WO2014111049A1

WO2014111049A1 - Cell optimization method and device

Info

Publication number: WO2014111049A1
Application number: PCT/CN2014/070864
Authority: WO
Inventors: 张亮亮; 乌力吉
Original assignee: 华为技术有限公司
Priority date: 2013-01-18
Filing date: 2014-01-20
Publication date: 2014-07-24
Also published as: CN103945420B; CN103945420A

Abstract

Provided in an embodiment of the present invention are a cell optimization method and device, the method comprising: a third communication node receives a first set of parameters and/or a security algorithm and a second set of parameters and/or a security algorithm transmitted by a first communication node; alternatively, the third communication node receives the first set of parameters and/or a security algorithm transmitted by the first communication node, and the second set of parameters and/or a security algorithm transmitted by at least one second communication node; and the third communication node uses the first set of parameters and/or the security algorithm to communicate with the first communication node, and uses the second set of parameters and/or the security algorithm to communicate with the second communication node. When a parameter and/or security algorithm used by a third communication node is updated, the embodiment of the present invention ensures that the communication nodes in communication with the third communication node can all timely acquire the updated parameters, thus avoiding the problem that the third communication node and the communication nodes in communication with the third communication node cannot process information during communication.

Description

Cell optimization method and device

The present application claims priority to Chinese Application No. 201310019263.2, entitled "Cell Optimization Method and Apparatus", filed on Jan. 18, 2013, the entire disclosure of which is incorporated herein by reference. TECHNICAL FIELD The present invention relates to communications technologies, and in particular, to a cell optimization method and apparatus. In the prior art, when a user equipment (User Equipment, UE) interacts with a communication node, it is required to use a key to encrypt signaling or data of its interaction.

With the development of Long Term Evolution (LTE), some technologies begin to consider communication between nodes or carrier aggregation to improve the data rate of the UE, for example, to separate the user plane and control plane of the UE, even if the UE The control plane is at the first communication node and the data plane is at the second communication node. In the prior art, the UE communicates with the communication node using parameters and/or security algorithms, and the parameter and/or security algorithm may be a Next Hop Chaining Counter (NCC) and a Next Hop (Next Hop, When the UE switches to another communication node, the target communication node initiates an internal handover (intra-HO) after the UE handover is completed, and updates the NCC and NH for the UE, thereby performing security isolation, so that the UE uses New NCC and NH.

During the interaction, after the above parameters and/or security algorithms are updated, the UE may not be able to perform signaling and/or data interaction with the first communication node and/or the second communication node. SUMMARY OF THE INVENTION Embodiments of the present invention provide a cell optimization method and apparatus, which are used to solve a problem that a communication party cannot know when there are parameters and/or security algorithms updated when communication between communication nodes.

A first aspect of the embodiments of the present invention provides a method for optimizing a region, including:

The third communication node receives the first set of parameters and/or security algorithms sent by the first communication node and at least And a second set of parameters and/or security algorithms sent by the at least one second communication node;

The third communication node communicates with the first communication node using the first set of parameters and/or security algorithms, and communicates with the second communication node using the second set of parameters and/or security algorithms;

The first communication node is a station that performs control plane signaling communication with the third communication node, and the second communication node is a site that performs user plane data communication with the third communication node; or

The cell in which the first communication node is located is the primary cell of the third communication node, and the cell in which the second communication node is located is the secondary cell of the third communication node.

With reference to the first aspect, in a first possible implementation manner of the first aspect, the security algorithm includes at least one of an encryption algorithm, a header compression algorithm, and an integrity protection algorithm;

The parameters include at least one of a next hop connection counter NCC, a next hop NH, a cell radio network temporary identification C-RNTI, and a length of a packet data convergence layer protocol PDCP sequence number.

In conjunction with the first possible implementation of the first aspect, in a second possible implementation of the first aspect, the third communications node uses the first set of parameters and/or security algorithms and the first communications node Communicating, communicating with the second communication node using the second set of parameters and/or security algorithms, including at least one of the following:

And the third communication node performs encryption and decryption processing on the information that is communicated with the first communication node and/or the second communication node according to the encryption algorithm;

And the third communication node performs header compression or decompression compression processing on the information that is communicated with the first communication node and/or the second communication node according to the header compression algorithm;

The third communication node performs integrity protection or de-integrity protection processing on the information communicated with the first communication node and/or the second communication node according to the integrity protection algorithm.

In conjunction with the first aspect, in a third possible implementation of the first aspect, the third communications node communicates with the first communications node using the first set of parameters and/or security algorithms, using the second The set of parameters and/or security algorithms communicate with the second communication node, including:

The third communication node, upon receiving the first set of parameters and/or security algorithms, begins to communicate with the first communication node using the first set of parameters and/or security algorithms, the third communication node Receiving, by the second set of parameters and/or security algorithms, starting to communicate with the second communication node using the second set of parameters and/or security algorithms; or

The third communication node starts using the first set when transmitting information to the second communication node a parameter and/or security algorithm in communication with the first communication node, using the second set of parameters and/or security algorithms to communicate with the second communication node; or

When receiving the message sent by the first communication node or the second communication node, the third communication node starts to communicate with the first communication node by using the first set of parameters and/or security algorithm, and uses the second set of parameters. And/or a security algorithm to communicate with the second communication node; or

The third communication node, when accessing the second communication node, starts communicating with the first communication node using the first set of parameters and/or security algorithms, using the second set of parameters and/or security algorithms and The second communication node performs communication; or

The third communication node, when initially communicating with the second communication node, begins communicating with the first communication node using the first set of parameters and/or security algorithms, using the second set of parameters and/or security algorithms and The second communication node performs communication; or

When receiving the first data packet sent by the second communication node, the third communication node starts to communicate with the first communication node by using the first set of parameters and/or security algorithm, and uses the second a set of parameters and/or security algorithms to communicate with the second communication node; or

The third communication node starts to communicate with the first communication node by using the first set of parameters and/or security algorithms within a preset time after receiving the first set of parameters and/or security algorithms, The third communication node begins to communicate with the second communication node using the second set of parameters and/or security algorithms within a preset time after or after receiving the second set of parameters and/or security algorithms.

A second aspect of the embodiments of the present invention provides a method for optimizing a region, including:

The mobility management entity MME receives the request message sent by the first communication node;

Sending, by the MME, the first set of parameters and/or security algorithm and at least one set of second set of parameters and/or security algorithms to the first communication node according to the request message; or

Sending, by the MME, the first set of parameters and the first communication node according to the request message

And/or a security algorithm, transmitting a corresponding second set of parameters and/or security algorithms to the at least one second communication node;

The first set of parameters and/or security algorithms are used by the first communication node to communicate with the third communication node, and the second set of parameters and/or security algorithms are used by the second communication node and the third communication node. Communication

The first communication node is a station that performs control plane signaling communication with the third communication node, The second communication node is a station that performs user plane data communication with the third communication node; or the cell where the first communication node is located is a primary cell with the third communication node, and the second communication The cell where the node is located is the secondary cell of the third communication node.

With reference to the second aspect, in a first possible implementation manner of the second aspect, the security algorithm includes at least one of an encryption algorithm, a header compression algorithm, and an integrity protection algorithm;

The parameters include at least one of a next hop connection counter NCC, a next hop NH, a cell radio network temporary identification C-RNTI, and a packet data convergence layer protocol PDCP sequence number.

A third aspect of the embodiments of the present invention provides a cell optimization method, including:

Transmitting, by the first communications node, a request message to the mobility management entity MME, to enable the MME to send the first set of parameters and/or security algorithm and at least one set of second set of parameters and/or to the first communication node according to the request message. Or a security algorithm, or transmitting the first set of parameters and/or security algorithms to the first communication node, and transmitting the second set of parameters and/or security algorithms to at least one second communication node;

Receiving, by the first communications node, a first set of parameters and/or a security algorithm and a second set of parameters and/or security algorithms sent by the MME; or

Receiving, by the first communications node, a first set of parameters and/or a security algorithm sent by the MME; the first communications node is a station that performs control plane signaling communication with the third communications node, and the second communications The node is a station that performs user plane data communication with the third communication node; or, the cell where the first communication node is located is a primary cell with the third communication node, and the cell where the second communication node is located is a secondary cell of the third communication node.

With reference to the third aspect, in a first possible implementation manner of the third aspect, the first communications node receives a first set of parameters and a security algorithm sent by the MME, and at least one set of second set of parameters and/or security After the algorithm, it also includes:

Transmitting, by the first communications node, the corresponding second set of parameters and/or security algorithms to at least one of the second communications nodes, and transmitting the first set of parameters and/or security algorithms and protocols to the third communications node Describe at least one set of second set of parameters and/or security algorithms.

With reference to the third aspect, in a second possible implementation manner of the third aspect, after the first communications node receives the first set of parameters and/or security algorithms sent by the MME, the method further includes:

The first communication node transmits the first set of parameters and/or security algorithms to a third communication node. With reference to the third aspect, in a third possible implementation manner of the third aspect, the first communication Receiving, by the node, a first set of parameters and/or security algorithms sent by the MME, and at least one set of second set of parameters and/or security algorithms, or the first communication node receives the first set of parameters sent by the MME and / or after the security algorithm, it also includes:

The first communication node sends a message to the second communication node or the third communication node to cause the second communication node to start using the second set of parameters and/or security algorithms when receiving the message Communicating with the third communication node, causing the third communication node to start processing the information communicated with the first communication node using the first set of parameters and/or security algorithms when receiving the message, using the second set The parameters and/or security algorithms communicate with the second communication node.

With reference to the third aspect, in a fourth possible implementation manner of the third aspect, the first communications node receives a first set of parameters and/or a security algorithm sent by the MME, and at least one set of the second set of parameters and/or Or the security algorithm, or after the first communication node receives the first set of parameters and/or security algorithms sent by the MME, the method further includes:

The first communication node communicates with the third communication node in accordance with the first set of parameters and/or security algorithms.

