CN101409882A - Handshaking method for network safety, apparatus for initiating and responding handshake - Google Patents
Handshaking method for network safety, apparatus for initiating and responding handshake Download PDFInfo
- Publication number
- CN101409882A CN101409882A CNA2007101631701A CN200710163170A CN101409882A CN 101409882 A CN101409882 A CN 101409882A CN A2007101631701 A CNA2007101631701 A CN A2007101631701A CN 200710163170 A CN200710163170 A CN 200710163170A CN 101409882 A CN101409882 A CN 101409882A
- Authority
- CN
- China
- Prior art keywords
- message
- temporary key
- key
- integrity code
- master key
- Prior art date
- Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
- Pending
Links
Images
Landscapes
- Mobile Radio Communication Systems (AREA)
Abstract
The invention relates to the communication technology field and discloses a handshake method, a handshake initiating device and a handshake responding device used for network security. The technical proposal provided by the embodiment of the invention can uses a master key preset in a master key list to involve in the handshaking process and can lead the master key preset in the master key list to be capable of involving in the generation of a temporary key during the handshaking process; therefore, the handshaking can also be smoothly carried out without the master key by negotiation of upper classes and the master key preset in the master key list can be involved in the generation of the temporary key, thus further improving the handshaking safety.
Description
Technical field
The present invention relates to communication technical field, be specifically related to be used for the handshake method of network security, shake hands apparatus for initiating and handshake response device.
Background technology
Ultra broadband (UWB:Ultra Wideband) wireless communication technology originates from the research of nineteen sixties to time-domain electromagnetics, is mainly used in military radar precision distance measurement, angle measurement and secret communication at first.A kind ofly support that the radio ultra wide band system of multi-band orthogonal frequency division multiplex (MB-OFDM:Multi-band OrthogonalFrequency Division Multiplexing) function is complete distributed systems, each equipment all is independent and equity in this system, does not have central coordinator.This network configuration of radio ultra wide band system proposes very big challenge to network security, therefore standard definition corresponding security mechanisms, wherein defined foundation and key generation and distribution that a kind of 4 (4-way) handshake mechanisms carry out safe trusting relationship, handshake procedure carries out between medium access control (MAC:Media Access Control) layer.Aspect data encryption, the temporary key that use generates in 4 handshake procedures (PTK:Pair-wiseTemporal Key) is encrypted unicast data, and on the basis of existing temporary key, organize temporary key (GTK:Group Temporal Key) request and distribution, in order to broadcasting and multicast packet are encrypted.
4 times handshake procedure plays crucial effects in the security mechanism of standard definition, this process is made up of 4 interacting messages, and the equipment that message (Message) 1 is initiated in definition be the apparatus for initiating of shaking hands (Initiator), and another equipment of definition correspondence is handshake response device (Responder).The prerequisite of 4 handshake procedures is that the equipment both sides must share at least one master key (Master Key), and only transmit the master key sign (MKID:Master Key ID) of master key in handshake procedure, and directly do not transmit the master key value.Its process prescription is as follows:
1) shake hands apparatus for initiating structure and send message one, and in this message, comprise: the master key sign of appointment, the temporary key sign (PTKID) of suggestion, and the random number one of a generation;
2) the handshake response device carries out following operation after receiving message one: checking temporary key unique mark; If unique, generate one 128 random number two; The method that provides according to standard generates temporary key and key confirmation key (KCK:Key Confirmation Key); Generate temporary key Message Integrity Code (PTK MIC:PTK Message Integrity Code); At last, structure and transmission message two comprise conditional code in this message, random number two and the temporary key Message Integrity Code that generates;
3) shake hands apparatus for initiating after receiving message two, carry out following operation: the method that provides according to standard generates temporary key and key confirmation key; Generate the temporary key Message Integrity Code; Whether the temporary key Message Integrity Code that carries in the temporary key Message Integrity Code that judge to generate and the message two is consistent; If consistent, think that the handshake response device has correct master key, continue to judge whether the state of conditional code sign is normal; If, structure and send message three just, comprise in this message with message one in the same random number one and the temporary key Message Integrity Code of self generation;
4) the handshake response device carries out following operation after receiving message three: verify that the temporary key Message Integrity Code that self generates is whether consistent with the temporary key Message Integrity Code that carries in the message three; If consistent, think that the apparatus for initiating of shaking hands has correct master key, structure and send message four comprises the random number two the same with message two in this message, and the temporary key Message Integrity Code of self generation; The handshake response device is installed the temporary key that generates;
5) verify that the temporary key Message Integrity Code that self generates is whether consistent with the temporary key Message Integrity Code that carries in the message four, if the consistent temporary key that generates of just installing.
So far, finished handshake procedure 4 times; From the above, the temporary key that generates in master key in 4 handshake procedures and the process does not transmit in communication process, has stopped because key to the threat that safety causes, is made the fail safe of radio ultra wide band system obtain guarantee by intercepting; Wherein, the master key that uses in 4 handshake procedures is to be consulted and come by the upper strata of the both sides' media access control layer that participates in shaking hands, and master key participates in temporary key and generates, and makes the temporary key of generation comprise the factor of authentication.
But because 4 handshake procedures of media access control layer must have master key, when not consulting to obtain master key on the upper strata, 4 times handshake procedure can't carry out, and the temporary key that secure communication needs can't generate, thereby can't carry out secure communication.Therefore, if there is not the upper strata to participate in, the media access control layer security mechanism just can't be carried out, and has limited the flexibility of ultra broadband networking.
Summary of the invention
Embodiment of the invention technical problem to be solved provides the handshake method that is used for network security, shake hands apparatus for initiating and handshake response device, the technical scheme of using the embodiment of the invention to provide, when the master key that does not have the upper strata to consult, also can carry out 4 times of media access control layer and shake hands.
