Data encryption/decryption method and system for mobile communication network

Abstract

The invention discloses a data encryption / decryption method and a data encryption / decryption system for a mobile communication network, which ensure that user information is not transmitted in a clear text form so as to prevent the user information from being illegally monitored and improve the security and confidentiality of data transmission. The method comprises the following steps of: before packet data transmission, transmitting original packet data message to an encryption module through a transmitting end, encrypting the original packet data message through the encryption module by adopting a cipher key (CK), performing protocol encapsulation on the encrypted packet data message, and transmitting the encrypted packet data message to a receiving end; and transmitting the encrypted packet data message to a decryption module through the receiving end after receiving the encrypted packet data message, decrypting the packet data message through the decryption module by using the same CK as the encryption module of the transmitting end, and transmitting the decrypted packet data message to the next destination.

Description

technical field [0001] The invention belongs to the field of mobile communication, and relates to a data encryption and decryption method and system in a mobile communication network. Background technique [0002] Data service is the focus of the development of third-generation mobile communication technology, and it is also the most concerned by users and operators. Many traditional services (such as voice calls) have also been implemented through packet interaction (VOIP), so the confidentiality and security of data services Sex is also getting more and more attention. [0003] The mobile network itself has its own communication encryption method. In the 3GPP (including UMTS and GSM) system, the user's SIM card and the home network's HLR / AuC (home location memory / authentication center, general representation, means integrated AUC HLR) share a security key Ki (128bit), based on this key, two-way authentication can be performed between the core network and the user, and at ...

AI Technical Summary

Problems solved by technology

[0004] The encryption method defined in 3GPP only encrypts the wireless environment, and encrypts / decrypts the transmitted data between the mobile terminal and the Node B. The data is transmitted in clear text in the network, and it is easy to be monitored. The existing network monitoring technology Mostly implemented on the network side

[0005] At present, the relevant patents or solutions are all end-to-end encryption. Such encryption parameters cannot be changed dynamically and are easy to be cracked.

It is difficult to coordinate the data output mode between users who support encryption and users who do not support encryption

Images