With reference to any one of the third aspect to the fourth possible implementation manner of the third aspect, in a fifth possible implementation manner of the third aspect, the security algorithm includes an encryption algorithm, a header compression algorithm, and integrity protection At least one algorithm in the algorithm;

With reference to the fifth possible implementation manner of the third aspect, in a sixth possible implementation manner of the third aspect, the first communications node and the third communications node according to the first set of parameters and/or security algorithm Communicate, including at least one of the following:

And the first communication node performs encryption and decryption processing on the information that is communicated with the third communication node according to the encryption algorithm;

The first communication node performs header compression or decompression processing on the information communicated with the third communication node according to the header compression algorithm;

The first communication node performs integrity protection or de-integrity protection processing on the information communicated with the third communication node according to the integrity protection algorithm.

A fourth aspect of the present invention provides a communication node, where the communication node is a third communication node, including: a receiving module, configured to receive a first set of parameters and/or a security algorithm sent by the first communication node, and at least one second set of parameters and/or security algorithms; or

Receiving, by the first communication node, a first set of parameters and/or a security algorithm and a second set of parameters and/or security algorithms sent by the at least one second communication node;

a communication module, configured to, by the third communication node, communicate with the first communication node using the first set of parameters and/or security algorithms, and communicate with the second communication node using the second set of parameters and/or security algorithms ;

With reference to the fourth aspect, in a first possible implementation manner of the fourth aspect, the security algorithm includes at least one of an encryption algorithm, a header compression algorithm, and an integrity protection algorithm;

With reference to the first possible implementation manner of the fourth aspect, in a second possible implementation manner of the fourth aspect, the communication module is specifically used in at least one of the following:

And performing encryption and decryption processing on the information communicated with the first communication node and/or the second communication node according to the encryption algorithm;

Performing header compression or decompression processing on the information communicated with the first communication node and/or the second communication node according to the header compression algorithm;

An integrity protection or de-integrity protection process is performed on the information communicated with the first communication node and/or the second communication node in accordance with the integrity protection algorithm.

With reference to the fourth aspect, in a third possible implementation manner of the fourth aspect, the communication module is specifically configured to start using the first set when receiving the first set of parameters and/or security algorithms a parameter and/or security algorithm in communication with the first communication node, the third communication node, when receiving the second set of parameters and/or security algorithms, begins using the second set of parameters and/or security algorithms and The second communication node performs communication; or

The communication module is specifically configured to start using the information when sending information to the second communication node. The first set of parameters and/or security algorithms are in communication with the first communication node, and communicate with the second communication node using the second set of parameters and/or security algorithms; or

The communication module is specifically configured to: when receiving a message sent by the first communication node or the second communication node, start to use the first set of parameters and/or a security algorithm to communicate with the first communication node, and use the second a set of parameters and/or security algorithms to communicate with the second communication node; or

The communication module is specifically configured to, when accessing the second communication node, start to communicate with the first communication node by using the first set of parameters and/or security algorithms, and use the second set of parameters and/or security The algorithm communicates with the second communication node; or

The communication module is specifically configured to start to communicate with the first communication node by using the first set of parameters and/or security algorithms when starting communication with the second communication node, using the second set of parameters and/or security The algorithm communicates with the second communication node; or

The communication module is specifically configured to: when receiving the first data packet sent by the second communication node, start to use the first set of parameters and/or a security algorithm to communicate with the first communication node, using the a second set of parameters and/or security algorithms to communicate with the second communication node; or

The communication module is specifically configured to start using the first set of parameters and/or security algorithms with the first communication node within a preset time after or after receiving the first set of parameters and/or security algorithms. Communicating, the third communication node starts using the second set of parameters and/or security algorithm with the second communication node within a preset time after or after receiving the second set of parameters and/or security algorithms Communication.

A fifth aspect of the embodiments of the present invention provides a mobility management entity, including:

a receiving module, configured to receive a request message sent by the first communications node;

a sending module, configured to send, according to the request message, a first set of parameters and/or a security algorithm and at least one second set of parameters and/or security algorithms to the first communication node; or

Transmitting, according to the request message, the first set of parameters and/or security algorithms to the first communication node, and sending a corresponding second set of parameters and/or security algorithms to the at least one second communication node;

The first communication node is a station that performs control plane signaling communication with the third communication node, and the second communication node is a site that performs user plane data communication with the third communication node; or The cell in which the first communication node is located is the primary cell of the third communication node, and the cell in which the second communication node is located is the secondary cell of the third communication node.

With reference to the fifth aspect, in a first possible implementation manner of the fifth aspect, the security algorithm includes at least one of an encryption algorithm, a header compression algorithm, and an integrity protection algorithm;

A sixth aspect of the embodiments of the present invention provides a communication node, where the communication node is a first communication node, including:

a sending module, configured to send a request message to the mobility management entity MME, to enable the MME to send a first set of parameters and/or a security algorithm and at least one set of second parameters to the first communication node according to the request message And/or a security algorithm, or transmitting the first set of parameters and/or security algorithms to the first communication node, and transmitting the second set of parameters and/or security algorithms to at least one second communication node;

a receiving module, configured to receive a first set of parameters and/or a security algorithm and a second set of parameters and/or security algorithms sent by the MME; or

Receiving a first set of parameters and/or security algorithms sent by the MME;

The first communication node is a station that performs control plane signaling communication with the third communication node, and the second communication node is a site that performs user plane data communication with the third communication node; or, the The cell in which the communication node is located is the primary cell of the third communication node, and the cell in which the second communication node is located is the secondary cell of the third communication node.

With reference to the sixth aspect, in a first possible implementation manner of the sixth aspect, the sending module is further configured to receive, by the receiving module, a first set of parameters and a security algorithm sent by the MME, and at least one set of second After the set of parameters and/or the security algorithm, transmitting the corresponding second set of parameters and/or security algorithms to at least one of the second communication nodes, and transmitting the first set of parameters and/or security to the third communication node An algorithm and the at least one set of second set of parameters and/or security algorithms.

With reference to the sixth aspect, in a second possible implementation manner of the sixth aspect, the sending module is further configured to: after the receiving module receives the first set of parameters and/or security algorithms sent by the MME, The third communication node transmits the first set of parameters and/or security algorithms.

With reference to the sixth aspect, in a third possible implementation manner of the sixth aspect, the sending module is further configured to send a message to the second communications node or the third communications node, so that the second communications section Pointing, upon receiving the message, initiating communication with the third communication node using the second set of parameters and/or security algorithms, causing the third communication node to begin using the first set of parameters and upon receiving the message The security algorithm communicates with the first communication node and communicates with the second communication node using the second set of parameters and/or security algorithms.

In conjunction with the sixth aspect, in a fourth possible implementation manner of the sixth aspect, the communications node further includes a communications module, configured to communicate with the third communications node according to the first set of parameters and/or security algorithms.

With reference to any one of the sixth aspect to the fourth possible implementation manner of the sixth aspect, in a fifth possible implementation manner of the sixth aspect, the security algorithm includes an encryption algorithm, a header compression algorithm, and integrity protection At least one algorithm in the algorithm;

With reference to the fifth possible implementation manner of the sixth aspect, in a sixth possible implementation manner of the sixth aspect, the communication module is specifically used in at least one of the following:

Performing encryption and decryption processing on the information communicated with the third communication node according to the encryption algorithm; performing header compression or decompression processing on the information communicated with the third communication node according to the header compression algorithm;

And performing integrity protection or de-integrity protection processing on the information communicated with the third communication node according to the integrity protection algorithm.

In the embodiment of the present invention, the third communications node may receive the first set of parameters and/or the security algorithm and the second set of parameters and/or security algorithms sent by the first communications node, or receive the first sent by the first communications node. a set of parameters and/or security algorithms and a second set of parameters and/or security algorithms sent by the second communication node, wherein the third communication node uses the first set of parameters and/or security algorithms to communicate with the first communication node, using The second set of parameters and/or security algorithms communicate with the second communication node to enable communication with the third communication node when the MME wants to update parameters and/or security algorithms used by the third communication node Both the communication node and the third communication node acquire the updated parameters in time, and the communication node that communicates with the third communication node and the third communication node are prevented from processing the information in the communication process. BRIEF DESCRIPTION OF THE DRAWINGS In order to more clearly illustrate the embodiments of the present invention or the technical solutions in the prior art, the drawings used in the embodiments or the prior art description will be briefly described below, and obviously, the following description will be described below. The drawings in the drawings are some embodiments of the present invention, and those skilled in the art can obtain other drawings based on these drawings without any creative work.

1 is a schematic flowchart of Embodiment 1 of a cell optimization method according to the present invention;

2 is a schematic flowchart of Embodiment 2 of a cell optimization method according to the present invention;

3 is a schematic flowchart of Embodiment 3 of a cell optimization method according to the present invention;

4 is a schematic flowchart of Embodiment 4 of a cell optimization method according to the present invention;

FIG. 5 is a schematic flowchart of Embodiment 5 of a cell optimization method according to the present invention;

6 is a schematic flowchart of Embodiment 6 of a cell optimization method according to the present invention;

FIG. 7 is a schematic structural diagram of Embodiment 1 of a communication node according to the present invention;

FIG. 8 is a schematic structural diagram of Embodiment 1 of a mobility management entity according to the present invention;

FIG. 9 is a schematic structural diagram of Embodiment 2 of a communication node according to the present invention;

FIG. 10 is a schematic structural diagram of Embodiment 3 of a communication node according to the present invention;

FIG. 11 is a schematic structural diagram of Embodiment 4 of a communication node according to the present invention.

detailed description

The technical solutions in the embodiments of the present invention are clearly and completely described in the following with reference to the accompanying drawings in the embodiments of the present invention. It is a partial embodiment of the invention, and not all of the embodiments. All other embodiments obtained by those skilled in the art based on the embodiments of the present invention without creative efforts are within the scope of the present invention.

