| 摘要 |
<p>A method for protecting a BSF entity from attack. The method includes: obtaining a first temporary identity and a second temporary identity after a UE performing mutual authentication with the BSF entity, where the first temporary identity is different from the second temporary identity; by the UE, originating a re-authentication request to the BSF entity through the first temporary identity; and originating a service request to a NAF entity through the second temporary identity. The present invention also provides a system for protecting a BSF entity from attack, an apparatus for protecting a BSF entity from attack,. The present invention prevents attackers from intercepting the temporary identity at the Ua interface and using the temporary identity to originate a re-authentication request at the Ub interface, thus protecting the BSF entity from attack effectively, avoiding unnecessary load on the BSF entity and saving resources.</p> |
