Negotiation method and device for safety communication

Abstract

The invention discloses a negotiation method and device for safety communication, which can be used for performing media face safety negotiation between a calling party and a called party and performing communication according to a key obtained after negotiation when the calling party or a network in which the calling party locates does not support the safety capacity of an end-to-access-edge. In addition, the media face safety negotiation is generally performed in a safety scene of the end-to-access-edge by the following steps of: carrying safety capacity parameters in a session initiating request by the calling party, wherein the safety capacity parameters refer to the safety capacity required by the calling party; and returning session response information by the called party or a network in which the called party locates, wherein the session response information carries the safety capacity parameters which refer to the safety capacity supported by the called party or the network in which the called party locates. By means of the negotiation method and device for the safety communication, the negotiation between participators of communication can be realized in a safety communication manner so that the user satisfaction can be increased.

Description

technical field [0001] The invention relates to the communication field, in particular to a method and device for secure communication negotiation. Background technique [0002] At present, from a security point of view, IMS (IP Multimedia System) media plane security is divided into end-to-end (e2e) security and end-to-access edge (end to access edge, e2ae) security. The deeper the media security endpoint goes into the network, the better, that is, the e2e security level is higher than the e2ae security level. [0003] figure 1 It is a typical case of end-to-access edge, that is, the network architecture diagram from end (user equipment) to IMS media access gateway; figure 1 In , the solid line is the media flow path, and the dotted line is the signaling path. The UE is the sender of the media information; P-CSCF (Proxy-Call Session Control Function) and S-CSCF (Serving-Call Session Control Function) are IMS network elements. [0004] 3GPP TS 33.328v9.0.0 uses the SDES ...

AI Technical Summary

Problems solved by technology

[0007] Obviously, the above-mentioned processing method is obviously inappropriate, especially when both parties or any party in the communication support the security encryption capability of the media plane and pay for encrypted communication, and the called party does not support the e2ae security capability due to its network reasons , the communication established between the calling party and the called party does not have any media plane protection, and both the calling party and the called party may not know it, which is unfair and unreasonable to the user, and it is not Conducive to communication security, will significantly reduce user satisfaction

Images