WO2018000867A1

WO2018000867A1 - Method and apparatus for configuring key and determining security policy

Info

Publication number: WO2018000867A1
Application number: PCT/CN2017/078312
Authority: WO
Inventors: 张博; 吴�荣; 甘露
Original assignee: 华为技术有限公司
Priority date: 2016-07-01
Filing date: 2017-03-27
Publication date: 2018-01-04
Also published as: WO2018000936A1

Abstract

Provided in the present application is a method for configuring a key; a session management network element receives a terminal-to-terminal communication request and acquires a security policy, the security policy being determined on the basis of at least one of a user security requirement of a user device preset in a user server, a service security requirement from the user device, a security capability requirement supported by the user device, a security capability requirement from an operator network, and a security requirement of the other device in the terminal-to-terminal communication. The session management network element acquires a protection key for protecting the terminal-to-terminal communication, the protection key being determined on the basis of the security policy and a shared key of the user device and the operator network. The session management network element sends the security policy and/or the protection key to the two devices in the terminal-to-terminal communication. Hence, the session management network element is capable of configuring a session protection key for the two devices in the terminal-to-terminal communication, and thereby improve the security of the terminal-to-terminal communication.

Description

Key configuration and security policy determination method and device

Technical field

The present application relates to the field of communications, and in particular, to a key configuration and a security policy determining method and apparatus.

Background technique

In a future (eg, 5th generation) mobile communication architecture, the session management network element establishes a session between the user equipment and the gateway (or DN server, or another user equipment) according to the service requirements of the user equipment.

The current session security algorithms are not applicable to the future mobile communication architecture. Therefore, how to establish a security mechanism based on the future mobile communication architecture has become an urgent problem to be solved.

Summary of the invention

The present application provides a key configuration and security policy determination method and apparatus, and aims to solve the problem of how to establish a security mechanism based on a future mobile communication architecture.

A first aspect of the present application provides a key configuration method including the steps of: a session management network element receiving an end-to-end communication request, the end-to-end communication request including one end of the end-to-end communication The identity of the user device. The session management network element obtains a security policy, and the security policy is based on user security requirements of the user equipment preset in the home subscriber server, service security requirements from the user equipment, security capability requirements supported by the user equipment, and At least one determination of the security capability requirements of the carrier network and the security requirements of the other end device of the end-to-end communication. The session management network element obtains a protection key, and the protection key is used to protect the end-to-end communication, where the protection key is based on the security policy and the user equipment and the operator network. The shared key is determined. The session management network element sends the security policy and/or the protection key to the user equipment. The session management network element sends the security policy and/or the protection key to the other end device of the end-to-end communication. It can be seen from the above process that the session management network element can configure the session protection key for the devices at both ends of the end-to-end communication, thereby improving the security of the end-to-end communication. Moreover, it has higher security than the existing method of segment encryption.

A second aspect of the present application discloses a session management network element comprising a communication component and a processor. Specifically, the communication component is configured to receive a request for end-to-end communication, the request for the end-to-end communication including an identification of the user equipment as one end of the end-to-end communication. The processor is configured to obtain a security policy, where the security policy is based on user security requirements of the user equipment preset in the home subscriber server, service security requirements from the user equipment, security capability requirements supported by the user equipment, and operations. At least one determination of a security capability requirement of the quotient network and a security requirement of the other end device of the end-to-end communication, and obtaining a protection key for protecting the end-to-end communication, The protection key is determined according to the security policy and a shared key between the user equipment and the operator network. The communication component is further configured to send the security policy and/or the protection key to the user equipment, and send the security policy and/or the protection secret to another end device of the end-to-end communication key.

In an implementation manner, the request for the end-to-end communication further includes: at least one of a network identifier and a service parameter. At least one of the network identification and the service parameters can be used for the generation of subsequent keys.

