Research And Enhancement For Home(e)NodeB Security In LTE/SAE

H(e)NB is a project started in 3GPP Release 8. As known as home base stations, H(e)NB is an effective method to solve the problem of indoor wireless communications coverage. Mobile operators can use it in a partial regions, such as offices, home or a similar small-scale to deploy a small UTRA or E-UTRA cell, similar to the wireless LAN to provide users with a local wireless access services, but the difference with WLAN, is that the access point of H(e)NB access services is not in IP network operator's network but wireless mobile provider's network, the 3G core network or the EPC network provide services. UEs access H(e)NB through the wireless air interface, H(e)NB connects operators core network through the IP network link via the secure gateway. As IP network is insecure environment, there are many security threats, thus ensuring the communication security of H(e)NB with operators network side is very important, which should be solved before the promotion of H(e)NB.In this paper first take one chapter to introduce LTE/SAE system architecture and security mechanisms, then deeply reseached the architecture, security requirements, security features of H(e)NB which was deployed in LTE/SAE system then proposed solutions of several most important security problems, with detailed program processes and simulation.First, propose method of the authentication between H(e)NB with SeGW based on IKEv2 protocol, including EAP-AKA method of and certificate methods.Second, propose location verify based fast re-authentication solutions when handover happened between heterogeneous network cells.Third, for the H(e)NB's management entity H(e)MS is independent, proposed end-to-end security protection method for soft update, which was based on SSL protocol, and do simulation based on OPENSSL.The proposed solutions in this paper improves security mechanism of H(e)NB system, and provide some possible technical solutions, which improve security of system.