An air interface encryption method and device in a fail soft mode

Abstract

The embodiment of the invention provides an air interface encryption method and device in a fail soft mode. In the method, a base station can determine a point-to-point root key according to a privateidentifier reported by UE; a terminal and the base station can carry out key derivation according to the root key; after point-to-point security is activated, a group root key is generated for a group according to group information carried in a cluster registration request sent by the terminal, then the terminal and the base station respectively carry out key derivation according to the group root key, and encryption and decryption are carried out by using the key in point-to-point and point-to-multipoint signaling and data transmission processes. Therefore, a point-to-point and point-to-multipoint key derivation and distribution mechanism can be executed in a fail-soft mode, and point-to-point and point-to-multipoint signaling and data transmission security in the mode is ensured. And the security mechanism in the existing normal working mode is slightly changed, so that the method provided by the embodiment of the invention is simple and easy to implement, and the configuration of the existing network is not greatly influenced.

Description

technical field [0001] Embodiments of the present invention relate to the field of communication technologies, and in particular to an air interface encryption method and device in a fault weakening mode. Background technique [0002] The private network cluster system is a dedicated wireless communication system developed to meet the command and dispatch needs of industry users and is oriented to specific industry applications. It has very high requirements for reliability and invulnerability. When the communication between the base station and the core network is interrupted due to abnormal events such as natural disasters and construction accidents, or when the core network system fails, the base station should be able to maintain communication services with acceptable quality of service for users within the coverage area of ​​the base station , support trunking basic services such as single call, group call, and broadcast call, that is, provide fault weakening function, ...

AI Technical Summary

Problems solved by technology

[0005] However, in the process of realizing the invention, the inventors found that the prior art only provides the security of point-to-point and point-to-multipoint signaling and data in the normal mode, and in the weakened mode, the base station and the core network The communication has been interrupted, both the base station and the UE end the ongoing service and delete the context. At this time, there is no key derivation and distribution mechanism for point-to-point and point-to-multipoint services, and it is impossible to provide point-to-point and point-to-multipoint at the NAS layer and AS layer. security features

Images