|
At the 48th Technical Assembly held on June 29th, TTA (Secretary General Kim Hong-Koo) announced the establishment of the Mutual Authentication Mechanism for WiBroTM Service’ standard (standard number: TTAS.KO-06.0110/R1) that ensures successful Portable Internet(WiBro) services and authentication.
The draft of this standard was proposed by ETRI (President Yim Chu-Hwan), and with the standardization efforts by the TTA 2.3GHz Portable Internet project group (PG302 chairman: Prof. Hong Dae-Hyoung of Sogang University), it was approved at this 48th Technical Assembly.
The ‘Mutual Authentication Mechanism for WiBroTM Service’ standard defines the method of mutual authentication based on PISIM (Portable Internet Subscriber Identity Module: 2.3GHz Portable Internet subscriber authentication module).
Current IEEE 802.16e and Portable Internet standard recommend two authentication methods for 2.3GHz Portable Internet authentication (X.509 certificate-based RSA authentication, and EAP-based authentication) and they require Portable Internet terminals (PSS, Portable Subscriber Station) to perform the authentication procedure. However, PSS may have vulnerabilities in the protection of personal information if there is no physical security device or security platform for terminals.
To compensate for the security vulnerability, Portable Internet terminal is composed of two parts: Portable Equipment with detachable PISIM which stores personal information and important key values.
This standard stipulates the Portable Internet mutual authentication mechanism for performing the EAP-AKA authentication protocol on PISIM to counter security vulnerability and defines the interface between PE and PISIM in the 2.3GHz Portable Internet environment.
This standard, defining the mutual authentication method based on PISIM, will further reinforce the stability and security of the Portable Internet (WiBro) user information.
1. RSA: Acronym for Rivest-Shamir-Adelman
- Public Key cryptosystem algorithm developed by the afore-mentioned three MIT graduates
2. EAP: Extensible Authentication Protocol
- One of the authentication protocols that is easy to extend
3. AKA: Authentication and Key Agreement
- The protocol used for the distribution and authentication of session keys on the 3GPP network.
|