Method of protecting digest authentication and key agreement (AKA) against man-in-the-middle (MITM) attack

摘要

Disclosed is a method and system to discourage a MITM attacker in a data communications system that includes client and a server. The method includes, in a Digest Authentication and Key Agreement (AKA) challenge sent to the client from the server, setting an "algorithm" field to 'algorithm="AKAv1-HMAC-MD5"' for directing the client to use the HMAC-MD5 keyed hash function when producing Digest credentials; and using at least one of an AKA Integrity Key (IK) or an AKA Cipher Key (CK) in the keyed hash function.