Embodiment of the invention technical problem to be solved solves by the following technical programs:
The embodiment of the invention provides a kind of handshake method that is used for network security, comprising:
The apparatus for initiating of shaking hands structure also sends message one, and message one comprises first master key sign of first master key of choosing from preset the master key tabulation;
The handshake response device receives described message one, generate first temporary key according to described first master key sign in the described message one, generate the first temporary key Message Integrity Code according to described first temporary key, structure also sends message two, and described message two comprises the described first temporary key Message Integrity Code;
The apparatus for initiating of shaking hands receives described message two, uses described first master key sign to generate second temporary key, generates the second temporary key Message Integrity Code according to second temporary key; Verify described first temporary key Message Integrity Code and the described second temporary key Message Integrity Code, when the described first temporary key Message Integrity Code is consistent with the described second temporary key Message Integrity Code, structure also sends message three, and described message three comprises the described second temporary key Message Integrity Code;
The handshake response device receives described message three, verify described first temporary key Message Integrity Code and the described second temporary key Message Integrity Code, when the described first temporary key Message Integrity Code is consistent with the described second temporary key Message Integrity Code, first temporary key is installed; Structure also sends message four, and described message four comprises the first temporary key Message Integrity Code;
The apparatus for initiating of shaking hands receives described message four, obtain the first temporary key Message Integrity Code according to message four, verify described first temporary key Message Integrity Code and the described second temporary key Message Integrity Code, when the first temporary key Message Integrity Code is consistent with the second temporary key Message Integrity Code, second temporary key is installed.
The embodiment of the invention provides a kind of handshake method that is used for network security, comprising:
Structure also sends message one, and described message one comprises first master key sign of first master key of choosing from preset the master key tabulation;
Receive the message two of the described message one of response, described message two comprises the first temporary key message integrity check sign indicating number, the described first temporary key message integrity check sign indicating number generates according to first temporary key after using described first master key sign to generate first temporary key by the handshake response device;
After using described first master key sign to generate second temporary key, generate the second temporary key message integrity check sign indicating number corresponding with described second temporary key; When the described first temporary key message integrity check sign indicating number was consistent with the described second temporary key message integrity check sign indicating number, structure also sent the message three that comprises the described second temporary key message integrity check sign indicating number;
Receive the message four of the described message three of response, described message four comprises the first temporary key message complete
The property check code, structure and send after described message four is verified the described first temporary key message integrity check sign indicating number and the described second temporary key message integrity check sign indicating number is consistent by described handshake response device;
When the described first temporary key message integrity check sign indicating number is consistent with the described second temporary key message integrity check sign indicating number, described second temporary key is installed.
The embodiment of the invention provides a kind of handshake method that is used for network security, comprising:
Receive message one, described message one comprises first master key sign of first master key that the apparatus for initiating of shaking hands is chosen from preset the master key tabulation;
Use described first master key sign to generate first temporary key, generate the first temporary key Message Integrity Code according to first temporary key;
Structure also sends message two, and described message two comprises the described first temporary key Message Integrity Code;
Receive the message three of the described message two of response, described message three comprises the second temporary key Message Integrity Code, the described second temporary key Message Integrity Code generates according to second temporary key after using described first master key sign to generate second temporary key by the described apparatus for initiating of shaking hands;
If the described first temporary key Message Integrity Code is consistent with the second temporary key Message Integrity Code, structure also sends the message four that comprises the described first temporary key Message Integrity Code, and the described first temporary key Message Integrity Code is installed.
The embodiment of the invention provides a kind of apparatus for initiating of shaking hands, and comprising:
Message one processing unit is used for structure and sends message one, and described message one comprises first master key sign of first master key of choosing from preset the master key tabulation;
Message two receiving elements, be used to receive the message two of the described message one of response, described message two comprises the first temporary key Message Integrity Code, the described first temporary key Message Integrity Code generates according to first temporary key after using described first master key sign to generate first temporary key by the handshake response device;
Temporary key Message Integrity Code generation unit comprises first generation unit, and described first generation unit is used to use described first master key sign to generate second temporary key, generates the second temporary key Message Integrity Code according to second temporary key;
Message three processing units, be used for obtaining the first temporary key Message Integrity Code from described message two, when the described first temporary key Message Integrity Code was consistent with the described second temporary key Message Integrity Code, structure also sent the message three that comprises the described second temporary key Message Integrity Code;
Message four receiving elements, be used to receive the message four of the described message three of response, described message four comprises the first temporary key Message Integrity Code, structure and transmission when described message four verifies that by described handshake response device the described first temporary key Message Integrity Code is consistent with the described second temporary key Message Integrity Code;
The temporary key installation unit is used for obtaining the first temporary key Message Integrity Code from described message four, when the described first temporary key Message Integrity Code is consistent with the described second temporary key Message Integrity Code, described second temporary key is installed.
The embodiment of the invention provides a kind of handshake response device, comprising:
Message one receiving element is used for receiving from the apparatus for initiating reception message one of shaking hands, and described message one comprises first master key sign of first master key of choosing from preset the master key tabulation;
Temporary key Message Integrity Code generation unit comprises first generation unit, and described first generation unit is used for generating the first temporary key Message Integrity Code using described first master key sign to generate first temporary key according to first temporary key;
Message two processing units are used for structure and send message two, and described message two comprises the described first temporary key Message Integrity Code;
Message three receiving elements, be used to receive the message three of the described message two of response, described message three comprises the second temporary key Message Integrity Code, the described second temporary key Message Integrity Code generates according to second temporary key after using described first master key sign to generate second temporary key by the described apparatus for initiating of shaking hands;
Message is managed the unit everywhere, is used for when the described first temporary key Message Integrity Code is consistent with the second temporary key Message Integrity Code, and structure also sends the message four that comprises the described first temporary key Message Integrity Code;
The temporary key installation unit is used for when the described first temporary key Message Integrity Code of checking is consistent with the second temporary key Message Integrity Code described first temporary key being installed.
The embodiment of the invention provides a kind of communication system, comprising:
The apparatus for initiating of shaking hands is used for structure and sends message one, and described message one comprises first master key sign of first master key of choosing from preset the master key tabulation; Receive message two, described message two comprises the first temporary key Message Integrity Code; Use described first master key sign to generate second temporary key, generate the second temporary key Message Integrity Code according to second temporary key; When the described first temporary key Message Integrity Code of checking was consistent with the described second temporary key Message Integrity Code, structure also sent the message three that comprises the described second temporary key Message Integrity Code; Receive message four, described message four comprises the first temporary key Message Integrity Code; When the described first temporary key Message Integrity Code of checking is consistent with the described second temporary key Message Integrity Code, described second temporary key is installed;
The handshake response device is used to receive described message one; Use first master key sign to generate first temporary key, generate the first temporary key Message Integrity Code according to first temporary key; Structure also sends the described message two that comprises the described first temporary key Message Integrity Code; Receive described message three, described message three comprises described second Message Integrity Code; When the described first temporary key Message Integrity Code was consistent with the described second temporary key Message Integrity Code, structure also sent the described message four that comprises the described first temporary key Message Integrity Code, and described first temporary key is installed.
