Authentication method and related apparatus

Patent metadata

Field	Value
Publication number	US-12581291-B2
Application number	US-202318331948-A
Country	US
Kind code	B2
Filing date	Jun 9, 2023
Priority date	Dec 18, 2020
Publication date	Mar 17, 2026
Grant date	Mar 17, 2026

Abstract

This disclosure provides an authentication method and a related apparatus. The method includes: A terminal device receives a first received encrypted reference signal corresponding to a first sent encrypted reference signal that is generated by an access network device using a pilot key and a first reference signal and transmitted through a channel; the terminal device performs channel estimation by using the first received encrypted reference signal and the first sent encrypted reference signal, to obtain downlink channel state information; and the terminal device sends first information to the access network device, where the first information includes the downlink channel state information, to effectively defend against man-in-the-middle attacks.

First claim

What is claimed is:

1 . An authentication method, comprising:
receiving, by a terminal device, a first received encrypted reference signal corresponding to a first sent encrypted reference signal that is generated by an access network device using a pilot key and a first reference signal and is transmitted through a channel; performing, by the terminal device, channel estimation by using the first received encrypted reference signal and the first sent encrypted reference signal, to obtain downlink channel state information; and sending, by the terminal device to the access network device, first information including the downlink channel state information.

2 . The method of claim 1 , wherein the first sent encrypted reference signal comprises at least two same first encrypted sequences each obtained by encrypting the first reference signal using the pilot key.

3 . The method of claim 1 , wherein the first sent encrypted reference signal comprises a hash chain having at least two binary sequences, the at least two binary sequences including an encrypted sequence obtained by encrypting the first reference signal using the pilot key.

4 . The method of claim 1 , wherein the pilot key is obtained by performing a one-way hash operation on a shared key, wherein the shared key is obtained by using a private key of the terminal device and a public key on a network device side, or the shared key is obtained by using a private key on the network device side and a public key of the terminal device.

5 . The method of claim 1 , wherein the first information further comprises a second sent encrypted reference signal obtained by using the pilot key and a second reference signal.

6 . The method of claim 1 , before the performing the channel estimation, the method further comprising:
generating, by the terminal device, the first sent encrypted reference signal using the pilot key and the first reference signal.

7 . An apparatus, comprising:
a processor, and a non-transitory memory storing program instructions that, when executed by the processor, cause the apparatus to perform the operations: receiving, from a terminal device, a second received encrypted reference signal corresponding to a second sent encrypted reference signal that is generated by the terminal device using a pilot key and a second reference signal and transmitted through a channel; performing channel estimation by using the second received encrypted reference signal and the second sent encrypted reference signal, to obtain uplink channel state information; generating channel authentication information by using the uplink channel state information, the channel authentication information for verifying whether a message received by the access network device from the terminal device is valid or invalid; and sending the channel authentication information to a first network device.

8 . The apparatus of claim 7 , wherein the second sent encrypted reference signal comprises at least two same third encrypted sequences each obtained by encrypting the second reference signal by using the pilot key.

9 . The apparatus of claim 7 , wherein the second sent encrypted reference signal comprises a hash chain having at least two binary sequences including an encrypted sequence obtained by encrypting the second reference signal using the pilot key.

10 . The apparatus of claim 7 , wherein the pilot key is obtained by performing a one-way hash operation on a shared key, wherein the shared key is obtained by using a private key on a network device side and a public key of the terminal device, or the shared key is obtained by using a public key on the network device side and a private key of the terminal device.

11 . The apparatus of claim 7 , wherein before the sending the channel authentication information, the program instructions further cause the apparatus to perform the operations:
demodulating, based on the uplink channel state information, first information from the terminal device, to obtain downlink channel state information; and generating channel authentication information based on the uplink channel state information and the downlink channel state information.

12 . The apparatus of claim 7 , wherein the program instructions further cause the apparatus to perform the operations:
sending, to the terminal device, a first sent encrypted reference signal obtained by using the pilot key and a first reference signal; receiving, from the terminal device, downlink channel state information that is generated by the terminal device in response to the first sent encrypted reference signal; and generating a channel authentication parameter in accordance with the downlink channel state information and the uplink channel state information, the channel authentication parameter corresponding to the channel authentication information.

13 . The apparatus of claim 12 , wherein the channel authentication information comprises the channel authentication parameter.

14 . The apparatus of claim 7 , wherein the program instructions further cause the apparatus to perform the operations: generating the second sent encrypted reference signal using the pilot key and the second reference signal.

15 . An apparatus, comprising:
a processor, and a non-transitory memory storing program instructions that, when executed by the processor, cause the apparatus to perform the operations: receiving, from an access network device, a first received encrypted reference signal corresponding to a first sent encrypted reference signal that is generated by the access network device using a pilot key and a first reference signal and is transmitted through a channel; performing channel estimation by using the first received encrypted reference signal and the first sent encrypted reference signal, to obtain downlink channel state information; and sending, to the access network device, first information including the downlink channel state information.

16 . The apparatus of claim 15 , wherein the first sent encrypted reference signal comprises at least two same first encrypted sequences each obtained by encrypting the first reference signal using the pilot key.

17 . The apparatus of claim 15 , wherein the first sent encrypted reference signal comprises a hash chain having at least two binary sequences, the at least two binary sequences including an encrypted sequence obtained by encrypting the first reference signal using the pilot key.

18 . The apparatus of claim 15 , wherein the pilot key is obtained by performing a one-way hash operation on a shared key, wherein the shared key is obtained by using a private key of the terminal device and a public key on a network device side, or the shared key is obtained by using a private key on the network device side and a public key of the terminal device.

19 . The apparatus of claim 15 , wherein the first information further comprises a second sent encrypted reference signal obtained by using the pilot key and a second reference signal.

20 . The apparatus of claim 15 , wherein the program instructions further cause the apparatus to perform the operations: generating the first sent encrypted reference signal using the pilot key and the first reference signal.

Assignees

• Huawei Tech Co Ltd

Inventors

• Liu Peng
• Wang Huiming
• Wei Xuan
• Wu Jianjun

Classifications

• H04L5/0048

  Allocation of pilot signals, i.e. of signals known to the receiver (allocation of control signalling H04L5/0053; use of control signalling H04L5/0091) · CPC title

• H04W12/037

  of the control plane, e.g. signalling traffic · CPC title

• H04W12/06 Primary

  Authentication · CPC title

• H04W12/02

  Protecting privacy or anonymity, e.g. protecting personally identifiable information [PII] · CPC title

• H04W12/122

  Counter-measures against attacks; Protection against rogue devices · CPC title