Key distribution and authentication method and system, and apparatus
AssigneeHuawei Technologies Co., Ltd.
InventorsRong Wu, Bo Zhang, Lu Gan, Haiguang Wang
Life of this patent
Estimating the term…
Abstract
This application provides a key distribution and authentication method, system, and an apparatus. The method includes: a service center server distributes different keys to terminal devices, and then the terminal devices perform mutual authentication with the network authentication server based on respective keys and finally obtain communication keys for communication between the terminal devices and a functional network element. This provides a method for establishing a secure communication channel for the terminal device, having a broad application range.
Claims20
A key authentication method, comprising:
- receiving, by a terminal device, a first key of the terminal device that is sent by a user management server;
- and
- performing, by the terminal device, mutual authentication with a network authentication server based on the first key, to generate a communication key for communication between the terminal device and a functional network element, wherein the first key of the terminal device is generated based on a parameter set for a first level of security complexity different from a second level of security complexity of another terminal device, wherein the parameter set includes at least a fresh parameter used to indicate freshness of the first key to prevent a replay attack.
A terminal device, comprising:
- a receiver, configured to receive a first key of the terminal device that is sent by a user management server;
- and
- a processor, configured to perform mutual authentication with a network authentication server based on the first key, to generate a communication key for communication between the terminal device and a functional network element, wherein the first key of the terminal device is generated based on a parameter set for a first level of security complexity different from a second level of security complexity of another terminal device, wherein the parameter set includes at least a fresh parameter used to indicate freshness of the first key to prevent a replay attack.
Dependencies are inferred from the claim text.