Method and system for negotiating and initiating safety context

Abstract

The present invention discloses a method for the negotiated invocation of a security context. User equipment is shifted from an evolved universal terrestrial radio access network to a universal terrestrial radio access network or global system for mobile communications enhanced data rate GSM evolved entity radio access network GERAN. The method comprises that the user equipment dispatches a routing area refresh request message or an attachment request message to a service GPRS support node SGSN; a type designator and a key identifier of the security context are carried in the message; the type designator of the security context indicates that the security context selected by the user equipment is a mapping security context or a cache security context. The user equipment and the network side negotiate the security context by the method to ensure the sameness of the security contexts at the two sides.

Description

technical field [0001] The present invention relates to the field of mobile communication, in particular to a method and system for negotiating and enabling a security context when a UE transfers between different wireless access systems. Background technique [0002] The 3GPP Long Term Evolution system (LTE, Long Term Evolution) consists of an Evolved Terrestrial Radio Access Network (EUTRAN, Evolved UMTS Terrestrial Radio Access Network) and an Evolved Packet System (Evolved Packet System, EPS) core network (Evolved Packet Core, referred to as EPC). [0003] Among them, the EPC includes a mobility management entity (MME, mobility management entity), which is responsible for mobility management, non-access stratum signaling processing, and user security mode management and other related work on the control plane. Among them, MME saves the root key K of EUTRAN ASME (KeyAccess Security Management Entity, access security management entity key), and use K ASME and uplink NAS...

AI Technical Summary

Problems solved by technology

Since the length of the identity identifier of the key is only three bits, and the values ​​of the identity identifier of the mapping key and the identity identifier of the cached key are allocated in different network elements, there will be a difference between the mapping key and the cached key. The identity identifier is the same, but there is a duplicate number, which causes the UE and the network to negotiate and enable the security context, and the key identity identifier used by the UE and the network is the same but the key is inconsistent, resulting in communication interruption

Images