The 3GPP authentication and key agreement has two security shortages. One is that it needs a strong secure channel assumption between the VLR and the HLR,and will easily suffer from the active attack after the adversary accesses the channel.

• 3GPP认证密钥交换协议存在两大安全缺陷:(1)该协议假设在VLR和HLR间的通信信道必须是安全的,因而易遭受攻击者接入信道后的主动攻击;