论文部分内容阅读
该文介绍了用于手机SIM卡(用户识别卡)的应用工具包(STK)技术和空中下载技术,通过分析STK空中下载存在的安全问题,提出了多级动态密钥的身份认证方案来进行STK卡空中下载服务的双向认证,可以保证下载过程中用户身份的合法性,提供数据完整性、下载过程完整检查以及防重传攻击等功能。
This paper introduces the application kit (STK) technology and air downloading technology used in mobile SIM card (subscriber identity card). By analyzing the security problems existing in STK over-the-air downloading, a multi-level dynamic key authentication scheme is proposed STK card air download service two-way certification, to ensure the legitimacy of the user identity during the download process, to provide data integrity, the download process to complete inspection and anti-retransmission attacks and other functions.