FIG. 1 is a schematic flowchart of Embodiment 1 of a cell optimization method according to the present invention. As shown in FIG. 1, the method includes:

S101 a. The third communication node receives the first set of parameters and/or security algorithms sent by the first communication node and at least one set of second sets of parameters and/or security algorithms. When there are multiple second communication nodes, each second communication node will have a corresponding second set of parameters and/or security algorithms.

S101b. The third communication node receives the first set of parameters and/or security algorithms sent by the first communication node and the second set of parameters and/or security algorithms sent by the at least one second communication node. It should be noted, When there are multiple second communication nodes, the third communication node may receive corresponding parameters and/or security algorithms sent by each second communication node, and the second set of parameters and/or security algorithms sent by different second communication nodes may They are all different.

It should be noted that S10a and S10b are alternatively executed according to different situations. In addition, the parameter and/or security algorithm sent by the first communication node is sent by the MME to the first communication node, and the parameter and/or security algorithm sent by the second communication node may be directly sent by the MME to the first The communication node may also be sent by the MME to the first communication node and then forwarded by the first communication node to the second communication node.

S102. The third communication node communicates with the first communication node by using the first set of parameters and/or security algorithms, and communicates with the second communication node by using the second set of parameters and/or security algorithms; these parameters and/or security The algorithm can be used for encryption and decryption processing, header compression or decompression processing, integrity protection or de-integrity protection processing. When there are a plurality of second communication nodes, the UE communicates with each of the second communication nodes using a second set of parameters and/or security algorithms corresponding to the respective second communication nodes.

The embodiment of the present invention is mainly directed to the separation of the user plane and the control plane of the third communication node, where the first communication node is a station that performs control plane signaling communication with the third communication node, and the second communication node is The third communication node performs the user plane data communication; or, it can be understood that the cell where the first communication node is located is the primary cell of the third communication node, and the cell where the second communication node is located is the third communication node. Secondary cell.

In this embodiment, the third communications node may receive the first set of parameters and/or security algorithms and the second set of parameters and/or security algorithms sent by the first communications node, or receive the first sent by the first communications node. a set of parameters and/or security algorithms and a second set of parameters and/or security algorithms sent by the second communication node, the third communication node then communicating with the first communication node using the first set of parameters and/or security algorithms, using the The second set of parameters and/or security algorithms communicate with the second communication node to enable communication with the third communication node when the MME wants to update parameters and/or security algorithms used by the third communication node Both the node and the third communication node acquire updated parameters in time, avoiding that the communication node communicating with the third communication node and the third communication node cannot process the information in the communication process.

Further, the foregoing security algorithm includes at least one of a Ciphering Algorithm, a header compression algorithm, and an integrity protection algorithm; specifically, the encryption algorithm may be eeaO, Eeal, eea2, eea3-v11xy, etc.; integrity protection algorithm, which can be eia0-v920, eial, eia2, eia3-v1 1xy, etc.; header compression algorithm is based on Robust Header Compression (ROHC) architecture (framework) Header compression or decompression compression can be performed using the algorithm and corresponding parameters. There are many specific header compression algorithms. The type of the algorithm is defined by the Profile Identifier. For example, 0x0002 represents an algorithm identifier. The specific header compression parameters can be Profile Identifier, MAX_CID, LARGE_CIDS, FEEDBACK_FOR. Etc., but not limited to this.

The above parameters include the length of the NCC, NH, Cell Radio Network Temporary Identifier (C-RNTI), Packet Data Convergence Protocol (PDCP) serial number (PDCP Sequence Number length). At least one of the parameters of the inbits, which are called PDCP-SN-Size, but not limited thereto; wherein, the C-RNTI is a flag in the cell when the UE is in the connected state, and is used for the base station to pass the C- The RNTI schedules the UE, and the UE identifies and receives its own data through the C-RNTI.

Further, the third communication node communicates with the first communication node using the first set of parameters and/or security algorithms, and communicates with the second communication node using the second set of parameters and/or security algorithms, including the following At least one:

1) the third communication node performs encryption and decryption processing on the information communicated with the first communication node and/or the second communication node according to the above encryption algorithm; that is, the third communication node is configured according to the first set of parameters and/or security algorithms. The encryption algorithm performs encryption and decryption processing on the information communicated with the first communication node, and performs encryption and decryption processing on the information communicated with the second communication node according to the encryption algorithm in the second set of parameters and/or the security algorithm. Specifically, the above-mentioned station may use a parameter (e.g., NCC, NH, or PDCP-SN-Size, etc.) and/or a security algorithm to derive a key for encryption or decryption of data.

2) the third communication node performs header compression or decompression processing on the information communicated with the first communication node and/or the second communication node according to the header compression algorithm; that is, the third communication node performs the first set of parameters according to the above Or a header compression algorithm in the security algorithm performs header compression or decompression compression processing on the information communicated with the first communication node, and the third communication node pairs the second set of parameters and/or the header compression algorithm in the security algorithm. The information communicated by the second communication node is subjected to header compression or decompression compression processing.

3) the third communication node is associated with the first communication node and/or the second communication according to the integrity protection algorithm described above The information communicated by the node performs integrity protection or de-integrity protection processing; that is, the third communication node performs information communication with the first communication node according to the integrity protection algorithm in the first set of parameters and/or the security algorithm. Integrity protection or de-integrity protection processing, the third communication node performs integrity protection or de-integrity protection on the information communicated with the second communication node according to the integrity protection algorithm in the second set of parameters and/or the security algorithm deal with.

It should be noted that the stations shown in the embodiments of the present invention may be replaced by base stations or cells. For the case where the control plane and the user plane of the third communication node are separated, the embodiment of the present invention may be: when the control plane of the third communication node switches to the first communication node or after the handover, the user plane of the third communication node Still at the second communication node, or when the user plane of the third communication node switches to the second communication node or after the handover, the control plane of the third communication node is still at the first communication node, ie, the second communication node is the same as the above a third communication node performs base station data communication, the first communication node is a base station that performs control plane signaling communication with the third communication node; or the cell where the first communication node is located is a primary cell of the third communication node The second communication node is a secondary cell of the foregoing third communication node; more specifically, the embodiment is applicable to multiple specific scenarios, for example: scenario 1, the control plane of the third communication node is switched from the second communication node to the first a communication node, and the user plane of the third communication node remains at the second communication node; specifically, may be User and control plane communications node in a second communication node (in Pico example), the control plane third communication node to be switched to the first communication node (macro network to the eNB, i.e. Macro eNB macro base station as an example).

Scenario 2, the control plane of the third communication node is switched from the third base station to the first communication node, and the user plane of the third communication node is maintained at the second communication node; the third station may be in addition to the second communication node, Any one of the first communication nodes; specifically, the third communication node may switch from the fourth communication node (taking the macro base station Macro eNBI as an example) to the target first communication node (taking the macro base station Macro eNB 2 as an example) The data plane of the third communication node is maintained at the second communication node (taking the micro base station Picol as an example).

Scenario 3, the control plane of the third communication node is maintained at the first communication node, and the user plane of the third communication node is switched from the fourth communication node to the second communication node; likewise, the fourth communication node may be in addition to the foregoing a second communication node, any one of the first communication nodes; specifically, the control plane of the third communication node may be maintained at the first communication node (taking the macro base station eNB as an example), and the user plane of the third communication node is transmitted from The fourth communication node (taking the micro base station Pico2 as an example) is replaced with the second communication node (taking Picol as an example). Scenario 4, the user plane of the third communication node switches from the first communication node to the second communication node, and the control plane of the third communication node remains at the first communication node. Specifically, the user plane and the control plane of the third communication node may be in the first communication node (taking the macro base station eNB as an example), and the user plane of the third communication node is switched to the second communication node (taking Picol as an example).

In the case that the control plane and the user plane of the third communication node are separated, the control plane and the user plane of the third communication node may be switched between different sites. The implementation scenario of the embodiment of the present invention may be in the handover process, or In the non-handover process, as long as the MME wants to update the parameters and/or security algorithms used by the third communication node, the updated parameters and/or security algorithms are sent to the corresponding site, and then sent by the site to the third communication node. So that the first communication node, the second communication node, and the third communication node can synchronously use the updated parameters and/or security algorithms, and also facilitate the first communication node to use the first set of parameters and/or security algorithms and the third The communication node communicates and the second communication node communicates with the third communication node using the second set of parameters and/or security algorithms described above. It should be noted that the information that the station communicates with the third communication node may be data or may also be signaling, such as system messages, physical layer signaling, information on the control channel, and the like.

In addition, the first communication node or the second communication node mentioned in the embodiment of the present invention may be a wireless communication node, and the communication node may be various types of base stations, a macro base station (Macro eNB), and a pico base station. (Micro eNB), a micro base station (Pico eNB), a home base station HeNB, a small cell eNB, a relay station, etc., are not limited herein. The first communication node or the second communication node may also be a UE. Specifically, the UE can support a Device to Device (D2D) function to support end-to-end communication between user equipments.

In the embodiment of the present invention, the third communication node may be a wireless communication node, and the communication node may be various types of base stations, a macro base station (Macro eNB), a pico base station (Micro eNB), a micro base station (Pico eNB), and a home base station. The HeNB, the small cell eNB, the relay station, and the like are not limited herein. The third communication node can be a UE. Specifically, the third communication node can support the Device-to-Devicc function to support end-to-end communication between user equipments. In the embodiment of the present invention, the third communication node takes the user equipment as an example to illustrate the content of the invention.