The above technical scheme that provides from the embodiment of the invention as can be seen, owing to used the master key tabulation of presetting, can be when the master key that does not have the upper strata to consult, use is preset master key in the master key tabulation and is finished 4 times of media access control layer and shake hands, thereby the temporary key that uses in the time of can generating communication improves the fail safe of communicating by letter; Further, do not shake hands for 4 times, improved the flexibility of system group network owing to do not need the participation on upper strata can finish yet.
Description of drawings
Fig. 1 is for being used for the flow chart of the handshake method embodiment one of network security in the embodiment of the invention;
Fig. 2 is for being used for the flow chart of the handshake method embodiment two of network security in the embodiment of the invention;
Fig. 3 is the structure chart of the apparatus for initiating embodiment that shakes hands in the embodiment of the invention;
Fig. 4 is the structure chart of handshake response device embodiment in the embodiment of the invention;
Fig. 5 is the structure chart of communication system embodiment in the embodiment of the invention.
Embodiment
For make purpose of the present invention, technical scheme, and advantage clearer, below with reference to the accompanying drawing embodiment that develops simultaneously, the present invention is described in more detail.
The handshake method embodiment one that is used for network security provided by the invention comprises as shown in Figure 1:
Step 101, the apparatus for initiating of shaking hands structure also send message one, and message one comprises first master key sign of first master key of choosing from preset the master key tabulation;
Save presets the master key tabulation by the equipment in the radio ultra wide band system, this presets when the master key tabulation can be device initialize and just generates, and the master key tabulation in each equipment is identical, and each master key in the master key tabulation all has unique master key sign; Wherein, in order to improve security of system, regularly more new master key tabulation synchronously;
Step 102, handshake response device receive message one, generate first temporary key according to the sign of first master key in the message one, generate the first temporary key Message Integrity Code according to this first temporary key then, structure also sends message two, and message two comprises the first temporary key Message Integrity Code;
Wherein, to generate the detailed process of the first temporary key Message Integrity Code as follows for the handshake response device:
From the master key tabulation that the handshake response device is preserved, obtain and the first corresponding master key of first master key sign; Use first master key to adopt preset mode to generate first temporary key corresponding with first master key; Adopt preset mode to generate the first temporary key Message Integrity Code corresponding with first temporary key, the first temporary key Message Integrity Code is corresponding with first master key sign;
Wherein, generate first temporary key by first master key, generate the first temporary key Message Integrity Code by first temporary key and can adopt known method, this specification is not elaborated to it;
Step 103, the apparatus for initiating of shaking hands receive message two, use first master key sign to generate second temporary key, generate the second temporary key Message Integrity Code according to second temporary key;
The process that generates the second temporary key Message Integrity Code is similar with the process that generates the first temporary key Message Integrity Code, repeats no more herein;
What this step was described is the apparatus for initiating generation second temporary key Message Integrity Code after receiving message two of shaking hands, but in actual applications, the apparatus for initiating of shaking hands generates the second temporary key Message Integrity Code also can be before it receives message two; And in the present embodiment, the apparatus for initiating of shaking hands generates the second temporary key Message Integrity Code after shake hands responding device structure and transmission message two, but in actual applications, the step that apparatus for initiating generates the step and the handshake response device construction of the second temporary key Message Integrity Code and send message two of shaking hands can not have sequencing in time.
Step 104, the apparatus for initiating of shaking hands obtain the first temporary key Message Integrity Code according to message two, verify the first temporary key Message Integrity Code and the second temporary key Message Integrity Code, when the first temporary key Message Integrity Code is consistent with the second temporary key Message Integrity Code, structure also sends message three, and described message three comprises the second temporary key Message Integrity Code;
The both sides that have only the consistent just explanation with the second temporary key Message Integrity Code of the first temporary key Message Integrity Code to participate in shaking hands have identical master key, thereby need just construct and send message three when the first temporary key Message Integrity Code is consistent with the second temporary key Message Integrity Code;
Step 105, handshake response device receive message three, and after obtaining the second temporary key Message Integrity Code according to message three, verify the first temporary key Message Integrity Code and the second temporary key Message Integrity Code, when the first temporary key Message Integrity Code is consistent with the second temporary key Message Integrity Code, first temporary key is installed, and structure and transmission message four, described message four comprises the first temporary key Message Integrity Code;
Step 106, the apparatus for initiating of shaking hands receive message four, and after obtaining the first temporary key Message Integrity Code according to message four, verify the first temporary key Message Integrity Code and the second temporary key Message Integrity Code, when the first temporary key Message Integrity Code is consistent with the second temporary key Message Integrity Code, second temporary key is installed;
From the above, present embodiment can be when the master key that does not have the upper strata to consult, and use the master key that presets in the master key tabulation to finish 4 times of media access control layer and shake hands, thereby the temporary key that uses can generate communication the time improves the fail safe of communication; Further, do not shake hands for 4 times, improved the flexibility of system group network owing to do not need the participation on upper strata can finish yet.
The process that the embodiment one that is used for the handshake method of network security has shaken hands when having described the master key that does not have the upper strata negotiation, in actual applications, also have the situation of the master key of consulting on the upper strata, at this moment, two kinds of selection schemes are arranged, and the master key that consult on a kind of direct use upper strata uses the identical method of prior art to shake hands; Another kind is exactly that the master key that uses master key in the master key tabulation and upper strata to consult is simultaneously shaken hands, and what the embodiment two that is used for the handshake method of network security provided by the invention described is exactly this situation, as shown in Figure 2, comprising:
Wherein, to generate the process of the first temporary key Message Integrity Code as follows for the handshake response device:
From the master key tabulation that the handshake response device is preserved, obtain and the first corresponding master key of first master key sign, obtain the second corresponding master key of second master key sign; Use first master key and second master key, adopt preset mode to generate first temporary key corresponding with first master key and second master key; Adopt preset mode to generate the first temporary key Message Integrity Code corresponding with first temporary key, the first temporary key Message Integrity Code is corresponding with first master key sign and second master key sign;
Because two keys are arranged, two kinds of different processing modes can be arranged, a kind of is that existing generation temporary key mode is done a bit to improve, two keys generate temporary key as parameter simultaneously; Another kind is that two keys are handled, and is treated to a comprehensive key, uses comprehensive key to generate temporary key, and do not need the mode of existing generation temporary key is made improvement this moment;
The process that generates the second temporary key Message Integrity Code is similar with the process that generates the first temporary key Message Integrity Code, repeats no more herein;
From the above, the master key that present embodiment uses master key in the master key tabulation and upper strata to consult simultaneously carries out 4 times shakes hands, and has strengthened the fail safe of system.What present embodiment was described is the situation that a master key of consulting through the upper strata is arranged, and in actual applications, has the situation of a plurality of master keys of consulting through the upper strata, in this case, need indicate the master key of which specifically being chosen consulting through the upper strata in message one.And having only one under the situation of the master key of upper strata negotiation, after the handshake response device is received message one, can directly judge whether the master key that consult on the upper strata, if there is the master key that just uses the upper strata to consult to participate in the generation of temporary key.
