Sharing IP-SEC Resources Between Terminal and SIM Card

The patent merges the security association resources by allowing the terminal to share the existing IP-SEC channel established for voice communications with SIM card applications. Instead of creating separate independent security associations, the SIM card applications utilize the same security context and encrypted channel that the terminal already maintains with the IMS network, thereby combining security resources efficiently.

The terminal's existing IP-SEC security association is made multi-functional by enabling it to serve both traditional voice communications and SIM card applications simultaneously. The security context established for terminal-IMS communication is extended to cover application-IMS interactions, allowing a single security association to fulfill multiple functions without requiring additional dedicated security channels.

The patent segments the authentication process into two distinct phases: first, the terminal performs mutual authentication with the IMS network and establishes the IP-SEC channel; second, the SIM card application authenticates with the IMS server through the already-established secure channel using application-specific credentials. This segmentation allows the terminal's resource-efficient channel sharing while preserving the application's independent authentication capability.

The terminal performs preliminary authentication with the IMS network before SIM card applications need to access IMS services. The security association and encrypted channel are established in advance by the terminal, creating a pre-configured secure pathway that subsequent SIM card applications can utilize without repeating the authentication process, thus maintaining both resource efficiency and authentication capability.