In the embodiment of the present invention, the scenario in which the control plane of the third communication node is separated from the user plane may be a scenario in which the third communication node supports carrier aggregation, and specifically refers to the frequency of the cell 1 in which the first communication node is located, and second. The cell 2 where the communication node is located uses the frequency f2 and simultaneously provides the third communication node. Service. For example, the cell 1 serving the third communication node of the first communication node may be referred to as a primary cell, and the cell 2 serving the terminal by the second communication node may be referred to as a secondary cell. The first communication node may be a macro base station eN B and the second communication node may be a micro base station Pico.

a station that provides a control plane service for the third communication node, that is, the first communication node may serve as a primary station of the third communication node, and the primary station usually adopts a low frequency band to transmit control plane signaling, and optionally may carry the third communication node. Part of the low data volume service bearer; the radio resource control (Radio Resource Control, RRC) connection of the third communication node is established at the primary site; the following is the site/cell serving the control plane of the third communication node, The site/cell of the user plane service of the third communication node is defined in detail:

The station that provides the control plane service for the third communication node includes: a site corresponding to the cell to which the control plane transmits, a downlink transmission site that can send control signaling for the third communication node; or a site corresponding to the macro base station or the macro cell; or a site corresponding to the primary cell; or a site corresponding to the serving cell of the third communication node; a site providing a Signaling Radio Bearer (SRB) for the third communication node; and a third communication node The site where the RRC connection is established.

The cell that provides the control plane service or the control plane transmission for the third communication node includes: a primary cell; or a cell that sends control signaling for the third communication node; or sends control signaling for the third communication node. a cell corresponding to the downlink transmission point; or a cell corresponding to the macro base station; or a cell providing non-access stratum (NAS) mobility information for the third communication node during RRC connection setup or re-establishment or handover, or In the RRC connection setup or handover procedure, the third communication node is provided with a secure input cell; the third communication node is provided with the SRB transported cell. The cell that provides security input to the third communication node during the RRC connection setup or handover process is also the primary cell. The secondary cell is a cell different from the primary cell.

The control signaling may include at least one of the following: information on the hybrid automatic repeat indication channel, information on the control information format indication channel, information on the control channel, system message, physical layer signaling, medium access control (Medium) Access Control, the so-called MAC) layer message, RRC layer message, S RBs corresponding information.

Optionally, the station that provides the control plane service by the third communication node may also be responsible for the transmission of the DRBs or part of the SRBs on the basis of the above definition.

The site providing the user plane service for the third communication node includes: a secondary cell The station where the station is located, or the station corresponding to the secondary cell, or the station that provides data transmission for the third communication node, or provides the data radio bearer (Data Radio Bearer, DRB) and/or signaling for the third communication node. A station that transmits a Signaling Radio Bearer (SRB), or a station that provides information for transmission on a Physical Downlink Shared Channel (PDSCH) for a third communication node. The provided SRB is different from the SRB provided by the base station that provides the control plane service for the third communication node;

The cell that provides the user plane service or the user plane transmission for the third communication node includes: a secondary cell; or a cell that provides data transmission for the third communication node of the user; and a cell that provides DRB transmission for the third communication node of the user; Alternatively, the third communication node is provided with a cell that transmits information on the PDSCH.

for example:

Specifically, it may be that the station providing the control plane transmission for the third communication node is responsible for the transmission of the SRBs; the station providing the user plane transmission for the third communication node is responsible for the transmission of the DRBs.

Alternatively, it may be that the station providing the control plane transmission for the third communication node is responsible for the transmission of SRB0 and SRB1; the station providing the user plane transmission for the third communication node is responsible for the transmission of SRB2 and DRBs, wherein the above SRBs are divided into SRB0 , SRB1, SRB2. Specifically, the SRBO is used to transmit an RRC message, and is transmitted on a Common Control Channel (CCT); the SRB1 is used to transmit an RRC message (and may also include a piggybacked N AS message), before the establishment of the SRB2 bearer, Has a higher priority than SRB2. SRB2 is transmitted on the Dedicated Control Channel (DCCH) to transmit NAS messages, which has lower priority than SRB1, and SRB2 is always configured to be transmitted on the DCCH after the security mode is activated.

Alternatively, it may be that the station providing the control plane transmission for the third communication node is responsible for the transmission of SRB0 and SRB1, and is also responsible for the transmission of part of the DRBs; the station providing the user plane transmission for the third communication node is responsible for SRB2 and part of the DRBs. transmission.

Alternatively, it may be that the station providing the control plane transmission for the third communication node is responsible for the transmission of the SRBs, and is also responsible for the transmission of the partial DRBs; the station providing the user plane transmission for the third communication node is responsible for the transmission of the partial DRBs.

Further, the third communication node uses the first set of parameters and/or security algorithm and the first pass The signaling node communicates and communicates with the second communication node using a second set of parameters and/or security algorithms. In the implementation process, there are various situations, as follows:

1) The third communication node starts to communicate with the first communication node using the first set of parameters and/or security algorithms when receiving the first set of parameters and/or security algorithms, and the third communication node receives the first When the two sets of parameters and/or security algorithms are used, the second set of parameters and/or security algorithms are used to communicate with the second communication node; that is, the third communication node is put into use as soon as it receives the parameters and/or security algorithms.

2) the third communication node, when transmitting information to the second communication node, starts communicating with the first communication node using the first set of parameters and/or security algorithms, using the second set of parameters and/or security algorithms and the second The communication node performs communication; the information sent by the third communication node to the second communication node may be any information.

3) when receiving the message sent by the first communication node or the second communication node, the third communication node starts to communicate with the first communication node by using the first set of parameters and/or security algorithms, using the second set of parameters and/or Or the security algorithm communicates with the second communication node; the message sent by the first communication node or the second communication node received by the third communication node may be an indication message specifically for instructing to start using the new parameter and/or the security algorithm, Or any message, for example, the third communication node may pre-arrange to start to communicate with the first communication node by using the first set of parameters and/or security algorithms when receiving a certain message, using the second set of parameters. And/or a security algorithm communicates with the second communication node.

4) when the third communication node accesses the second communication node, starts to communicate with the first communication node using the first set of parameters and/or security algorithms, using the second set of parameters and/or security algorithm and the second The communication node performs communication; specifically, after receiving the parameter and/or the security algorithm, the third communication node is temporarily not used, and the third communication node starts to use the received parameter when accessing the second communication node. And / or security algorithms.

5) the third communication node begins to communicate with the first communication node using the first set of parameters and/or security algorithms when communicating with the second communication node, using the second set of parameters and/or security algorithms and the second The communication node performs communication; specifically, after receiving the parameter and/or the security algorithm, the third communication node is temporarily not used, and when the third communication node starts to communicate with the second communication node, starts to use the received Parameters and / or security algorithms.

6) when the third communication node receives the first data packet sent by the second communication node, Communicating with the first communication node using the first set of parameters and/or security algorithms described above, and communicating with the second communication node using the second set of parameters and/or security algorithms; specifically, there are two cases, one After receiving the above parameters and/or security algorithms, the third communication node starts to use the above parameters and/or security algorithm when receiving the first data packet sent by the second communication node; The communication node receives the first data packet sent by the second communication node, and does not process it. After receiving the above parameters and/or the security algorithm, the communication node immediately starts using the parameter and/or the security algorithm for the first data packet. Process it. (This item is only applicable to scenario 1 and scenario 2 above.) 7) The third communication node starts to use the first set of parameters after a preset time or after receiving the first set of parameters and/or security algorithms. And/or a security algorithm in communication with the first communication node, the third communication node using the second set of parameters and/or security within a preset time after or after receiving the second set of parameters and/or security algorithms The algorithm communicates with the second communication node; in the specific implementation process, the timer can be used to implement.

The specific implementation process may not be limited to the above cases.

In this embodiment, the third communications node may receive the first set of parameters and/or security algorithms and the second set of parameters and/or security algorithms sent by the first communications node, or receive the first sent by the first communications node. a set of parameters and/or security algorithms and a second set of parameters and/or security algorithms sent by the second communication node, the third communication node then communicating with the first communication node using the first set of parameters and/or security algorithms, using the The second set of parameters and/or security algorithms communicate with the second communication node, thereby enabling the MME to update the third communication node regardless of whether during the handover of the control plane and the user plane of the third communication node or during the handover process When the parameters and/or security algorithms are used, the base station and the third communication node that communicate with the third communication node can acquire updated parameters and/or security algorithms in time to avoid the site communicating with the third communication node. And the third communication node cannot process the information in the communication process.

2 is a schematic flowchart of a second embodiment of a cell optimization method according to the present invention. The method is implemented as an MME. As shown in FIG. 2, the method includes:

S201. The MME receives the request message sent by the first communications node. The first communications node is the first communications node shown in the embodiment of FIG. 1. The request message may include at least one of the following messages: the third communication node S1 interface identity code (ID) of the second communication node is used to identify the third corresponding to the S1 interface of the second communication node. a communication node; a third communication node S1 interface ID of the MME, used to identify a third communication node corresponding to the S1 interface of the MME; The identifier of the node; the protocol (Internet Protocol, IP address) of the communication between the networks of the second communication node; the identifier of the cell where the second communication node is located, for example, E-UTRAN-CGI; indication information, To indicate that the MME needs to allocate two sets of parameters and/or security algorithms, namely the first set of parameters and/or security algorithms and the second set of parameters and/or security algorithms described above.

It should be noted that S201 may perform selection according to a specific scenario. For example, in the non-handover process, when the MME actively requests the third communication node to update the used parameters and/or security algorithms, the step is not required to be performed.

S202a. The MME sends a first set of parameters and/or security algorithms and at least one set of second sets of parameters and/or security algorithms to the first communication node according to the request message. When there are multiple second communication nodes, it is necessary to assign a corresponding second set of parameters and/or security algorithms to each of the second communication nodes.

S202b: The MME sends a first set of parameters and/or security algorithms to the first communication node according to the request message, and sends a corresponding second set of parameters and/or security algorithms to the at least one second communication node. When there are multiple second communication nodes, the MME sends a corresponding second set of parameters and/or security algorithms to each of the second communication nodes.

According to a specific implementation scenario, one of the above S202a and S202b is performed.

It should be noted that the first set of parameters and/or security algorithms are used by the first communication node to communicate with the third communication node, and the second set of parameters and/or security algorithms are used for the second communication node and the third communication node. Communicate. The first communication node is a station that performs control plane signaling communication with the third communication node, and the second communication node is a station that performs user plane data communication with the third communication node; or, the cell where the first communication node is located is And the primary cell of the third communication node, the cell where the second communication node is located is the secondary cell of the third communication node.

