Safety algorithm configuration method, control plane center node and terminal

Abstract

Provided are a safety algorithm configuration method, a control plane center node and a terminal. The method comprises the steps of sending safety algorithm information corresponding to a user plane center node CUUP to the terminal, implementing a negotiation process of the safety algorithm information corresponding to the CUUP, implementing that the CUUP can correspond to its own safety algorithminformation, and implementing the negotiation process of the safety algorithm information corresponding to the CUUP. The safety of the CUUP service is improved.

Description

Technical field[0001]The present invention relates to the field of communication technology, in particular to a security algorithm configuration method, a control plane central node and a terminal.Background technique[0002]In the New Radio (NR) system, a logical radio access network (Radio Access Network, RAN) node can be further divided into a Central Unit-ControlPlane (CU-CP), one or more A user plane central node (Central Unit-User Plane, CU-UP) and one or more distributed nodes (Distributed Unit, DU), this structure is called CU-CP / UP separation structure, these nodes can be located in different physical Within the entity. In addition, one CU-CP can be connected to multiple CU-UPs.[0003]In addition, in the prior art, the security algorithm used by all user bearers between a user and a 5g base station (gNB) is the same (including encryption algorithms and integrity protection algorithms). In this scenario, if user data of different Quality of Service (QoS) is carried on the CU-UP...

AI Technical Summary

Problems solved by technology

In this scenario, if user data with different Quality of Service (QoS) is carried on the CU-UP inside the gNB (for example, some CU-UPs carry online entertainment videos that are not related to user privacy, some CU-UPs carry UP carries a small amount of data but contains data related to user privacy, such as location and user's family device information, etc.), and all CU-UPs use the same security algorithm, which will lead to security risks, such as when the user registers to The null algorithm is selected in the public land mobile network (Public Land Mobile Network, PLMN), but the data of some users is not allowed to use the null algorithm to protect

In addition, since different CU-UPs have different positions, some CU-UPs are deployed at positions relative to the core internally, and security algorithms with relatively high security levels need to be configured. At this time, if the security algorithms of all CU-UPs are unified, the cause some safety hazards

Images