NAS message processing method and device when nas COUNT rolls over

Abstract

The present invention provides a method and device for processing NAS messages when NAS COUNT is reversed, wherein the method includes: the MME and the UE perform the first authentication and key negotiation authentication process AKA1, and when AKA1 is successful , the MME establishes the first security context KASME1 for message interaction with the UE; when the NAS COUNT reaches the preset rollover threshold, the MME uses the first security context KASME1 to conduct a second authentication with the UE The right and key agreement authentication process AKA2; if the AKA2 fails, the MME does not use the KASME1 to perform the third authentication and key agreement AKA3 authentication process with the UE; when the AKA3 succeeds, the MME A second security context KASME2 for message exchange with the UE is established. The present invention greatly improves the user's perception experience, greatly reduces the signaling message interaction between the UE and the network side, saves wireless air interface resources between the UE and the wireless side, and effectively reduces the impact on the LTE network.

Description

technical field [0001] The present invention relates to the field of communication technology, in particular to a method and device for processing NAS messages when NAS COUNT is reversed. Background technique [0002] In the LTE (Long Term Evolution, long-term evolution) network, the NAS (Non Access Stratum, NonAccess Stratum) message transmission between MME (Mobility Management Entity, mobile management entity) and UE (User Equipment, user equipment) requires integrity Protection and security protection. The MME can decide which security algorithm to use according to the network capability reported by the UE and the security algorithm capability and priority configured by the MME. The network capability refers to the integrity protection algorithm and encryption and decryption supported by the UE when accessing the LTE network. algorithm. When the MME determines the security algorithm and successfully establishes the security context with the UE, all NAS messages exchang...

AI Technical Summary

Problems solved by technology

If the UE performs an integrity protection check on any message in the AKA process or fails to decrypt the received NAS message, and the MME cannot complete the AKA process in time, then the MME will initiate a detach process to the UE and force the UE to register, but This processing method does not take into account the possible behavior status of the UE at that time, and does not achieve a certain fault tolerance for the UE, and this processing method, because the UE is forced to register, is very bad for the user perception, which will inevitably lead to the reattachment of the UE , and there are many attachment processes, any error in any sub-processing process will cause the attachment process to fail

If the UE fails to attach, all services of the UE cannot be performed, and it is likely to be complained by the user

Images