In this embodiment, the MME may actively update parameters and/or security algorithms used by the third communication node, and may also send parameters and/or security algorithms to the first communication node and the second communication node according to the request message of the first communication node. And further forwarding to the third communication node, so that the first communication node, the second communication node and the third communication node can be informed of the corresponding parameters and/or security after updating the parameters and/or the security algorithm in any case. The algorithm prevents the first communication node, the second communication node, and the third communication node from processing information for communication between them.

FIG. 3 is a schematic flowchart of Embodiment 3 of a cell optimization method according to the present invention. As shown in FIG. 3, the method includes:

S301. The first communications node sends a request message to the MME, so that the MME is configured according to the request. Transmitting, by the first communication node, a first set of parameters and/or security algorithms and at least one set of second sets of parameters and/or security algorithms, or sending a first set of parameters and/or security algorithms to the first communication node, And transmitting a second set of parameters and/or security algorithms to the at least one second communication node.

The request message may include at least one of the following messages: the third communication node S1 interface identity code (ID) of the second communication node is used to identify the third corresponding to the S1 interface of the second communication node. a communication node; a third communication node S1 interface ID of the MME, used to identify a third communication node corresponding to the S1 interface of the MME; an identifier of the second communication node; and an interconnection between the networks of the second communication node Protocol (Internet Protocol) address information; an identifier of a cell in which the second communication node is located, for example, E-UTRAN-CGI; indication information, indicating that the MME needs to allocate two sets of parameters and/or security algorithms, that is, the foregoing The first set of parameters and/or security algorithms and the second set of parameters and/or security algorithms.

S302a, the first communications node receives the first set of parameters and/or security algorithms sent by the MME, and at least one set of second set of parameters and/or security algorithms; when there are multiple second communications nodes, the MME needs to The second communication node assigns a corresponding second set of parameters and/or security algorithms.

S302b: The first communications node receives the first set of parameters and/or security algorithms sent by the MME, and performs the next execution in S302a or S302b according to a specific scenario.

The first communication node is a station that performs control plane signaling communication with the third communication node, and the second communication node is a site that performs user plane data communication with the third communication node; or, it may be understood that the first communication node The cell in which the communication node is located is the primary cell of the third communication node, and the cell in which the second communication node is located is the secondary cell of the third communication node.

In this embodiment, the first communication node may request the MME to send a parameter and/or a security algorithm, so that the MME sends the parameter and/or the security algorithm to the first communication node and the second communication node in time during the handover process. And causing the first communication node and the second communication node to forward the updated parameter and/or the security algorithm to the third communication node, preventing the first communication node, the second communication node, and the third communication node from being unable to process the communication when communicating Information between communications.

Further, in the case that the foregoing S302a is selected to be executed, after the first communication node receives the first set of parameters and the security algorithm sent by the MME and at least one set of the second set of parameters and/or security algorithms, the first communication node is at least A second communication node sends the corresponding second set of parameters and/or security algorithms, and sends a first set of parameters and/or security algorithms and the at least one set of second sets of parameters and/or security algorithms to the third communication node, So that each of the second communication node and the third communication node can use the updated Parameters and/or security algorithms communicate.

In the case that the S302b is selected to be executed, after the first communication node receives the first set of parameters and/or security algorithms sent by the MME, the first communication node sends the first set of parameters and/or security algorithms to the third communication node.

Further, the first communication node receives the first set of parameters and/or security algorithms and the second set of parameters and/or security algorithms sent by the MME, or the first communication node receives the first set of parameters sent by the MME. And/or after the security algorithm, the first communication node sends a message to the second communication node or the third communication node, so that the second communication node starts to use the second set of parameters and/or when receiving the message. The security algorithm communicates with the third communication node to cause the third communication node to begin communicating with the first communication node using the first set of parameters and/or security algorithms upon receiving the message, using the second set of parameters And/or a security algorithm communicates with the second communication node.

After performing the above S302a or S302b, the first communication node communicates with the third communication node according to the first set of parameters and/or security algorithms. Specifically, the foregoing security algorithm includes at least one of an encryption algorithm, a header compression algorithm, and an integrity protection algorithm; and the foregoing parameters include at least one of lengths of NCC, NH, C-RNTK PDCP sequence numbers.

The first communication node communicates with the third communication node according to the first set of parameters and/or security algorithms, and may specifically be at least one of the following processes:

1) The first communication node performs encryption and decryption processing on the information communicated with the third communication node according to the encryption algorithm, that is, the first communication node performs the third communication with the encryption algorithm according to the first set of parameters and/or the security algorithm. The information that the node communicates is encrypted and decrypted.

2) The first communication node performs header compression or decompression compression processing on the information communicated with the third communication node according to the header compression algorithm, that is, the first communication node performs header compression according to the first set of parameters and/or security algorithms. The algorithm performs header compression or decompression processing on the information communicated with the third communication node.

3) The first communication node performs integrity protection or de-integrity protection processing on the information communicated with the third communication node according to the integrity protection algorithm, that is, the first communication node is configured according to the first set of parameters and/or security algorithms. The integrity protection algorithm performs integrity protection or de-integrity protection processing on the information communicated with the third communication node.

4 is a schematic flowchart of Embodiment 4 of a cell optimization method according to the present invention. As shown in FIG. 4, an execution body of the method is the foregoing second communication node, and the method includes: 5401. The second communication node receives a parameter and/or a security algorithm sent by the first communication node or the MME, where the parameter and/or the security algorithm is the second set of parameters and/or the security algorithm. The parameters and/or security algorithms are used to perform communication security related operations, such as but not limited to encryption and integrity protection, on the communicated data or information.

Specifically, the security algorithm may be an encryption algorithm, such as eeaO, eeal, eea2, eea3-v1 1xy, etc., or may be an integrity protection algorithm, such as eia0-v920, eial, eia2, eia3-v1 1xy, etc., or may be a header. The compression algorithm, the header compression algorithm is based on the ROHC architecture, and the header compression or decompression can be performed by using the algorithm and corresponding parameters. There are many specific header compression algorithms. The type of the algorithm is defined by the identifier of the bucket. For example, 0x0002 indicates an algorithm identifier. The specific header compression parameters may include Profile Identifier, MAX_CID, LARGE_CIDS, FEEDBACK-FOR, etc. However, it is not limited to this; the parameters may be, NCC, NH, PDCP layer serial number length, C-RNTI, etc., but not limited thereto. Specifically, the C-RNTI is an indication in the cell when the third communication node is in the connected state, and is used by the base station to conveniently schedule the third communication node by using the C-RNTI.

The second communication node communicates with the third communication node according to the parameter and/or the security algorithm. Specifically, it may be at least one of the following processes:

1) the second communication node performs encryption and decryption processing on the information that the third communication node performs communication according to the encryption algorithm;

2) the second communication node performs header compression or decompression processing on the information communicated with the third communication node according to the header compression algorithm;

3) The second communication node performs integrity protection or solution integrity protection on the information communicated with the third communication node according to the integrity protection algorithm.

The second communication node communicates with the third communication node according to the parameter and/or the security algorithm. In the specific implementation process, there are various situations, as follows:

1) the second communication node starts to communicate with the third communication node using the above parameters and/or security algorithm when receiving the above parameters and/or security algorithms; it may be that the second communication node receives new parameters and/or The security algorithm starts using the above parameters and/or security algorithms directly.

2) after receiving the parameter and/or the security algorithm, the second communication node does not use, and after receiving the message sent by the first communication node or the third communication node, starts using the parameter and/or the security algorithm. Communicating with the third communication node; the message may be specific for indicating the second The communication node uses the above-mentioned parameter and/or the indication message of the security algorithm, and may also be any message sent by the first communication node or the third communication node to the second communication node; for example, the second communication node may be pre-agreed A certain message is used as an indication message or an activation message. For example, in the above scenario 1, after the handover is completed, the first communication node may send a third communication node context release message to the second communication node, and the message is used to indicate the first The second communication node releases the context of the third communication node, where the message is agreed as an indication message, that is, when the message is received, it is equivalent to receiving the indication message, and the second communication node starts to use the above parameters and/or security algorithm, but does not To this end, it may be other messages; after receiving the message, it means that the second communication node uses this as a starting point to start using parameters and/or security algorithms to process the information communicated with the third communication node. Equivalent to the message activating the second communication node and the third communication node to begin using the parameters and/or security algorithms to process information communicated by the second communication node with the third communication node. Or a message sent by the first communication node or the third communication node to the second communication node may carry an indication information, for example, one of the bits is used to indicate whether to start using the above parameters and/or security algorithm; It is noted that the third communication node may send the message after accessing the first communication node, and the first communication node may send the parameter and/or the security algorithm to the second communication node or send the parameter and/or Or sending the above information to the second communication node after the security algorithm;

In a specific implementation process, the second communication node may start to communicate with the third communication node at the same time as or after receiving the message, and start to communicate with the third communication node, which may be sent to the third communication node. The message or the message sent by the third communication node is received.

3) Alternatively, the second communication node may start communicating with the third communication node using the parameters and/or security algorithms described above when initially communicating with the third communication node.

4) Alternatively, when the third communication node accesses the second communication node, the second communication node starts communicating with the third communication node using the parameters and/or security algorithms.

5) Alternatively, when the third communication node is uplink-synchronized with the second communication node, communication with the third communication node is started using the above parameters and/or security algorithms.

The uplink synchronization means that, in the same cell, uplink signals sent by users at different locations in the same time slot arrive at the base station receiving antenna at the same time, that is, signals of different users in the same time slot arrive at the base station receiving antenna to maintain synchronization.

Before the uplink synchronization is established, the third communication node must listen to the synchronization signal of the cell to obtain downlink synchronization, and the subsequent third communication node adjusts the timing offset to achieve uplink synchronization.