The embodiment one and two of the embodiment that are used for the handshake method of network security have described more closely-related technical characterictics with the present invention, in actual handshake procedure, the parameter that each message is carried can be more, and middle processing procedure is also more, thereby the embodiment of the invention provides complete handshake procedure, is described below:
1) shake hands apparatus for initiating structure and send message one, and in this message, comprise: the master key sign of appointment, the temporary key sign of suggestion, and the random number one of a generation;
Wherein, situation according to the master key that whether has the upper strata to consult, the master key sign can have three kinds of situations: the master key sign that the master key in the master key tabulation is only arranged, or only have the master key of the master key of upper strata negotiation to identify, or there are the master key sign of the master key in the master key tabulation and the master key of the master key that consult on the upper strata to identify simultaneously;
2) the handshake response device carries out following operation after receiving message one: checking temporary key unique mark; If unique, generate one 128 random number two; The method that provides according to standard generates temporary key and key confirmation key; Generate the temporary key Message Integrity Code; At last, structure and transmission message two comprise conditional code in this message, random number two and the temporary key Message Integrity Code that generates;
Wherein, the generation of temporary key and key confirmation key is different different according to the corresponding master key of master key sign, and detailed process is existing in front to be described, and repeats no more herein;
3) shake hands apparatus for initiating after receiving message two, carry out following operation: the method that provides according to standard generates temporary key and key confirmation key; Generate the temporary key Message Integrity Code; Whether the temporary key Message Integrity Code that carries in the temporary key Message Integrity Code that judge to generate and the message two is consistent; If consistent, think that the handshake response device has correct master key, continue to judge whether the state of conditional code sign is normal; If, structure and send message three just, comprise in this message with message one in the same random number one and the temporary key Message Integrity Code of self generation;
With 2) the middle description, the generation of temporary key and key confirmation key is different different according to the corresponding master key of master key sign;
4) the handshake response device carries out following operation after receiving message three: verify that the temporary key Message Integrity Code that self generates is whether consistent with the temporary key Message Integrity Code that carries in the message three; If consistent, think that the apparatus for initiating of shaking hands has correct master key, structure and send message four comprises the random number two the same with message two in this message, and the temporary key Message Integrity Code of self generation; The handshake response device is installed the temporary key that generates;
5) verify that the temporary key Message Integrity Code that self generates is whether consistent with the temporary key Message Integrity Code that carries in the message four, if the consistent temporary key that generates of just installing.
So far, 4 handshake procedures are finished.
From the above, no matter the master key that whether has the upper strata to consult, shake hands and to carry out for 4 times of media access control layer, thereby security mechanism more flexibly is provided, and strengthened the fail safe of communicating by letter in the radio ultra wide band system.
Need to prove, the embodiment of the invention has only been described and has been adopted one to preset the master key in the master key tabulation or adopt a master key and the situation that the master key of consulting through the upper strata carries out shaking hands for 4 times that presets in the master key tabulation, but in actual applications, also can adopt and a plurality ofly preset the master key in the master key tabulation or adopt a plurality of master key in the master key tabulation and a plurality of master keys of consulting through the upper strata of presetting to carry out 4 times and shake hands, processing procedure and the described process of the embodiment of the invention of this moment are similar, and this specification is not given unnecessary details it.
Corresponding with the handshake method embodiment that is used for network security, the embodiment of the invention also provides and the relevant device of shaking hands, and comprises shake hands apparatus for initiating and handshake response device, wherein shakes hands apparatus for initiating embodiment one as shown in Figure 3, comprising:
Message one processing unit 301 is used for structure and sends message one, and message one comprises first master key sign of first master key of choosing from preset the master key tabulation;
Message two receiving elements 302, be used to receive the message two of response message one, message two comprises the first temporary key Message Integrity Code, the first temporary key Message Integrity Code generates according to first temporary key after using first master key sign to generate first temporary key by the handshake response device;
Temporary key Message Integrity Code generation unit 303 comprises first generation unit, and first generation unit is used to use first master key sign to generate second temporary key, generates the second temporary key Message Integrity Code according to second temporary key;
Wherein, first generation unit comprises: the master key acquiring unit is used for obtaining and the first corresponding master key of described first master key sign from described master key tabulation; The temporary key generation unit is used to use described first master key to adopt preset mode to generate second temporary key corresponding with first master key; Temporary key Message Integrity Code acquiring unit is used to adopt preset mode to generate the second temporary key Message Integrity Code corresponding with described second temporary key, and the described second temporary key Message Integrity Code is corresponding with described first master key sign;
Message three processing units 304, be used for obtaining the first temporary key Message Integrity Code from message two, when the first temporary key Message Integrity Code was consistent with the second temporary key Message Integrity Code, structure also sent the message three that comprises the second temporary key Message Integrity Code;
Message four receiving elements 305, be used to receive the message four of response message three, message four comprises the first temporary key Message Integrity Code, structure and transmission when message four verifies that by the handshake response device the first temporary key Message Integrity Code is consistent with the second temporary key Message Integrity Code;
Temporary key installation unit 306 is used for obtaining the first temporary key Message Integrity Code from message four, when the first temporary key Message Integrity Code is consistent with the second temporary key Message Integrity Code, second temporary key is installed.
From the above, present embodiment can be when the master key that does not have the upper strata to consult, and use the master key that presets in the master key tabulation to finish 4 times of media access control layer and shake hands, thereby the temporary key that uses can generate communication the time improves the fail safe of communication; Further, do not shake hands for 4 times, improved the flexibility of system group network owing to do not need the participation on upper strata can finish yet.
