Handshake negotiation method and system in safe grade

Abstract

Security level description layer and security protocol layer are setup at mobile terminal and server. Dividing capabilities of security safeguards into different levels, the security level description layer converts parameters of security protocol from security protocol layer to security levels, and receives information of security level sent from security level description layer of opposite end, as well as converts security level to be sent to security protocol layer to parameters of security protocol. Security protocol layer stores needed parameters of security protocol, and receives parameters of security protocol sent from security protocol layer of opposite end. The invention uses original handshake signaling of security protocol fully to carry out information of level description so as to avoid potential safety loophole if additional signaling for describing security level is added. Advantages are: easy of configuring and using security technique and convenience for charging.

Description

technical field [0001] The invention relates to the field of mobile communication and information security, in particular to a security level handshake negotiation method. Background technique [0002] With the development of mobile networks and services, mobile networks must support more and more security protocols and algorithms. This motivation mainly comes from the following aspects: (1) As the mobile network is becoming more and more integrated, such as the integration of 3G and WLAN, the mobile network must support a wide variety of mobile terminals at the same time, but different mobile terminals may have different security requirements. Protocol support, so the number of security protocols that the server must support is increasing day by day. (2) Due to the mobility of the mobile terminal, once a mobile terminal supporting a certain security protocol is put into use, it is objectively required for the operator to configure the security protocol for servers within t...

AI Technical Summary

Problems solved by technology

[0008] One of the purposes of the present invention is to propose a security level handshake negotiation system, which solves the problem that the expansion of security protocol parameters may be limited by the signaling format in the prior art, adapts to the coexistence of multiple security protocols in mobile networks, and diversifies mobile terminals And the characteristics of increasing network security protocol parameters brought about by the increasingly rich mobile services

Images