6) The second communication node may receive the first data sent by the first communication node. At the time of the packet, communication with the third communication node is started using the parameters and/or security algorithms. Specifically, there may be two cases. One is that after receiving the foregoing parameter and/or security algorithm, the second communication node starts to use the parameter and when receiving the first data packet sent by the first communication node. Or a security algorithm; in another case, the second communication node receives the first data packet sent by the first communication node, does not process it, and immediately starts using the parameter after receiving the above parameters and/or security algorithm. And/or a security algorithm processes the first packet described above.

7) The second communication node may also start to communicate with the third communication node by using the parameter and/or the security algorithm within a preset time after receiving the parameter and/or the security algorithm; , can be implemented by timer timing.

8) The second communication node may send an indication message for instructing to start using the above parameter and/or security algorithm to the third communication node, and start using the above parameter and/or security algorithm and the third when sending the indication message. The communication node performs communication. In the specific implementation process, the parameter and/or the security algorithm may also be used after receiving the confirmation message that the third communication node replies to the indication message. In the specific implementation process, the foregoing indication message may also have multiple understanding manners, which is similar to the foregoing second case, and details are not described herein again.

9) if the second communication node does not preset and does not receive any indication message after receiving the above parameters and/or security algorithm, the second communication node needs to decrypt or unpack the information sent by the third communication node. When the compression or de-integrity protection processing is performed, the original parameters and/or security algorithms are first used. If the decryption or de-head compression or the de-integrity protection fails, the above parameters and/or security algorithms are used to communicate with the third communication node. .

The specific implementation process may not be limited to the above cases.

FIG. 5 is a schematic flowchart of Embodiment 5 of a cell optimization method according to the present invention. In the foregoing method embodiment of FIG. 1 to FIG. 4, the MME sends a first set of parameters and/or security algorithms and at least one set to the first communication node. The second set of parameters and/or security algorithm in this case, the specific interaction process of the MME, the first communication node, the second communication node, and the third communication node, as shown in FIG. 5, wherein the second communication node represents the at least one Any one of the second communication nodes, the method comprising:

5501. The first communication node sends a request message to the MME. This step is optional. During the handover process, this step can be performed. If the MME actively updates parameters and/or security algorithms, it is not necessary to perform this step.

S502. The MME sends the first set of parameters and/or security to the first communications node according to the request message. Algorithm and second set of parameters and/or security algorithms.

S503. The first communication node sends the second set of parameters and/or security algorithms to the second communication node.

S504. The first communications node sends the first set of parameters and/or security algorithms and the second set of parameters and/or security algorithms to the third communications node.

S503 and S504 can be executed simultaneously.

5505. The third communication node starts to use the first set of parameters and/or security algorithm and the second set of parameters and/or security algorithms, that is, the third communication node starts to use the first set of parameters and/or security algorithm pairs and the first The communication node communicates with the second communication node using the second set of parameters and/or security algorithms described above.

5506. The first communications node begins to use the first set of parameters and/or security algorithms described above, that is, the first communications node begins to communicate with the third communications node using the first set of parameters and/or security algorithms.

5507. The second communication node begins to use the second set of parameters and/or security algorithms described above, that is, the second communication node begins to communicate with the third communication node using the second set of parameters and/or security algorithms.

S505, S506, and S507 can be executed simultaneously.

For the specific time when the third communication node and the second communication node use the foregoing parameters and/or the security algorithm, reference may be made to the foregoing method embodiments in FIG. 1 and FIG. 4, and details are not described herein again.

FIG. 6 is a schematic flowchart of Embodiment 6 of a cell optimization method according to the present invention. In the foregoing method embodiment of FIG. 1 to FIG. 4, the MME sends a first set of parameters and/or security algorithms to the first communication node, to at least one a specific interaction process between the MME, the first communication node, the second communication node, and the third communication node, where the second communication node sends a corresponding second set of parameters and/or security algorithms, as shown in FIG. The two communication nodes represent any one of the at least one second communication node, the method comprising:

5601. The first communication node sends a request message to the MME. This step is optional. During the handover process, this step can be performed. If the MME actively updates parameters and/or security algorithms, it is not necessary to perform this step.

S602. The MME sends a first set of parameters and/or security algorithms to the first communications node according to the request message.

S603. The MME sends a second set of parameters and/or security algorithms to the second communications node according to the request message. S602 and S603 can be performed simultaneously.

5604. The first communications node sends a first set of parameters and/or security algorithms to the third communications node.

S605. The second communication node sends a second set of parameters and/or security algorithms to the third communication node.

5606. The third communication node starts to use the first set of parameters and/or security algorithm and the second set of parameters and/or security algorithms, that is, the third communication node starts to use the first set of parameters and/or the security algorithm pair and the first The communication node communicates with the second communication node using the second set of parameters and/or security algorithms described above.

5607. The first communication node starts to use the first set of parameters and/or security algorithms, that is, the first communication node starts to communicate with the third communication node by using the first set of parameters and/or security algorithms.

5608. The second communications node begins to use the second set of parameters and/or security algorithms described above, that is, the second communications node begins to communicate with the third communications node using the second set of parameters and/or security algorithms.

S606, S607, S608 can be executed simultaneously.

FIG. 7 is a schematic structural diagram of Embodiment 1 of a communication node according to the present invention. The communication node is the foregoing third communication node. As shown in FIG. 7, the communication node includes: a receiving module 701 and a communication module 702, where:

The receiving module 701 is configured to receive a first set of parameters and/or a security algorithm sent by the first communications node, and at least one set of second set of parameters and/or security algorithms; or receive the first set sent by the first communications node a parameter and/or security algorithm and a second set of parameters and/or transmitted by at least one second communication node Security algorithm

a communication module 702, configured to, by the third communications node, communicate with the first communications node using the first set of parameters and/or security algorithms, and perform the second set of parameters and/or security algorithms with the second communications node Communication

The first communication node is a station that performs control plane signaling communication with the third communication node, and the second communication node is a site that performs user plane data communication with the third communication node; or, The cell in which the first communication node is located is the primary cell of the third communication node, and the cell in which the second communication node is located is the secondary cell of the third communication node.

Further, the foregoing security algorithm includes at least one of an encryption algorithm, a header compression algorithm, and an integrity protection algorithm; the foregoing parameters include a next hop connection counter NCC, a next hop NH, a cell radio network temporary identifier C-RNTI, a packet At least one of the lengths of the data aggregation layer protocol PDCP sequence number.

The communication module 702 can perform at least one of the following processes:

1) Encryption and decryption processing of information communicated with the first communication node and/or the second communication node in accordance with the encryption algorithm.

2) Perform header compression or decompression compression processing on the information communicated with the first communication node and/or the second communication node in accordance with the header compression algorithm.

3) Perform integrity protection or de-integrity protection processing on the information communicated with the first communication node and/or the second communication node in accordance with the integrity protection algorithm.

Further, the communication module 702 is specifically configured to start to communicate with the first communication node by using the first set of parameters and/or security algorithms when receiving the first set of parameters and/or security algorithms, And the third communication node starts to communicate with the second communication node by using the second set of parameters and/or security algorithm when receiving the second set of parameters and/or security algorithms; or

The communication module 702 is specifically configured to: when the information is sent to the second communication node, start to communicate with the first communication node by using the first set of parameters and/or security algorithms, and use the second set of parameters and/or security algorithms Communicating with the second communication node; or

The communication module 702 is specifically configured to: when receiving the message sent by the first communication node or the second communication node, start to communicate with the first communication node by using the first set of parameters and/or security algorithms, and use the second set The parameter and/or security algorithm communicates with the second communication node; or

The communication module 702 is specifically configured to, when accessing the second communication node, start to communicate with the first communication node by using the first set of parameters and/or security algorithms, and use the second set of parameters and/or security algorithms. Communicating with the second communication node; or

The communication module 702 is specifically configured to start to communicate with the first communication node by using the first set of parameters and/or security algorithms when starting communication with the second communication node, using the second set of parameters and/or security algorithms Communicating with the second communication node; or

The communication module 702 is specifically configured to: when receiving the first data packet sent by the second communications node, start to use the first set of parameters and/or security algorithm to communicate with the first communications node, using the first Two sets of parameters and/or security algorithms communicate with the second communication node; or

The communication module 702 is specifically configured to start to communicate with the first communication node by using the first set of parameters and/or security algorithms within a preset time after or after receiving the first set of parameters and/or security algorithms. The third communication node starts to communicate with the second communication node by using the second set of parameters and/or security algorithm within a preset time after or after receiving the second set of parameters and/or security algorithms. .

The foregoing modules may perform the method embodiment shown in FIG. 1, and details are not described herein again.

In this embodiment, the third communications node may receive the first set of parameters and/or security algorithms and the second set of parameters and/or security algorithms sent by the first communications node, or receive the first sent by the first communications node. a set of parameters and/or security algorithms and a second set of parameters and/or security algorithms sent by the second communication node, the third communication node then communicating with the first communication node using the first set of parameters and/or security algorithms, using the The second set of parameters and/or security algorithms communicate with the second communication node, thereby enabling the MME to update the third communication node regardless of whether during the handover of the control plane and the user plane of the third communication node or during the handover process When using the parameters and/or security algorithms, you can make the third The base station that communicates with the communication node and the third communication node both acquire updated parameters and/or security algorithms in time, avoiding that the station communicating with the third communication node and the third communication node cannot process the information in the communication process.

FIG. 8 is a schematic structural diagram of Embodiment 1 of a mobility management entity according to the present invention. As shown in FIG. 8, the mobility management entity includes: a receiving module 801 and a sending module 802, where:

The receiving module 801 is configured to receive a request message sent by the first communications node.

The sending module 802 is configured to send, according to the request message, a first set of parameters and/or a security algorithm and at least one set of second set of parameters and/or security algorithms to the first communications node; or, according to the request message Transmitting, by the first communications node, the first set of parameters and/or security algorithms, and transmitting, to the at least one second communications node, a corresponding second set of parameters and/or security algorithms;

It should be noted that the security algorithm includes at least one of an encryption algorithm, a header compression algorithm, and an integrity protection algorithm; the parameters include a next hop connection counter NCC, a next hop NH, and a cell wireless network temporary identifier C. - RNTL at least one of the lengths of the packet data convergence layer protocol PDCP sequence number.