In an implementation manner, the acquiring the protection key includes: according to the security policy, the shared key, and The parameter derivation obtains the protection key, and the parameter includes at least one of an identifier of the user equipment, the network identifier, and the service parameter.

In an implementation manner, before the session management network element obtains the protection key according to the security policy, the shared key, and the parameter, the method further includes: the session management network element to the operator The policy control network element sends a security policy request, where the security policy request includes at least one of an identifier of the user equipment, the network identifier, and a service parameter, and the identifier of the user equipment, the network identifier, and the service parameter. At least one item is used by the policy control network element to identify the security policy. The session management network element receives the security policy sent by the policy control network element of the operator.

In an implementation manner, the security policy request further includes: a security requirement set acquired by the session management network element in advance, where the security requirement set includes a user of the user equipment preset in the home user server At least one of a security requirement, a service security requirement from the user equipment, a security capability requirement supported by the user equipment, and a security requirement of the other end equipment of the end-to-end communication.

In an implementation manner, before the session management network element obtains the protection key according to the security policy, the shared key, and the parameter, the method further includes: obtaining a preset preset in the home user server User security requirements of the user equipment at one end of the end-to-end communication, service security requirements from the user equipment, security capability requirements supported by the user equipment, security capability requirements from the operator network, and the end-to-end communication At least one of the security requirements of the other end device; according to the obtained user security requirement of the user equipment at one end of the end-to-end communication preset in the home subscriber server, service security requirements from the user equipment, The security policy is determined by at least one of a security capability requirement supported by the user equipment, a security capability requirement from an operator network, and a security requirement of the other end device of the end-to-end communication.

In an implementation manner, the specific implementation manner of obtaining the user security requirement of the user equipment at the end of the end-to-end communication preset in the home subscriber server is: after receiving the request for the end-to-end communication, Sending a security requirement request to the network element of the carrier network to obtain a user security requirement of the user equipment preset in the home subscriber server, or acquiring the request from the end-to-end communication request A user security requirement of the user equipment preset in the user server.

In an implementation manner, the specific implementation manner of obtaining the service security requirement from the user equipment and the security capability requirement supported by the user equipment is: acquiring, from the request for the end-to-end communication, the The service security requirements of the user equipment and/or the security capability requirements supported by the user equipment.

In an implementation manner, the specific implementation manner of obtaining the security capability requirement from the carrier network is: sending a security requirement request to the policy control network element of the carrier network, where the security requirement request includes the user equipment And at least one of the identifier of the network. Receiving, by the policy control network element of the operator network, the security capability requirement from the operator network, where the identifier of the user equipment and the network identifier are used by the policy control network element identifier Security capability requirements from the carrier network.

In an implementation manner, the specific implementation manner of obtaining the security requirement of the other end device of the end-to-end communication is: sending a security requirement request to the policy control network element of the operator network. Receiving a policy of the operator network to control a security requirement of the other end device of the end-to-end communication sent by the network element. Or sending a security requirement request to the other end device of the end-to-end communication, and receiving a security requirement of the other end device of the end-to-end communication sent by the other end device of the end-to-end communication. The security requirement request includes the identifier of the user equipment and At least one of the service parameters, the identifier of the user equipment and the at least one of the service parameters are used by the other end device for the end-to-end communication to find the security requirement of the other end device of the end-to-end communication .

In an implementation manner, the user security requirement of the user equipment at the end of the end-to-end communication, the service security requirement from the user equipment, and the security capability supported by the user equipment, which are preset in the home subscriber server, are required. The specific implementation manner of the security policy is determined according to at least one of a demand, a security capability requirement of the carrier network, and a security requirement of the other end device of the end-to-end communication: according to the preset in the home subscriber server User security requirements of the user equipment at the end of the end-to-end communication, service security requirements from the user equipment, security capability requirements supported by the user equipment, security capability requirements from the operator network, and the end-to-end One of the security requirements of the other end of the communication device determines the security policy. Or, according to the user security requirement of the user equipment at the end of the end-to-end communication preset in the home subscriber server, the service security requirement from the user equipment, the security capability requirement supported by the user equipment, and the operation The security capability requirements of the quotient network and the security requirements of the other end device of the end-to-end communication, and the security policy is determined according to preset rules.

