach ImplicitlyHSSinitiatedwithEMMDEREGISTERED的其它場(chǎng)景AVNCPCFAVCFAVNCPCFUEinitiatedtheyEPSoranyshallandcurrentsecurity contextnativetheshallthenEPScurrentandEPSnoncurrentaMMEUETo? UTMS與 LTE之間的 RAU， TAU過程? LTE內(nèi)的 X2,S1ASSMC完成，但 S1AP未進(jìn)行– 8,9：有 InterMMESMC.– 7： MME當(dāng) S1AP結(jié)束后，才可以進(jìn)行 InterMME.? 觸發(fā) ASSMC，但在 HO過程中繼續(xù)使用 OldASRequestRequest/PathRefresh/Rekey結(jié)束后，才可以進(jìn)行 HO? HO過程中– 3： MME發(fā)起 NASreject觸發(fā) ASHO正在進(jìn)行– 5： HO。SMC的 S1AP過程– 6： MME只有完成了 NASSMC的同步? NASSMC過程38ASmessagemodeASofsuccessfulreceivingstartUEatdecipheringUPRRCpletesecuritytheaftershallthe(encryption)uplinkandmessage.modeASofsuccessfulreceivingstarteNBatdecipheringUPRRCmandsecuritytheaftershallthe(encryption)downlinkandKASME.thebasedintegrityandmandsecuritytheindicatedRRCtheprotectedbeeNBUEmessagemodeASKASME.thebasedintegritywithintegrityshallThisAStheshalltofrommandsecurity? The).(seetwoandCK,ASMEcalculateandTAUinNONCEUEastheNONCEUEtheshalltheclausedescribedthecontextaMME.? NonceUE– WhenUEcreatedcontextmappedwhen(.,startsetshallsecurityforNASand– ThemodeNASinandKSISGSN,includingtheproceduremodeNASinitiates? TheK39。thetoonmoreSeeTAUinandtheidentifiedIKwhereandfromK39。freshgenerateNONCEmmewithreceiveduse32bitgenerateMMEcase,Insecuritytheshallcontextmappedashallthereceivedrequesttherequest,theUEbycontexthavedoesthemessage.modeNASsendingstartsthisMMEatuplinkmessage.modeNASreceivingstartsecurity contextwiththecipheringNASModeNASinalgorithmskeysusingModeNASonintegritycheckdecipherMMECommandNASinrequestedcaseIMEIshallpletesecurityTheintegritycipheredtopletesecuritytheandthisciphering/decipheringprotectionNASshallthesuccessfully).(seetwoandCK,ASMEcalculateandTAUinNONCEUEastheNONCEUEtheshalltheclausedescribedthecontextawhenIntheindicatedonkeyNASandintegrityindicatedusingintegritycheckingattackerbynottheseensureUEinonesmatchthesentsecuritytheensuringThismandsecuritytheintegrityverifyUE.theeKSIbyKASMEbasedintegritywithnotprotectedbemessagemobility.inmappedcreatingcaseinandbothKASME,fortheNASthesecurityreplayedcontainUEMMEmessagemodeNASCount快還返轉(zhuǎn)時(shí)，就要更換 Kasme了NASNASnativealreadyforormodeduringbeshallNASUTRAN/GERAN?EUTRANHO . MappinginNAS??Reset0NAS? 因此，在 InterPLMN的 TAU時(shí)，則必須要運(yùn)行 EPSid有關(guān)，因此，當(dāng) SNSQN(+)AKSNID=MCC+MNC? Kasme=f(CK,PLMN2930MMEHSS CK,IKKDF256256SN id, SQN, ? AKKeNBKASME256KDFKDFKDF KDF256bitkeys KNASenc KNASint128bitkeys KNASenc KNASintTrunc Trunc256 256128 128256256256NASencalg,AlgIDNASintalg,AlgIDNAS UPLINK COUNTKDF KDF256bitkeys KRRCenc KRRCint128bitkeys KRRCenc KRRCintTrunc Trunc256 256128 128256256RRCencalg,AlgIDRRCintalg,AlgIDUPencalg,AlgID256256Physical cell ID, EARFCNDL256KeNBeNBeNBKeNB*KDFKUPencKUPenc256256128TruncKDFNHNHKeNB25631MECK,IKKDF256256SN id, SQN, ? AKKeNBKASME256KDFKDFKDF KDF256bitkeys KNASenc KNASint128bitkeys KNASenc KNASintTrunc Trunc256 256128 128256256256NASencalg,AlgIDNASintalg,AlgIDNAS UPLINK COUNTKDF KDF256bitkeys KRRCenc KRRCint128bitkeys KRRCenc KRRCintTrunc Trunc256 256128 128256256RRCencalg,AlgIDRRCintalg,AlgIDUPencalg,AlgID256Physical cell ID, EARFCNDL256256KeNB*KDFKUPencKUPencTrunc256128256KDF NHNHKeNB25632Kasme與 SNtheAVsSGSNOnlytheAVsPLMNOnlytheAVssOnlyMME MMESGSNAn SGSN may forward unused UMTS authentication vectors to an MME UMTS AVs which were previously stored in the MME may be forwarded back towards the same SGSN. UMTS AVs which were previously stored in the MME shall not be forwarded towards other SGSNs.EPS authentication vectors shall not be forwarded from an MME towards an SGSN.Unused EPS authentication vectors shall not be distributed between MME39。workUERANDKf1 f2 f3 f4 f5XMACRESCK IKSQN(+)AK 雙向認(rèn)證認(rèn)證令牌及隨機(jī)數(shù)AMF MACSQNAK認(rèn)證算法MACUSIMSNId KasmeMEME28DifferentUERANDKf1 f2 f3 f4 f5XMACRESCK IKSQN(+)AK 雙向認(rèn)證認(rèn)證令牌及隨機(jī)數(shù)AMF MACSQNAK認(rèn)證算
教學(xué)課件相關(guān)推薦
鄂ICP備17016276號(hào)-1