Each of the above modules may perform the method embodiment shown in FIG. 2, and details are not described herein again.

FIG. 9 is a schematic structural diagram of a second embodiment of a communication node according to the present invention. The communication node is the first communication node. As shown in FIG. 9, the communication node includes: a sending module 901 and a receiving module 902. among them:

The sending module 901 sends a request message to the mobility management entity MME, so that the MME sends a first set of parameters and/or security algorithms and at least one set of second parameters and/or to the first communication node according to the request message. Or a security algorithm, or transmitting the first set of parameters and/or security algorithms to the first communication node, and transmitting the second set of parameters and/or security algorithms to at least one second communication node;

The receiving module 902 is configured to receive a first set of parameters and/or a security algorithm and a second set of parameters and/or security algorithms sent by the MME; or receive a first set of parameters and/or security algorithms sent by the MME.

Specifically, the first communication node is a station that performs control plane signaling communication with the third communication node, and the second communication node is a site that performs user plane data communication with the third communication node; or The cell in which the first communication node is located is the primary cell of the third communication node, and the cell in which the second communication node is located is the secondary cell of the third communication node.

FIG. 10 is a schematic structural diagram of Embodiment 3 of a communication node according to the present invention. As shown in FIG. 10, on the basis of FIG. 9, the communication node further includes: a communication module 903, where:

The sending module 901 performs different tasks in different scenarios:

1) The sending module 901 is further configured to: after receiving, by the receiving module, the first set of parameters and the security algorithm sent by the MME, and the at least one second set of parameters and/or security algorithms, to the at least one second communications node Transmitting the corresponding second set of parameters and/or security algorithms, and transmitting the first set of parameters and/or security algorithms and the at least one set of second sets of parameters and/or security algorithms to the third communication node.

2) The sending module 901 is further configured to: after the receiving module receives the first set of parameters and/or security algorithms sent by the MME, send the first set of parameters and/or security algorithms to the third communications node.

Further, the sending module 901 is configured to send a message to the second communications node or the third communications node, so that the second communications node starts using the second set of parameters and/or when receiving the message. The security algorithm communicates with the third communication node to cause the third communication node to begin processing the information communicated with the first communication node using the first set of parameters and/or security algorithms upon receiving the message, using the A second set of parameters and/or security algorithms communicate with the second communication node.

In addition, the communication module 903 is configured to communicate with the third communication node according to the first set of parameters and/or security algorithms. The security algorithm includes at least one of an encryption algorithm, a header compression algorithm, and an integrity protection algorithm; the parameters include a next hop connection counter NCC, a next hop NH, and a small The area wireless network temporarily identifies at least one of the lengths of the C-RNTL packet data convergence layer protocol PDCP sequence number.

The communication module 903 is specifically configured to perform at least one of the following processes:

1) performing encryption and decryption processing on the information communicated with the third communication node according to the encryption algorithm; 2) performing header compression or decompression compression processing on the information communicated with the third communication node according to the header compression algorithm; And performing integrity protection or de-integrity protection processing on the information communicated with the third communication node according to the integrity protection algorithm.

The foregoing modules may be used to implement the method embodiment shown in FIG. 3, and details are not described herein again.

FIG. 11 is a schematic structural diagram of Embodiment 4 of a communication node according to the present invention. The communication node is the second communication node. As shown in FIG. 11, the communication node includes: a receiving module 110 and a communication module 120, where:

The receiving module 110 is configured to receive a parameter and/or a security algorithm sent by the first communications node or the MME, where the parameter and/or the security algorithm is the second set of parameters and/or the security algorithm.

The communication module 120 is configured to communicate with the third communication node according to the foregoing parameters and/or security algorithms; specifically, it may be at least one of the following processes:

1) performing encryption and decryption processing on the information communicated by the third communication node according to the above encryption algorithm;

2) performing header compression or decompression processing on the information communicated with the third communication node according to the header compression algorithm;

3) Perform integrity protection or solution integrity protection on the information communicated with the third communication node according to the integrity protection algorithm described above.

The communication module 120 is specifically configured to: when the second communication node receives the parameter and/or the security algorithm, start to communicate with the third communication node by using the parameter and/or the security algorithm; or the second communication node is receiving After the above parameters and/or security algorithms are not used, after receiving the message sent by the first communication node or the third communication node, the parameter and/or the security algorithm are used to communicate with the third communication node; or ,

The second communication node begins to communicate with the third communication node using the above parameters and/or security algorithm when initially communicating with the third communication node; or

When the third communication node accesses the second communication node, the second communication node starts to communicate with the third communication node using the above parameters and/or security algorithms; or When the third communication node is uplink-synchronized with the second communication node, starting to communicate with the third communication node by using the foregoing parameter and/or security algorithm; or

Receiving, by the second communication node, the first data packet sent by the first communication node, starting to communicate with the third communication node by using the parameter and/or the security algorithm; or

The second communication node may also start to communicate with the third communication node by using the parameter and/or the security algorithm within a preset time after receiving the parameter and/or the security algorithm; or Transmitting, by the third communication node, an indication message for instructing to start using the foregoing parameter and/or the security algorithm, and starting to communicate with the third communication node by using the foregoing parameter and/or security algorithm when transmitting the indication message; or

If the second communication node does not preset and does not receive any indication message after receiving the above parameters and/or security algorithm, the second communication node needs to decrypt or decompress the information sent by the third communication node or When the integrity protection process is processed, the original parameters and/or security algorithms are used first. If the decryption or decompression or de-integrity protection fails, the above parameters and/or security algorithms are used to communicate with the third communication node.

Another embodiment of the present invention further provides a communication node, where the communication node is the foregoing third communication node, including: a receiver and a processor, where:

a receiver, configured to receive a first set of parameters and/or a security algorithm sent by the first communication node, and at least a second set of parameters and/or security algorithms; or receive a first set of parameters sent by the first communication node And/or a security algorithm and a second set of parameters and/or security algorithms sent by the at least one second communication node; And a processor, configured to communicate with the first communication node using the first set of parameters and/or security algorithms, and to communicate with the second communication node using the second set of parameters and/or security algorithms.

The security algorithm includes at least one of an encryption algorithm, a header compression algorithm, and an integrity protection algorithm; the parameters include a next hop connection counter NCC, a next hop NH, a cell radio network temporary identifier C-RNTL packet data aggregation. At least one of the lengths of the layer protocol PDCP sequence number.

The processor is specifically configured to perform at least one of the following processes:

The processor is further configured to, when receiving the first set of parameters and/or security algorithms, start to communicate with the first communication node by using the first set of parameters and/or security algorithms, where the third Upon receiving the second set of parameters and/or security algorithms, the communication node begins to communicate with the second communication node using the second set of parameters and/or security algorithms; or

When transmitting information to the second communication node, starting to communicate with the first communication node using the first set of parameters and/or security algorithms, and communicating with the second communication node using the second set of parameters and/or security algorithms Or,

Upon receiving a message sent by the first communication node or the second communication node, starting to communicate with the first communication node using the first set of parameters and/or security algorithms, using the second set of parameters and/or security algorithms and The second communication node performs communication; or

When accessing the second communication node, starting to communicate with the first communication node using the first set of parameters and/or security algorithms, using the second set of parameters and/or security algorithms and the second communication node Line communication; or,

Initially communicating with the first communication node using the first set of parameters and/or security algorithms when communicating with the second communication node, communicating with the second communication node using the second set of parameters and/or security algorithms Or,

Upon receiving the first data packet sent by the second communication node, starting to communicate with the first communication node using the first set of parameters and/or security algorithms, using the second set of parameters and/or security The algorithm communicates with the second communication node; or

Equivalently communicating with the first communication node using the first set of parameters and/or security algorithms after a preset time or after receiving the first set of parameters and/or security algorithms, the third communication node The second set of parameters and/or security algorithms are used to communicate with the second communication node within a preset time after or after receiving the second set of parameters and/or security algorithms.

Another embodiment of the present invention further provides a mobility management entity, including: a receiver and a transmitter, where:

a receiver, configured to receive a request message sent by the first communications node;

a transmitter, configured to send, according to the request message, a first set of parameters and/or a security algorithm and at least one set of second set of parameters and/or security algorithms to the first communication node; or, according to the request message Transmitting, by the first communication node, the first set of parameters and/or security algorithms, and sending a corresponding second set of parameters and/or security algorithms to the at least one second communication node;

The security algorithm includes at least one of an encryption algorithm, a header compression algorithm, and an integrity protection algorithm; the parameters include a next hop connection counter NCC, a next hop NH, a cell radio network temporary identifier C-RNTI, and packet data. At least one of the lengths of the convergence layer protocol PDCP sequence number.

Another embodiment of the present invention further provides a communication node, where the communication node is the first communication node, and the communication node includes: a transmitter, a receiver, and a processor, where: a transmitter, configured to send a request message to the mobility management entity MME, to enable the MME to send a first set of parameters and/or a security algorithm and at least one set of second parameters to the first communication node according to the request message And/or a security algorithm, or transmitting the first set of parameters and/or security algorithms to the first communication node, and transmitting the second set of parameters and/or security algorithms to at least one second communication node;

a receiver, configured to receive a first set of parameters and/or a security algorithm and a second set of parameters and/or security algorithms sent by the MME; or, receive a first set of parameters and/or security algorithms sent by the MME; The first communication node is a station that performs control plane signaling communication with the third communication node, and the second communication node is a site that performs user plane data communication with the third communication node; or

Further, in the first case, after the receiver receives the first set of parameters and the security algorithm sent by the MME and at least one set of the second set of parameters and/or security algorithms, the transmitter sends the at least one of the second communications The node transmits the corresponding second set of parameters and/or security algorithms and transmits the first set of parameters and/or security algorithms and the at least one set of second sets of parameters and/or security algorithms to the third communication node.

