Safety ability consultation method

Abstract

This invention discloses a negotiatory method of safety capability and is applied to the next generation network. It includes the following processes: a) the terminal sends the request of information registering to the soft exchange; b) the soft exchange sends identification request to the identifying center; c) the identifying center identifies the terminal, the terminal and the soft exchange negotiate the safety capability and communicate with each other according to the negotiated results. Because this invention realizes the safety capability negotiation during the registering identification process, so the safety capability negotiation is not restrained by the specific applying agreement of NGN network and is a general method. It has wide application range and strong extent capability and also has the strong points of simple exchanging process and high negotiation efficiency.

Description

technical field [0001] The invention relates to security management technology in communication, especially a security capability negotiation method applied in NGN (next generation network). Background technique [0002] NGN is a comprehensive and open network framework that can provide various services including voice, data and multimedia, and provides users with real-time conversational services. Its network equipment is composed of a small number of core equipment and a large number of user terminals. In addition to the interaction with PSTN / PLMN in the network, which is relatively safe based on circuit mode, the interaction between other network equipment is based on packet core network and various Packets are connected to the network for transmission. On the open IP network, the NGN network is extremely vulnerable to various illegal attacks, especially the large number of packet terminals in the NGN network, which can easily become the initiator of illegal attacks. ...

AI Technical Summary

Problems solved by technology

[0006] 1. Only the extended header field of SIP is defined, only for the application of SIP protocol, the application range is narrow, and the scalability is not strong;

[0007] 2. There are too many protocol interaction processes, and the efficiency of security capability negotiation is not high;

[0008] 3. The protocol process does not clearly define how it is applied in the NGN network, and how it is combined with the session process in the NGN network, which affects future intercommunication;

[0009] 4. The security capability is determined by the terminal, and the terminal is usually untrustworthy, and the security capability negotiation process exposes the security capability of the server, which is not conducive to the security of the system, and the security is low

Images