Wherein, the embodiment one of apparatus for initiating of shaking hands has only described the master key that uses in the master key tabulation and has carried out the situation of shaking hands for 4 times, in actual applications, the situation that the master key that also can occur using simultaneously master key in the master key tabulation and upper strata to consult is shaken hands, at this moment:
Temporary key Message Integrity Code generation unit 303 can also comprise second generation unit, second generation unit is used for after message two receiving elements receive message two, use first master key sign and second master key sign to generate second temporary key, generate the second temporary key Message Integrity Code according to second temporary key; Wherein, the second corresponding master key of second master key sign is consulted through the upper strata;
Wherein, handshake response device first temporary key that generates the first temporary key Message Integrity Code institute basis uses first master key sign and the generation of second master key sign simultaneously;
If a plurality of master keys of consulting through the upper strata are arranged, message one processing unit, 301 structures and the message one that generates comprise: second master key sign of first master key sign of first master key of choosing from preset the master key tabulation and second master key of consulting through the upper strata; Thereby in message one, indicate the master key of choosing which is consults through the upper strata, make the both sides that participate in shaking hands for 4 times can use the same master key of consulting through the upper strata.
At this moment, the master key that can use master key in the master key tabulation and upper strata to consult simultaneously carries out 4 times shakes hands, and has strengthened the fail safe of system.
Handshake response device embodiment one comprises as shown in Figure 4:
Message one receiving element 401 is used for receiving from the apparatus for initiating reception message one of shaking hands, and message one comprises first master key sign of first master key of choosing from preset the master key tabulation;
Temporary key Message Integrity Code generation unit 402 comprises first generation unit, and first generation unit is used for generating the first temporary key Message Integrity Code using first master key sign to generate first temporary key according to first temporary key;
Wherein, first generation unit comprises: the master key acquiring unit is used for obtaining and the first corresponding master key of described first master key sign from the master key tabulation that described handshake response device is preserved; The temporary key generation unit is used to use described first master key to adopt preset mode to generate first temporary key corresponding with first master key; Temporary key Message Integrity Code acquiring unit is used to adopt preset mode to generate the first temporary key Message Integrity Code corresponding with described first temporary key, and the described first temporary key Message Integrity Code is corresponding with described first master key sign.;
Message two processing units 403 are used for structure and send message two, and message two comprises the first temporary key Message Integrity Code;
Message three receiving elements 404, be used to receive the message three of response message two, message three comprises the second temporary key Message Integrity Code, the second temporary key Message Integrity Code generates according to second temporary key after using first master key sign to generate second temporary key by the apparatus for initiating of shaking hands;
Message is managed unit 405 everywhere, is used for when the first temporary key Message Integrity Code is consistent with the second temporary key Message Integrity Code, and structure also sends the message four that comprises the first temporary key Message Integrity Code;
Temporary key installation unit 406 is used for when the checking first temporary key Message Integrity Code is consistent with the second temporary key Message Integrity Code first temporary key being installed.
From the above, present embodiment can be when the master key that does not have the upper strata to consult, and use the master key that presets in the master key tabulation to finish 4 times of media access control layer and shake hands, thereby the temporary key that uses can generate communication the time improves the fail safe of communication; Further, do not shake hands for 4 times, improved the flexibility of system group network owing to do not need the participation on upper strata can finish yet.
Wherein, the embodiment one of apparatus for initiating of shaking hands has only described the master key that uses in the master key tabulation and has carried out the situation of shaking hands for 4 times, in actual applications, the situation that the master key that also can occur using simultaneously master key in the master key tabulation and upper strata to consult is shaken hands, at this moment:
Temporary key Message Integrity Code generation unit 402 can also comprise second generation unit, first master key sign and second master key that the message one that second generation unit is used to use message one receiving element to receive comprises identify, and generate the first temporary key Message Integrity Code; The second corresponding master key of second master key sign is consulted through the upper strata;
Wherein, second generation unit comprises: the second master key acquiring unit is used for obtaining first master key corresponding with first master key sign and corresponding second master key of consulting through the upper strata of second master key sign from the master key tabulation that the handshake response device is preserved; The second temporary key generation unit is used to use first master key and second master key, adopts preset mode to generate first temporary key corresponding with first master key and second master key; The second temporary key Message Integrity Code acquiring unit, be used to adopt preset mode to generate the second temporary key Message Integrity Code corresponding with first temporary key, the second temporary key Message Integrity Code is corresponding with first master key sign and second master key sign;
Wherein, second temporary key that apparatus for initiating generates the second temporary key Message Integrity Code institute basis of shaking hands uses first master key sign and the generation of second master key sign simultaneously;
If a plurality of master keys of consulting through the upper strata are arranged, the message one that message one receiving element 401 receives further comprises second master key sign of second master key of consulting through the upper strata; Thereby the both sides that participation is shaken hands for 4 times can use the same master key of consulting through the upper strata;
At this moment, the master key that can use master key in the master key tabulation and upper strata to consult simultaneously carries out 4 times shakes hands, and has strengthened the fail safe of system.
Shake hands apparatus for initiating and handshake response device that the embodiment of the invention provides have been described respectively above, in one time 4 times processes, shake hands apparatus for initiating and handshake response device all fixed, but in whole radio ultra wide band system, unfixing shake hands apparatus for initiating or handshake response device, any one network entity in the radio ultra wide band system can be as apparatus for initiating or the handshake response device of shaking hands, thereby the network entity in the practical application has the function of shake hands apparatus for initiating and handshake response device simultaneously.
The embodiment of the invention also provides a kind of communication system, and it can be finished 4 times and shake hands, and as shown in Figure 5, comprising:
The apparatus for initiating 501 of shaking hands is used for structure and sends message one, and message one comprises first master key sign of first master key of choosing from preset the master key tabulation; Receive message two, message two comprises the first temporary key Message Integrity Code; Use first master key sign to generate second temporary key, generate the second temporary key Message Integrity Code according to second temporary key; When the checking first temporary key Message Integrity Code was consistent with the second temporary key Message Integrity Code, structure also sent the message three that comprises the second temporary key Message Integrity Code; Receive message four, message four comprises the first temporary key Message Integrity Code; When the checking first temporary key Message Integrity Code is consistent with the second temporary key Message Integrity Code, second temporary key is installed;
From the above, present embodiment can be when the master key that does not have the upper strata to consult, and use the master key that presets in the master key tabulation to finish 4 times of media access control layer and shake hands, thereby the temporary key that uses can generate communication the time improves the fail safe of communication; Further, do not shake hands for 4 times, improved the flexibility of system group network owing to do not need the participation on upper strata can finish yet.