In an implementation manner, the user security requirement of the user equipment at one end of the end-to-end communication preset according to the home subscriber server, the service security requirement from the user equipment, and the security supported by the user equipment At least one of the capability requirement, the security capability requirement from the carrier network, and the security requirement of the other end device of the end-to-end communication, before determining the security policy, the method further includes: the session management network element according to the user The configuration information or the node policy of the device, or the configuration information or the node policy of the user equipment is obtained from the local storage, or according to the security requirement of the service, the security requirement of the server side, the service type, the security capability of the user equipment, or the slicing policy. Determining that the endpoint of the security protection is at the user plane node UPF; or the session management network element receives the node configuration parameter from the policy control network element of the operator, the node configuration parameter indicating the endpoint of the security protection In the user plane node UPF.

In one implementation, the UPF is a UPF of the visited public land mobile communication network VPLMN, the security capability requirement from the operator network is a security requirement of the gateway of the VPLMN; the UPF is a home public land mobile The UPF of the communication network HPLMN, the security capability requirement from the carrier network is the security requirement of the gateway of the HPLMN.

In an implementation manner, the content of the security requirement includes: an algorithm for security protection, and the algorithm for the security protection includes an encryption algorithm and/or an integrity protection algorithm.

In one implementation, the content of the security requirement further includes: a length of a key and/or an update time of a key.

In one implementation, the format of the security requirement includes: a plurality of 8-bit bytes, the plurality of 8-bit bytes including any one of the following: an 8-bit byte for indicating an identifier of the security requirement, for An 8-bit byte representing the length of the content of the security requirement, an 8-bit byte indicating whether the security requirement requires an encryption algorithm, an 8-bit byte indicating whether the security requirement requires an integrity protection algorithm, and an encryption algorithm for indicating 8-bit byte of length, 8-bit byte used to indicate the length of the integrity protection algorithm, 8-bit byte used to indicate whether the key needs to be updated, 8-bit byte used to represent a specific encryption algorithm, An 8-bit byte used to represent a specific integrity protection algorithm.

In an implementation manner, before the session management network element obtains the protection key according to the security policy, the shared key, and the parameter, the method further includes: receiving, by the key management center of the carrier network, sending The shared key. Alternatively, the shared key is obtained locally.

In an implementation manner, acquiring the protection key includes: sending a key to the operator's key management center. The request, the key request includes at least one of an identifier of the user equipment, the network identifier, the service parameter, and a security policy, an identifier of the user equipment, the network identifier, and the service parameter. At least one item is used by the key management center to determine the shared key. Receiving the protection key sent by the key management center.

In an implementation manner, the method further includes: the session management network element sends the network identifier to one end of the end-to-end communication; and/or, the session management network element communicates to the end-to-end The other end device sends the network identifier.

A third aspect of the present application provides a key configuration method, including the following steps: a key management center receives a key request, and determines a sharing between the user equipment and an operator network according to the identifier of the user equipment. a key, and a protection key for protecting the end-to-end communication in accordance with the security policy, the shared key, and the parameter. The key management center sends the protection key to the user equipment, and sends the protection key to the other end device of the end-to-end communication. The key request includes a security policy and a parameter, and the parameter includes at least one of an identifier, a network identifier, and a service parameter of the user equipment that is one end of the end-to-end communication. The security policy is based on user security requirements of the user equipment preset in the home subscriber server, service security requirements from the user equipment, security capability requirements supported by the user equipment, security capability requirements from an operator network, and At least one determination of the security requirements of the other end device of the end-to-end communication.

