A secure communication negotiation method and device

Abstract

The present invention discloses a method and device for security communication negotiation. When a called user device or its own network does not support security capability of end to access edge, a calling user device and the called user device process media plane security negotiation and communicate according to a negotiated key. The media plane security negotiation is usually processed in the security scenario of end to access edge. The media plane security negotiation includes the steps as follows: the calling user device carries a security capability parameter in the conversation initiating request, wherein the security capability parameter indicates a required security capability of the calling user device; the called user device or its own network returns a conversation response message which carries a security capability parameter, wherein the security capability parameter indicates the security capability supported by the called user device or its own network. The negotiation method and device for security communication mode of the present invention can realize the negotiation of security communication mode among the communication participators and improve the user satisfaction.

Description

technical field [0001] The invention relates to the communication field, in particular to a method and device for secure communication negotiation. Background technique [0002] At present, from a security point of view, IMS (IP Multimedia System) media plane security is divided into end-to-end (e2e) security and end-to-access edge (end to access edge, e2ae) security. The deeper the media security endpoint goes into the network, the better, that is, the e2e security level is higher than the e2ae security level. [0003] figure 1 It is a typical case of end-to-access edge, that is, the network architecture diagram from end (user equipment) to IMS media access gateway; figure 1 In , the solid line is the media flow path, and the dotted line is the signaling path. The UE is the sender of the media information; P-CSCF (Proxy-Call Session Control Function) and S-CSCF (Serving-Call Session Control Function) are IMS network elements. [0004] 3GPP TS 33.328v9.0.0 uses the SDES ...

AI Technical Summary

Problems solved by technology

[0007] Obviously, the above-mentioned processing method is obviously inappropriate, especially when both parties or any party in the communication support the security encryption capability of the media plane and pay for encrypted communication, and the called party does not support the e2ae security capability due to its network reasons , the communication established between the calling party and the called party does not have any media plane protection, and both the calling party and the called party may not know it, which is unfair and unreasonable to the user, and it is not Conducive to communication security, will significantly reduce user satisfaction

Images