One of ordinary skill in the art will appreciate that all or part of step that realizes in the foregoing description method is to instruct relevant hardware to finish by program, described program can be stored in a kind of computer-readable recording medium, this program comprises the steps: when carrying out
Structure also sends message one, and message one comprises first master key sign of first master key of choosing from preset the master key tabulation;
Receive the message two of the described message one of response, message two comprises the first temporary key message integrity check sign indicating number, the first temporary key message integrity check sign indicating number generates according to first temporary key after using described first master key sign to generate first temporary key by the handshake response device;
After using described first master key sign to generate second temporary key, generate the second temporary key message integrity check sign indicating number corresponding with second temporary key; If the first temporary key message integrity check sign indicating number is consistent with the second temporary key message integrity check sign indicating number, structure also sends the message three that comprises the second temporary key message integrity check sign indicating number;
Receive the message four of the described message three of response, message four comprises the first temporary key message integrity check sign indicating number, structure and transmission after message four is verified the described first temporary key message integrity check sign indicating number and the second temporary key message integrity check sign indicating number is consistent by described handshake response device;
If the checking first temporary key message integrity check sign indicating number is consistent with the second temporary key message integrity check sign indicating number, second temporary key is installed.
And/or comprise the steps:
Receive message one, message one comprises first master key sign of first master key that the apparatus for initiating of shaking hands is chosen from preset the master key tabulation;
Use first master key sign to generate first temporary key, generate the first temporary key Message Integrity Code according to first temporary key;
Structure also sends message two, and message two comprises the first temporary key Message Integrity Code;
Receive the message three of response message two, message three comprises the second temporary key Message Integrity Code, the second temporary key Message Integrity Code generates according to second temporary key after using first master key sign to generate second temporary key by the described apparatus for initiating of shaking hands;
If the first temporary key Message Integrity Code is consistent with the second temporary key Message Integrity Code, structure also sends the message four that comprises the first temporary key Message Integrity Code, and the first temporary key Message Integrity Code is installed.
The above-mentioned storage medium of mentioning can be a read-only memory, disk or CD etc.
More than the handshake method that is used for network security that the embodiment of the invention provided, shake hands apparatus for initiating and handshake response device are described in detail, the explanation of above embodiment just is used for helping to understand method of the present invention and thought thereof; Simultaneously, for one of ordinary skill in the art, according to thought of the present invention, the part that all can change in specific embodiments and applications, in sum, this description should not be construed as limitation of the present invention.
Claims (19)
1, a kind of handshake method that is used for network security is characterized in that, comprising:
The apparatus for initiating of shaking hands structure also sends message one, and message one comprises first master key sign of first master key of choosing from preset the master key tabulation;
The handshake response device receives described message one, generate first temporary key according to described first master key sign in the described message one, generate the first temporary key Message Integrity Code according to described first temporary key, structure also sends message two, and described message two comprises the described first temporary key Message Integrity Code;
The apparatus for initiating of shaking hands receives described message two, uses described first master key sign to generate second temporary key, generates the second temporary key Message Integrity Code according to second temporary key; Verify described first temporary key Message Integrity Code and the described second temporary key Message Integrity Code, when the described first temporary key Message Integrity Code is consistent with the described second temporary key Message Integrity Code, structure also sends message three, and described message three comprises the described second temporary key Message Integrity Code;
The handshake response device receives described message three, verify described first temporary key Message Integrity Code and the described second temporary key Message Integrity Code, when the described first temporary key Message Integrity Code is consistent with the described second temporary key Message Integrity Code, first temporary key is installed; Structure also sends message four, and described message four comprises the first temporary key Message Integrity Code;
The apparatus for initiating of shaking hands receives described message four, obtain the first temporary key Message Integrity Code according to message four, verify described first temporary key Message Integrity Code and the described second temporary key Message Integrity Code, when the first temporary key Message Integrity Code is consistent with the second temporary key Message Integrity Code, second temporary key is installed.
2, the handshake method that is used for network security as claimed in claim 1 is characterized in that, when described shake hands apparatus for initiating and described handshake response device had second master key of consulting through the upper strata, described method also comprised:
After described handshake response device receives described message one, generate first temporary key, generate the first temporary key Message Integrity Code according to described first temporary key according to described first master key sign and described second master key in the described message one;
After the described apparatus for initiating of shaking hands receives described message two, use described first master key sign and described second master key to generate second temporary key, generate the second temporary key Message Integrity Code according to second temporary key.
3, the handshake method that is used for network security as claimed in claim 2, it is characterized in that, when described shake hands apparatus for initiating and described handshake response device have a plurality of master key of consulting through the upper strata, comprise second master key sign of selected second master key of consulting through the upper strata in the described message one.
4, as claim 2 or the 3 described handshake methods that are used for network security, it is characterized in that, generate first temporary key according to the sign of described first master key in the described message one and described second master key and be specially:
From preset the master key tabulation, obtain described first and will identify the first corresponding master key;
Use described first master key and described second master key to adopt preset mode to generate first temporary key; Or, described first master key and described second master key are treated to comprehensive key, adopt described comprehensive key to use preset mode to generate first temporary key.
5, the handshake method that is used for network security as claimed in claim 1 is characterized in that, generates first temporary key according to described first master key sign in the described message one and is specially:
From first master key that presetting of described handshake response device preservation obtained the master key tabulation and described first master key sign is corresponding;
Use described first master key to adopt preset mode to generate first temporary key corresponding with described first master key.
6, the handshake method that is used for network security as claimed in claim 1 is characterized in that, uses described first master key sign to generate second temporary key and is specially:
From first master key that presetting of the described apparatus for initiating preservation of shaking hands obtained the master key tabulation and described first master key sign is corresponding;
Use described first master key to adopt preset mode to generate second temporary key corresponding with described first master key.
