An imsi encryption method, core network and user terminal

Abstract

Embodiments of the present invention provide an IMSI encryption method, a core network and a user terminal, which relate to the communication field and can prevent the user's IMSI from being leaked during the Internet access process without increasing the base station load. The method includes: the user terminal sends its own encryption protocol list and version information corresponding to the encryption protocols in the encryption protocol list to the HTTP AUSF network element via the base station; the HTTP AUSF network element selects the target encryption protocol from the encryption protocol list according to the version information , and send the target encryption protocol and the CA certificate carrying the public key to the user terminal via the base station; the user terminal generates a key according to the target encryption protocol, and uses the public key encryption key in the CA certificate to generate a key package, and sends the The key package is sent to the HTTP AUSF network element via the base station; the HTTP AUSF network element uses its pre-stored private key to decrypt the key package to obtain the key, and sends the key to the MME network element; the public key corresponds to the private key.

Description

technical field [0001] The invention relates to the communication field, in particular to an encryption method for an International Mobile Subscriber Identification Number (IMSI), a core network and a user terminal. Background technique [0002] The user IMSI (International Mobile Subscriber Identification Number, International Mobile Subscriber Identification Number) information is the unique identifier of the user and plays an important role in the communication network. The transmission of IMSI information over the air interface may cause user privacy leakage and affect the operator's reputation. At present, both the attach message and the user identification message before authentication in the live network may carry the user's IMSI information, but because these messages are before the authentication, and the user's IMSI information needs to be identified before the authentication, the message is not carried out. Encryption means transmission over the air interface. I...

AI Technical Summary

Problems solved by technology

However, if the key negotiation is performed through the air interface, there will be a risk of key leakage, which will still cause IMSI information leakage

If the key is built into the SIM (Subscriber Identification Module, user identification card) card, it will increase the complexity of changing the card, and the base station, as a wireless signal sending and receiving device, is not suitable as a network element for authentication and encryption

Images