NAS (Non Access Stratum) message treatment method and device during rollover of NAS COUNT

Abstract

The invention provides an NAS (Non Access Stratum) message treatment method and device during rollover of an NAS COUNT. The method comprises the following steps: performing first authentication and key agreement (AKA1) of an MME (Mobility Management Entity) and UE (User Equipment), and establishing a first security context KASME1 by the MME for message exchange between the MME and the UE after the AKA1 is successful; performing AKA2 of the MME and the UE by the MME with the KASME1 when the NAS COUNT achieves a preset rollover threshold, wherein the MME does not adopt the KASME1 to perform AKA3 with the UE when the AKA2 fails; and establishing a second security context KASME2 by the MME for message exchange between the MME and the UE after the AKA3 is successful. According to the method and the device provided by the invention, the sensory experience of users is well upgraded, signaling message exchange between the UE and a network side is greatly reduced, wireless air interface resources of the UE and a wireless side are saved, and the impact on an LTE (long term evolution) network is effectively reduced.

Description

technical field [0001] The present invention relates to the field of communication technology, in particular to a method and device for processing NAS messages when NAS COUNT is reversed. Background technique [0002] In the LTE (Long Term Evolution, long-term evolution) network, NAS (Non Access Stratum, Non Access Stratum) message transmission between MME (Mobility Management Entity, mobile management entity) and UE (User Equipment, user equipment) needs to be carried out Integrity protection and security protection. The MME can decide which security algorithm to use according to the network capability reported by the UE and the security algorithm capability and priority configured by the MME. The network capability refers to the integrity protection algorithm and encryption and decryption supported by the UE when accessing the LTE network. algorithm. When the MME determines the security algorithm and successfully establishes the security context with the UE, all NAS mess...

AI Technical Summary

Problems solved by technology

If the UE performs an integrity protection check on any message in the AKA process or fails to decrypt the received NAS message, and the MME cannot complete the AKA process in time, then the MME will initiate a detach process to the UE and force the UE to register, but This processing method does not take into account the possible behavior status of the UE at that time, and does not achieve a certain fault tolerance for the UE, and this processing method, because the UE is forced to register, is very bad for the user perception, which will inevitably lead to the reattachment of the UE , and there are many attachment processes, any error in any sub-processing process will cause the attachment process to fail

If the UE fails to attach, all services of the UE cannot be performed, and it is likely to be complained by the user

Images