7, a kind of handshake method that is used for network security is characterized in that, comprising:
Structure also sends message one, and described message one comprises first master key sign of first master key of choosing from preset the master key tabulation;
Receive the message two of the described message one of response, described message two comprises the first temporary key message integrity check sign indicating number, the described first temporary key message integrity check sign indicating number generates according to first temporary key after using described first master key sign to generate first temporary key by the handshake response device;
After using described first master key sign to generate second temporary key, generate the second temporary key message integrity check sign indicating number corresponding with described second temporary key; When the described first temporary key message integrity check sign indicating number was consistent with the described second temporary key message integrity check sign indicating number, structure also sent the message three that comprises the described second temporary key message integrity check sign indicating number;
Receive the message four of the described message three of response, described message four comprises the first temporary key message integrity check sign indicating number, structure and transmission after described message four is verified the described first temporary key message integrity check sign indicating number and the described second temporary key message integrity check sign indicating number is consistent by described handshake response device;
When the described first temporary key message integrity check sign indicating number is consistent with the described second temporary key message integrity check sign indicating number, described second temporary key is installed.
8, the handshake method that is used for network security as claimed in claim 7 is characterized in that, when second master key of consulting through the upper strata,
Described first temporary key uses described first master key sign and described second master key to generate by described handshake response device;
Described second temporary key uses described first master key sign and described second master key to generate.
9, the handshake method that is used for network security as claimed in claim 8 is characterized in that, during through the master key that consults on the upper strata, comprises the master key sign of the selected master key of consulting through the upper strata as a plurality of in the described message one.
10, a kind of handshake method that is used for network security is characterized in that, comprising:
Receive message one, described message one comprises first master key sign of first master key that the apparatus for initiating of shaking hands is chosen from preset the master key tabulation;
Use described first master key sign to generate first temporary key, generate the first temporary key Message Integrity Code according to first temporary key;
Structure also sends message two, and described message two comprises the described first temporary key Message Integrity Code;
Receive the message three of the described message two of response, described message three comprises the second temporary key Message Integrity Code, the described second temporary key Message Integrity Code generates according to second temporary key after using described first master key sign to generate second temporary key by the described apparatus for initiating of shaking hands;
If the described first temporary key Message Integrity Code is consistent with the second temporary key Message Integrity Code, structure also sends the message four that comprises the described first temporary key Message Integrity Code, and the described first temporary key Message Integrity Code is installed.
11, the handshake method that is used for network security as claimed in claim 10 is characterized in that, when second master key of consulting through the upper strata,
Described first temporary key uses described first master key sign and described second master key to generate;
Described second temporary key uses described first master key sign and described second master key to generate.
12, the handshake method that is used for network security as claimed in claim 11 is characterized in that, during through the master key that consults on the upper strata, comprises the information of the selected master key of consulting through the upper strata as a plurality of in the described message one.
13, a kind of apparatus for initiating of shaking hands is characterized in that, comprising:
Message one processing unit is used for structure and sends message one, and described message one comprises first master key sign of first master key of choosing from preset the master key tabulation;
Message two receiving elements, be used to receive the message two of the described message one of response, described message two comprises the first temporary key Message Integrity Code, the described first temporary key Message Integrity Code generates according to first temporary key after using described first master key sign to generate first temporary key by the handshake response device;
Temporary key Message Integrity Code generation unit comprises first generation unit, and described first generation unit is used to use described first master key sign to generate second temporary key, generates the second temporary key Message Integrity Code according to second temporary key;
Message three processing units, be used for obtaining the first temporary key Message Integrity Code from described message two, when the described first temporary key Message Integrity Code was consistent with the described second temporary key Message Integrity Code, structure also sent the message three that comprises the described second temporary key Message Integrity Code;
Message four receiving elements, be used to receive the message four of the described message three of response, described message four comprises the first temporary key Message Integrity Code, structure and transmission when described message four verifies that by described handshake response device the described first temporary key Message Integrity Code is consistent with the described second temporary key Message Integrity Code;
The temporary key installation unit is used for obtaining the first temporary key Message Integrity Code from described message four, when the described first temporary key Message Integrity Code is consistent with the described second temporary key Message Integrity Code, described second temporary key is installed.
14, the apparatus for initiating of shaking hands as claimed in claim 13 is characterized in that, described first generation unit comprises:
The master key acquiring unit is used for obtaining and the first corresponding master key of described first master key sign from described master key tabulation;
The temporary key generation unit is used to use described first master key to adopt preset mode to generate second temporary key corresponding with first master key;
Temporary key Message Integrity Code acquiring unit is used to adopt preset mode to generate the second temporary key Message Integrity Code corresponding with described second temporary key, and the described second temporary key Message Integrity Code is corresponding with described first master key sign.
15, the apparatus for initiating of shaking hands as claimed in claim 13 is characterized in that, described temporary key Message Integrity Code generation unit also comprises:
Second generation unit is used for when second master key of consulting through the upper strata is arranged, and uses described first master key sign and described second master key to generate second temporary key, generates the second temporary key Message Integrity Code according to second temporary key.
16, a kind of handshake response device is characterized in that, comprising:
Message one receiving element is used for receiving from the apparatus for initiating reception message one of shaking hands, and described message one comprises first master key sign of first master key of choosing from preset the master key tabulation;
Temporary key Message Integrity Code generation unit comprises first generation unit, and described first generation unit is used for generating the first temporary key Message Integrity Code using described first master key sign to generate first temporary key according to first temporary key;
Message two processing units are used for structure and send message two, and described message two comprises the described first temporary key Message Integrity Code;
Message three receiving elements, be used to receive the message three of the described message two of response, described message three comprises the second temporary key Message Integrity Code, the described second temporary key Message Integrity Code generates according to second temporary key after using described first master key sign to generate second temporary key by the described apparatus for initiating of shaking hands;
Message is managed the unit everywhere, is used for when the described first temporary key Message Integrity Code is consistent with the second temporary key Message Integrity Code, and structure also sends the message four that comprises the described first temporary key Message Integrity Code;
The temporary key installation unit is used for when the described first temporary key Message Integrity Code of checking is consistent with the second temporary key Message Integrity Code described first temporary key being installed.
17, handshake response device as claimed in claim 16 is characterized in that, described first generation unit comprises:
The master key acquiring unit is used for obtaining and the first corresponding master key of described first master key sign from the master key tabulation that described handshake response device is preserved;
The temporary key generation unit is used to use described first master key to adopt preset mode to generate first temporary key corresponding with first master key;
Temporary key Message Integrity Code acquiring unit is used to adopt preset mode to generate the first temporary key Message Integrity Code corresponding with described first temporary key, and the described first temporary key Message Integrity Code is corresponding with described first master key sign.
