Method for determining secret key updating time and secret key using entity

Abstract

The invention relates to a method for determining secret key updating time and a secret key using entity. The method comprises the following steps: the secret key using entity receives multicast secret key updating time sent from a secret key managing entity; and the secret key updating time of the secret key using entity is determined according to the multicast secret key updating time. The technical scheme provided by the invention ensures that the secret key using entity stably and reliably obtains a multicast service encryption secret key parameter sent from the secret key managing entity, and the stability and the safety of a wireless communication system are improved.

Description

technical field [0001] The present invention relates to the field of wireless communication technology, in particular to a method and system for determining key update time Background technique [0002] In the wireless communication network, in order to ensure the communication security of MBS (Multicast Broadcast Service), the data transmitted over the air interface is encrypted with a multicast key to ensure that the wireless communication network only allows users who subscribe to the service to receive the service. [0003] In order to prevent key leakage from threatening communication security, GTEK (multicast service encryption key) needs to be replaced regularly. At the same time, in order to ensure the continuity of communication services, a cooperative relationship must be established between the base station and the terminal. Before the life cycle of the old key ends, the new key is obtained from the key management entity, so that the old key can be updated immedia...

AI Technical Summary

Problems solved by technology

[0007] Under the current technical conditions, because the communication system cannot configure management information through the network management for mobile terminals, the network management cannot configure system parameters including M&B TEK Grace Time or TEK Grace Time for the terminal, and the terminal must ensure business security , continuous, you must allocate TEK Grace Time by yourself

[0008] In the above implementation scheme, the relative size of the M&B TEK Grace Time on the base station side and the TEK Grace Time in the state machine associated with the multicast security association to which the terminal belongs cannot be determined, so that the terminal may still The key update operation is initiated according to the TEK Grace Time value set by itself, which obviously leads to a waste of processing procedures, consumes valuable network resources, and affects the efficiency of key update

Images