In the second case, after the receiver receives the first set of parameters and/or security algorithms sent by the MME, the transmitter sends the first set of parameters and/or security algorithms to the third communication node.

In addition, the receiver receives the first set of parameters and/or security algorithms sent by the MME and at least one second set of parameters and/or security algorithms, or the first communication node receives the first sent by the MME. After a set of parameters and/or security algorithms, the transmitter is further configured to: send a message to the second communication node or the third communication node, to enable the second communication node to start using the message when receiving the message A second set of parameters and/or security algorithms are in communication with the third communication node to cause the third communication node to begin communicating with the first communication node using the first set of parameters and/or security algorithms upon receiving the message The information is processed and communicated with the second communication node using the second set of parameters and/or security algorithms.

Receiving, by the receiver, a first set of parameters and/or a security algorithm sent by the MME, and at least one set of second set of parameters and/or security algorithms, or the first communication node receives the first set of parameters sent by the MME and After the security algorithm, the processor is configured to use the first set of parameters and/or security algorithms and The three communication nodes communicate.

The processor is further configured to perform at least one of the following processes: 1) performing encryption and decryption processing on information communicated with the third communication node according to the encryption algorithm; 2) performing a header compression algorithm according to the header compression algorithm The information communicated by the three communication nodes is subjected to header compression or decompression compression processing; 3) performing integrity protection or de-integrity protection processing on the information communicated with the third communication node according to the integrity protection algorithm.

One of ordinary skill in the art will appreciate that all or a portion of the steps to implement the various method embodiments described above can be accomplished by hardware associated with the program instructions. The aforementioned program can be stored in a computer readable storage medium. The program, when executed, performs the steps including the foregoing method embodiments; and the foregoing storage medium includes: a medium that can store program codes, such as a ROM, a RAM, a magnetic disk, or an optical disk.

It should be noted that the above embodiments are merely illustrative of the technical solutions of the present invention, and are not intended to be limiting; although the present invention has been described in detail with reference to the foregoing embodiments, those of ordinary skill in the art The technical solutions described in the foregoing embodiments may be modified, or some or all of the technical features may be equivalently replaced; and the modifications or substitutions do not deviate from the technical solutions of the embodiments of the present invention. range.

Claims

Claim

A cell optimization method, the method comprising:

The third communication node receives the first set of parameters and/or security algorithms sent by the first communication node and at least one second set of parameters and/or security algorithms; or

Receiving, by the third communication node, a first set of parameters and/or a security algorithm sent by the first communication node and a second set of parameters and/or security algorithms sent by the at least one second communication node;

The first communication node is a site that performs control plane signaling communication with the third communication node, and the second communication node is a site that performs user plane data communication with the third communication node; or

The cell where the first communication node is located is the primary cell of the third communication node, and the cell where the second communication node is located is the secondary cell of the third communication node.

2. The method according to claim 1, wherein the security algorithm comprises at least one of an encryption algorithm, a header compression algorithm, and an integrity protection algorithm;

The parameters include at least one of a next hop connection counter NCC, a next hop NH, a cell radio network temporary identifier C-RNTK packet data convergence layer protocol PDCP sequence number.

3. The method according to claim 2, wherein the third communication node communicates with the first communication node using the first set of parameters and/or security algorithms, using the second set of parameters and/or Or the security algorithm communicates with the second communication node, including at least one of the following:

4. The method according to claim 1, wherein the third communication node communicates with the first communication node using the first set of parameters and/or security algorithms, using the second set of parameters and/or Or the security algorithm communicates with the second communication node, including:

The third communication node starts to use the first set of parameters and/or security algorithms when receiving the first set of parameters and/or security algorithms The first set of parameters and/or security algorithms communicate with the first communication node, and the third communication node begins to use the second set of parameters and/or upon receiving the second set of parameters and/or security algorithms Or the security algorithm communicates with the second communication node; or

The third communication node, when transmitting information to the second communication node, starts communicating with the first communication node using the first set of parameters and/or security algorithms, using the second set of parameters and/or security algorithms and The second communication node performs communication; or

5. A cell optimization method, characterized in that:

Sending, by the MME, a first set of parameters and/or security algorithms and at least one set of second sets of parameters and/or security algorithms to the first communication node according to the request message; or

The MME sends the first set of parameters and/or security algorithms to the first communication node according to the request message, and sends a corresponding second set of parameters and/or security algorithms to the at least one second communication node; The first set of parameters and/or security algorithms are used by the first communication node to communicate with the third communication node, and the second set of parameters and/or security algorithms are used by the second communication node and the third communication node Communication

The method according to claim 5, wherein the security algorithm comprises at least one of an encryption algorithm, a header compression algorithm, and an integrity protection algorithm;

7. A cell optimization method, comprising:

The method according to claim 7, wherein the first communication node receives the first set of parameters and the security algorithm sent by the MME and at least one second set of parameters and/or security algorithms, Includes:

The method according to claim 7, wherein after the first communication node receives the first set of parameters and/or security algorithms sent by the MME, the method further includes:

The first communication node transmits the first set of parameters and/or security algorithms to a third communication node.

The method according to claim 7, wherein the first communication node receives the first set of parameters and/or security algorithms sent by the MME and at least one set of second sets of parameters and/or security algorithms. After the first communication node receives the first set of parameters and/or security algorithms sent by the MME, the method further includes:

The method according to claim 7, wherein the first communication node receives a first set of parameters and/or security algorithms and at least one set of second parameters and/or security algorithms sent by the MME, Or after the first communication node receives the first set of parameters and/or security algorithms sent by the MME, the method further includes:

The method according to any one of claims 7 to 11, wherein the security algorithm comprises at least one of an encryption algorithm, a header compression algorithm and an integrity protection algorithm;

The method according to claim 12, wherein the first communication node communicates with the third communication node according to the first set of parameters and/or security algorithms, and includes at least one of the following: The first communication node performs encryption and decryption processing on the information that is communicated with the third communication node according to the encryption algorithm;

And the first communication node performs integrity protection or de-integrity protection processing on the information communicated with the third communication node according to the integrity protection algorithm.

A communication node, wherein the communication node is a third communication node, comprising: a receiving module, configured to receive a first set of parameters and/or a security algorithm sent by the first communication node, and at least one set of second Set of parameters and / or security algorithms; or, Receiving a first set of parameters and/or a security algorithm sent by the first communication node and a second set of parameters and/or security algorithms sent by the at least one second communication node;

The communication node according to claim 14, wherein the security algorithm comprises at least one of an encryption algorithm, a header compression algorithm, and an integrity protection algorithm;

The communication node according to claim 15, wherein the communication module is specifically used for at least one of the following:

Encrypting and decrypting the information communicated with the first communication node and/or the second communication node according to the encryption algorithm;

The communication node according to claim 14, wherein the communication module is specifically configured to start using the first set of parameters and/or when receiving the first set of parameters and/or security algorithms. Or the security algorithm communicates with the first communication node, the third communication node begins to use the second set of parameters and/or security algorithm and the second communication when receiving the second set of parameters and/or security algorithms The node communicates; or,

The communication module is specifically configured to, when transmitting information to the second communication node, start to communicate with the first communication node by using the first set of parameters and/or security algorithms, and use the second set of parameters and/or security The algorithm communicates with the second communication node; or The communication module is specifically configured to: when receiving a message sent by the first communication node or the second communication node, start to use the first set of parameters and/or a security algorithm to communicate with the first communication node, and use the second a set of parameters and/or security algorithms to communicate with the second communication node; or

18. A mobility management entity, comprising:

19. The mobility management entity of claim 18, wherein the security algorithm package At least one of an encryption algorithm, a header compression algorithm, and an integrity protection algorithm;

A communication node, wherein the communication node is a first communication node, and includes: a sending module, configured to send a request message to the mobility management entity MME, so that the MME sends the request message according to the request message. Transmitting, by the first communication node, a first set of parameters and/or security algorithms and at least one set of second sets of parameters and/or security algorithms, or transmitting the first set of parameters and/or security algorithms to the first communication node, And sending the second set of parameters and/or security algorithms to the at least one second communication node; the receiving module, configured to receive the first set of parameters and/or security algorithms and the second set of parameters and/or security sent by the MME Algorithm; or,

Receiving a first set of parameters and/or security algorithms sent by the MME;

The communication node according to claim 20, wherein the sending module is further configured to receive, by the receiving module, a first set of parameters and a security algorithm sent by the MME, and at least one set of second parameters and And/or a security algorithm, transmitting the corresponding second set of parameters and/or security algorithms to at least one of the second communication nodes, and transmitting the first set of parameters and/or security algorithms and protocols to the third communication node Describe at least one set of second set of parameters and/or security algorithms.

The communication node according to claim 20, wherein the sending module is further configured to: after receiving, by the receiving module, the first set of parameters and/or security algorithms sent by the MME, to the third communication node Sending the first set of parameters and/or security algorithms.

The communication node according to claim 20, wherein the sending module is further configured to send a message to the second communication node or the third communication node, so that the second communication node receives the message The message begins to communicate with the third communication node using the second set of parameters and/or security algorithms to cause the third communication node to begin using the first set of parameters and/or security algorithms upon receiving the message. Information communicated with the first communication node is processed, and the second set of parameters and/or security algorithms are used to communicate with the second communication node.

The communication node according to claim 20, further comprising: And a communication module, configured to communicate with the third communication node according to the first set of parameters and/or security algorithms.

The communication node according to any one of claims 20 to 24, wherein the security algorithm comprises at least one of an encryption algorithm, a header compression algorithm, and an integrity protection algorithm;

The communication node according to claim 25, wherein the communication module is specifically used for at least one of the following:

Performing encryption and decryption processing on the information communicated with the third communication node according to the encryption algorithm; performing header compression or header compression processing on the information communicated with the third communication node according to the header compression algorithm;