IMSI encryption method, core network, and user terminal

Abstract

The embodiment of the invention provides an IMSI encryption method, a core network, and a user terminal, and relates to the field of communication. The IMSI of a user can be prevented from being leaked in a network access process without increasing the load of a base station. The method comprises the following steps: the user terminal sends an own encryption protocol list and version information corresponding to an encryption protocol in the encryption protocol list to an HTTP AUSF network element via the base station; the HTTP AUSF network element selects a target encryption protocol from theencryption protocol list according to the version information, and sends the target encryption protocol and a CA certificate carrying a public key to the user terminal via the base station; the userterminal generates a key according to the target encryption protocol, simultaneously generates a key package by using an encryption key of a public key in the CA certificate, and sends the key packageto the HTTP AUSF network element via the base station; and the HTTP AUSF network element decrypts the key package by using an own pre-stored private key to obtain the key, and sends the key to an MMEnetwork element, wherein the public key corresponds to the private key.

Description

technical field [0001] The present invention relates to the communication field, in particular to an encryption method for an International Mobile Subscriber Identification Number (IMSI), a core network and a user terminal. Background technique [0002] The user IMSI (International Mobile Subscriber Identification Number, International Mobile Subscriber Identification Number) information is the unique identifier of the user and plays an important role in the communication network. The transmission of IMSI information over the air interface may cause user privacy leakage and affect the operator's reputation. At present, both the attach message and the user identification message before authentication in the live network may carry the user's IMSI information, but because these messages are before the authentication, and the user's IMSI information needs to be identified before the authentication, the message is not carried out. Encryption means transmission over the air inter...

AI Technical Summary

Problems solved by technology

However, if the key negotiation is performed through the air interface, there will be a risk of key leakage, which will still cause IMSI information leakage

If the key is built into the SIM (Subscriber Identification Module, user identification card) card, it will increase the complexity of changing the card, and the base station, as a wireless signal sending and receiving device, is not suitable as a network element for authentication and encryption

Images