A fourth aspect of the present application provides a key management center including a communication component and a processor. The communication component is configured to receive a key request, and the processor is configured to determine a shared key between the user equipment and the operator network according to the identifier of the user equipment, and according to the security policy, The shared key and the parameters generate a protection key. The communication component is further configured to send the protection key to the user equipment, and send the protection key to the other end device of the end-to-end communication. The parameter includes at least one of an identifier, a network identifier, and a service parameter of the user equipment as one end of the end-to-end communication; the security policy is based on user security requirements of the user equipment preset in the home subscriber server. At least one determination of a service security requirement from the user equipment, a security capability requirement supported by the user equipment, a security capability requirement from an operator network, and a security requirement of the other end device of the end-to-end communication.

In an implementation manner, after the key management center generates the protection key according to the security policy, the shared key, and the parameter, the method further includes: the key management center to the operator The session management network element sends the protection key.

In an implementation manner, the shared key is a shared key between the user equipment and the operator network obtained after the user equipment and the operator network are authenticated in both directions.

A fifth aspect of the present application provides a key configuration method, including: a user equipment sends a request, where the request includes an identifier of the user equipment. The user equipment receives a response, and the response carries a security policy, where the security policy is based on user security requirements of the user equipment preset in the home subscriber server, service security requirements from the user equipment, and the user equipment. At least one determination of the supported security capability requirements, the security capability requirements from the carrier network, and the security requirements of the other end device of the end-to-end communication. The user equipment acquires a protection key, where the protection key is used to protect the end-to-end communication, where the protection key is based on the security policy and between the user equipment and the carrier network. Shared key ok.

A sixth aspect of the present application provides a user equipment, including a communication component and a processor. The communication component is configured to send a request, where the request includes an identifier of the user equipment. And receiving a response, the response carrying security Strategy. The security policy is based on user security requirements of the user equipment preset in the home subscriber server, service security requirements from the user equipment, security capability requirements supported by the user equipment, security capability requirements from an operator network, and At least one determination of the security requirements of the other end device of the end-to-end communication. The processor is configured to obtain a protection key, where the protection key is used to protect the end-to-end communication, where the protection key is based on the security policy and sharing between the user equipment and the operator network Key determination.

In an implementation manner, the specific implementation manner in which the user equipment sends a request is: the user equipment sends a service parameter and a security requirement set, where the security requirement set includes a service security requirement of the user equipment, and/or the Security capability requirements supported by user devices.

In one implementation, the request further includes:

The session ID, bearer ID, flow flow ID or slice ID generated by the user equipment.

In an implementation manner, the obtaining the protection key includes: obtaining the protection key according to the security policy, the shared key, and a parameter derivation, where the parameter includes an identifier of the user equipment, the network identifier And at least one of the business parameters.

In an implementation manner, before the obtaining the protection key according to the security policy, the shared key, and the parameter deduction, the method further includes receiving the shared key sent by the key management center of the operator. . Alternatively, the shared key is obtained locally. Or obtaining a shared key between the user equipment and the operator network after the user equipment and the operator network are authenticated in both directions.

In an implementation manner, before the obtaining the protection key according to the security policy, the shared key, and the parameter deduction, the method further includes: receiving the network sent by the session management network element of the carrier network Logo.

In an implementation manner, the acquiring the protection key includes: the user equipment receiving the protection key sent by a key management center of the carrier network or a session management center.

A seventh aspect of the present application provides a security policy determining method, including: an operator's policy control network element receives a security policy request, where the security policy request includes user security of the user equipment preset in a home user server. At least one of a demand, a service security requirement from the user equipment, and a security capability requirement supported by the user equipment, the parameter including an identification, a network identifier, and a user equipment as one end of the end-to-end communication At least one of the business parameters. The policy control network element generates and sends a security policy according to the security requirement set, where the security requirement set includes at least a user security requirement of the user equipment preset in the home subscriber server, and service security from the user equipment. At least one of a demand and a security capability requirement supported by the user equipment.

