Mutual authentication method and system with network in machine type communication

A method for a Mobile Mobility Entity (MME) to carry out mutual authentication with a Machine Type Communication (MTC) device group comprising:

• receiving group-related authentication data from a leader of the MTC device group;
• transmitting the received information and Serving Network-ID (SN-ID) being an identification number of the MME to a Home Subscriber Server (HSS);
• receiving from the HSS, a Local Master Key (LMK) generated based on a random value generated by the HSS and a first secret key (SEKL) shared between the HSS and the leader beforehand, an Authentication Vector (AV) including a first AUthentication TokeN (AUTN) generated through the local master key information, the random value, and a leader authentication value (XRES)
• broadcasting the random value and the first authentication token to the MTC device group based on information received from the HSS;
• receiving from the leader a leader authentication response (RES) that the leader generates by using a local master key value calculated by using the first secret key value;
• authenticating the leader by comparing the leader authentication response with a leader authentication value received from the HSS;
• and
• authenticating members within the MTC device group according to the leader authentication result, wherein
• the authenticating member within the MTC device group according to the leader authentication result comprises:
• transmitting, by the member within the MTC device group, following information to the leader, the information transmitted to the leader comprising:
• a key value calculated by applying a Key Derivation Function (KDF) to a second secret value (SEKi) shared among individual devices and the HSS and a given Prime Number (PNi);
• the prime number;
• a device authentication token (AUTH1,i) generated by applying a third function to the prime number and the second secret key;
• and
• integrity authentication MAC value (MAC1,i) generated by applying a hash function to the key value and the device authentication token by a member within the MTC device group, and
• the leader transmits, to the MME, an expected confirmation value (XCV) calculated through Chinese Remainder Theorem (CRT) by using key values received from members within the MTC device group and the prime number;
• and a member authentication message including an authentication token for confirmation (AUTH) calculated by applying a hash function to the sequence number and device authentication tokens of individual members.

A mutual authentication system for Machine Type Communication (MTC) devices to form a MTC device group and to carry out mutual authentication with a network, the mutual authentication system comprising:

• a leader of the MTC device group;
• members of the MTC device group;
• a Home Subscriber Server (HSS) configured to:
• generate a random value,
• generate a local master key based on a first secret key value shared by the leader beforehand, and
• generate information of members of the MTC device group and an authentication vector including a first authentication token generated based on the local master key information, the random value, and a leader authentication value;
• and
• a Mobile Mobility Entity (MME) configured to:
• receive group-related authentication data from the leader,
• transmit the received group-related authentication data and a Serving Network-ID (SN-ID), which is an identification number of the MME, to the HSS,
• broadcast the random value and the first authentication token to the leader and the members of the MTC device group,
• receive, from the leader, a leader authentication response generated by the leader by using the local master key value calculated by using the first secret value,
• authenticate the leader by comparing the leader authentication response with a leader authentication value received from the HSS,
• authenticate the members of the MTC device group based on a member authentication response received from the leader, wherein
• the member authentication response is based on member authentication data received from the members of the MTC device group.