18, handshake response device as claimed in claim 16 is characterized in that, described temporary key Message Integrity Code generation unit also comprises:
Second generation unit is used for when second master key of consulting through the upper strata is arranged, and uses described first master key sign and described second master key to generate first temporary key, generates the first temporary key Message Integrity Code according to first temporary key.
19, a kind of communication system is characterized in that, comprising:
The apparatus for initiating of shaking hands is used for structure and sends message one, and described message one comprises first master key sign of first master key of choosing from preset the master key tabulation; Receive message two, described message two comprises the first temporary key Message Integrity Code; Use described first master key sign to generate second temporary key, generate the second temporary key Message Integrity Code according to second temporary key; When the described first temporary key Message Integrity Code of checking was consistent with the described second temporary key Message Integrity Code, structure also sent the message three that comprises the described second temporary key Message Integrity Code; Receive message four, described message four comprises the first temporary key Message Integrity Code; When the described first temporary key Message Integrity Code of checking is consistent with the described second temporary key Message Integrity Code, described second temporary key is installed;
The handshake response device is used to receive described message one; Use first master key sign to generate first temporary key, generate the first temporary key Message Integrity Code according to first temporary key; Structure also sends the described message two that comprises the described first temporary key Message Integrity Code; Receive described message three, described message three comprises described second Message Integrity Code; When the described first temporary key Message Integrity Code was consistent with the described second temporary key Message Integrity Code, structure also sent the described message four that comprises the described first temporary key Message Integrity Code, and described first temporary key is installed.
Priority Applications (1)
Application Number | Priority Date | Filing Date | Title |
---|---|---|---|
CNA2007101631701A CN101409882A (en) | 2007-10-10 | 2007-10-10 | Handshaking method for network safety, apparatus for initiating and responding handshake |
Applications Claiming Priority (1)
Application Number | Priority Date | Filing Date | Title |
---|---|---|---|
CNA2007101631701A CN101409882A (en) | 2007-10-10 | 2007-10-10 | Handshaking method for network safety, apparatus for initiating and responding handshake |
Publications (1)
Publication Number | Publication Date |
---|---|
CN101409882A true CN101409882A (en) | 2009-04-15 |
Family
ID=40572616
Family Applications (1)
Application Number | Title | Priority Date | Filing Date |
---|---|---|---|
CNA2007101631701A Pending CN101409882A (en) | 2007-10-10 | 2007-10-10 | Handshaking method for network safety, apparatus for initiating and responding handshake |
Country Status (1)
Country | Link |
---|---|
CN (1) | CN101409882A (en) |
Cited By (3)
Publication number | Priority date | Publication date | Assignee | Title |
---|---|---|---|---|
CN102035644B (en) * | 2009-09-29 | 2013-02-27 | 国基电子(上海)有限公司 | Primary key dynamic configuration system and method |
CN103947150A (en) * | 2011-11-24 | 2014-07-23 | 三菱电机株式会社 | Encrypted communication system, encrypted communication device, computer program, and encrypted communication method |
CN107801187A (en) * | 2016-08-31 | 2018-03-13 | 华为技术有限公司 | Encipher-decipher method, apparatus and system |
-
2007
- 2007-10-10 CN CNA2007101631701A patent/CN101409882A/en active Pending
Cited By (4)
Publication number | Priority date | Publication date | Assignee | Title |
---|---|---|---|---|
CN102035644B (en) * | 2009-09-29 | 2013-02-27 | 国基电子(上海)有限公司 | Primary key dynamic configuration system and method |
CN103947150A (en) * | 2011-11-24 | 2014-07-23 | 三菱电机株式会社 | Encrypted communication system, encrypted communication device, computer program, and encrypted communication method |
CN107801187A (en) * | 2016-08-31 | 2018-03-13 | 华为技术有限公司 | Encipher-decipher method, apparatus and system |
CN107801187B (en) * | 2016-08-31 | 2021-02-02 | 华为技术有限公司 | Encryption and decryption method, device and system |
Similar Documents
Publication | Publication Date | Title |
---|---|---|
EP3738332B1 (en) | Cellular unicast link establishment for vehicle-to-vehicle (v2v) communication | |
EP2850862B1 (en) | Secure paging | |
JP5705732B2 (en) | Validating ticket-based configuration parameters | |
US8429404B2 (en) | Method and system for secure communications on a managed network | |
CN105706390B (en) | Method and apparatus for performing device-to-device communication in a wireless communication network | |
US9473941B1 (en) | Method, apparatus, and computer program product for creating an authenticated relationship between wireless devices | |
KR101833955B1 (en) | Authenticating messages in a wireless communication | |
JP2011503926A (en) | Authentication method and authentication framework | |
EP2665235B1 (en) | Method for establishing secure communication between nodes in a network, network node, key manager, installation device and computer program product | |
JP6113079B2 (en) | Cognitive radio device authentication and authorization | |
JP2012502587A (en) | Ticket-based spectrum authentication and access control | |
TW200917786A (en) | Distributed protocol for authorisation | |
CN101771659A (en) | Method, system and equipment for safe switch configuration | |
CN103415010A (en) | D2D network authentication method and system | |
US20230308876A1 (en) | Multicast containment in a multiple pre-shared key (psk) wireless local area network (wlan) | |
WO2016134769A1 (en) | Public key based network | |
WO2019129346A1 (en) | Wireless authentication apparatus, system and method | |
CN101409882A (en) | Handshaking method for network safety, apparatus for initiating and responding handshake | |
Chen et al. | Security in Bluetooth networks and communications | |
WO2010133036A1 (en) | Communication method, device and communication system between base stations | |
Cervenka et al. | Energy efficient public key cryptography in wireless sensor networks | |
Ramannavar et al. | Authentication in Wireless Sensor Networks Using Virtual Certificate Authorities | |
Alhakami et al. | Shared-key based secure MAC protocol for CRNs |
Legal Events
Date | Code | Title | Description |
---|---|---|---|
C06 | Publication | ||
PB01 | Publication | ||
C10 | Entry into substantive examination | ||
SE01 | Entry into force of request for substantive examination | ||
C12 | Rejection of a patent application after its publication | ||
RJ01 | Rejection of invention patent application after publication |
Open date: 20090415 |