An eighth aspect of the present application provides a policy control network element, including: a communication component and a processor. The communication component is configured to receive a security policy request, where the security policy request includes a user security requirement of the user equipment preset in the home subscriber server, a service security requirement from the user equipment, and a security capability supported by the user equipment. At least one of the requirements and the parameter, the parameter comprising at least one of an identification, a network identification, and a service parameter of the user equipment as one end of the end-to-end communication. The processor is configured to generate a security policy according to the security requirement set, where the security requirement set includes at least a user security requirement of the user equipment preset in the home subscriber server, a service security requirement from the user equipment, and the user At least one of the security capability requirements supported by the device. The communication component is further configured to send the security policy.

In an implementation manner, the security requirement set further includes: at least one of a security capability requirement from the carrier network and a security requirement of the other end device of the end-to-end communication.

In an implementation manner, obtaining the security requirement of the operator network includes: acquiring the pre-stored security requirement of the operator network from the local after receiving the security policy request.

In one implementation, the security requirement of the other end device that obtains the end-to-end communication includes: receiving a security requirement of the other end device of the end-to-end communication sent by the session management network element. Or sending a security requirement request to the other end device of the end-to-end communication, and receiving a security requirement sent by the other end device of the end-to-end communication. The security requirement request includes at least one of an identifier, a network identifier, and a service parameter of the user equipment, where at least one of an identifier, a network identifier, and a service parameter of the user equipment is used for the end-to-end communication. The other end device marks the security requirements of the other end device of the end-to-end communication.

In an implementation manner, the generating the security policy according to the security requirement set includes: according to the user security requirement of the user equipment at one end of the end-to-end communication preset in the home subscriber server, the service from the user equipment A security policy is determined by one of a security requirement, a security capability requirement supported by the user equipment, a security capability requirement from an operator network, and a security requirement of the other end device of the end-to-end communication. Or, according to the user security requirement of the user equipment at the end of the end-to-end communication preset in the home subscriber server, the service security requirement from the user equipment, the security capability requirement supported by the user equipment, and the operation The security capability requirements of the quotient network and the security requirements of the other end device of the end-to-end communication, and the security policy is determined according to preset rules.

In an implementation manner, before the generating the security policy according to the security requirement set, the method further includes: the policy control network element of the operator is obtained according to the configuration information or the node policy of the user equipment, or obtained from the local storage. The configuration information of the user equipment or the node policy, or the security protection end point is determined by the user plane node UPF according to the security requirements of the service, the server side security requirement, the service type, the security capability of the user equipment, or the slicing policy.

In an implementation manner, before the generating the security policy according to the security requirement set, the method further includes: the policy control network element of the operator determines that the security protection endpoint is at a branching point or an uplink data classifier function ULCL; The requirement set further includes: the branking point or the security requirement of the ULCL.

A ninth aspect of the present application provides a security policy determining method, including: a mobility management network element receiving a request of a user equipment, where the request of the user equipment includes the user equipment as one end of the end-to-end communication Logo. The mobility management network element sends an end-to-end communication request, where the end-to-end communication request includes an identifier of the user equipment, and the end-to-end communication request is used to trigger establishment of a security session, The security policy is based on at least one of user security requirements of the user equipment preset in the home server, service security requirements from the user equipment, security capability requirements supported by the user equipment, and security capability requirements from the operator network. Kind of determination.

A tenth aspect of the present application provides a mobility management network element including a communication component and a processor. The communication component is configured to receive a request of the user equipment, where the request of the user equipment includes one of the end-to-end communications The identifier of the user equipment at the end. And sending a request for end-to-end communication, the request for the end-to-end communication includes an identifier of the user equipment, and the request for the end-to-end communication is used to trigger establishment of a security session, where the security policy is based on a home user At least one determination of a user security requirement of the user equipment preset in the server, a service security requirement from the user equipment, a security capability requirement supported by the user equipment, and a security capability requirement from an operator network.

In an implementation manner, before the mobility management network element sends the end-to-end communication request, the method further includes: the mobility management network element generating the network identifier. The network identifier is also included in the request for the end-to-end communication.

In an implementation manner, the method further includes: obtaining, by the mobility management network element, a user identifier from a home subscriber server and a user security requirement of the user equipment preset in the home subscriber server. Acquiring the user security requirement of the user equipment preset in the home subscriber server according to the identifier of the user equipment in the request for the end-to-end communication.

In an implementation manner, the request for the end-to-end communication further includes: a user security requirement of the user equipment preset in the home subscriber server.

In an implementation manner, the request of the user equipment further includes: at least one of a service parameter, a service security requirement from the user equipment, and a security capability requirement supported by the user equipment.

In an implementation manner, the request for the end-to-end communication further includes: at least one of a service parameter, a service security requirement from the user equipment, and a security capability requirement supported by the user equipment.

The eleventh aspect of the present application provides a method for determining a security policy, including: receiving, by a home subscriber server, a security requirement request, where the security requirement request includes a user identifier, where the home subscriber server saves the The user security requirements of the user equipment are set. The home subscriber server determines, according to the user identifier, a user security requirement of the user equipment preset in the home subscriber server. The home user server sends the user security requirement of the user equipment preset in the home subscriber server, and the user security requirement of the user equipment preset in the home subscriber server is used to generate a security policy.

A twelfth aspect of the present application provides a home subscriber server, including: a memory for storing a user security requirement of the user equipment preset in the home subscriber server, and a security requirement request for receiving a user identifier And a communication component for determining a user security requirement of the user equipment preset in the home subscriber server according to the user identifier. The communication component is further configured to send a user security requirement of the user equipment preset in the home subscriber server, where a user security requirement of the user equipment preset in the home subscriber server is used to generate a security policy.

A thirteenth aspect of the present application provides a key configuration method, comprising: a session management network element receiving a request for end-to-end communication, the request for the end-to-end communication being included as one end of the end-to-end communication An identifier of the user equipment; the session management network element obtains a security policy, where the security policy is based on a user security requirement of the user equipment preset in the home subscriber server, a service security requirement from the user equipment, and the user equipment At least one determination of a supported security capability requirement, a security capability requirement from an operator network, and a security requirement of the other end device of the end-to-end communication; the session management network element acquiring a first key, the first The key is used to protect the end-to-end communication, where the first key is determined according to the security policy and a shared key between the user equipment and the operator network; the session management network element Generating an encryption protection key and/or an integrity protection key according to the security policy and the first key, where the encryption protection key is used for the end The end-to-end communication performs confidentiality protection, and the integrity protection key is used to perform integrity on the end-to-end communication; the session management network element sends the user equipment to the user equipment Sending the security policy; the session management network element sends at least one of the encryption protection key and the integrity protection key shown and the security policy to the other end device of the end-to-end communication.

A fourteenth aspect of the present application provides a mobility management network element, including:

a communication component for receiving an end-to-end communication request, the request for the end-to-end communication including an identification of a user equipment as one end of the end-to-end communication. a processor, configured to obtain a security policy, where the security policy is based on a user security requirement of the user equipment preset in the home subscriber server, a service security requirement from the user equipment, and a security capability requirement supported by the user equipment, At least one determination of a security capability requirement from an operator network and a security requirement of the other end device of the end-to-end communication; and obtaining a first key for the end-to-end The communication is protected, the first key is determined according to the security policy and a shared key between the user equipment and the operator network; and the encryption is generated according to the security policy and the first key a protection key and/or an integrity protection key for confidentiality protection of the end-to-end communication, the integrity protection key being used to complete the end-to-end communication Sex. The communication component is further configured to: send the security policy to the user equipment, and send at least one of the encryption protection key and the integrity protection key shown to the other end device of the end-to-end communication Item and the security policy.

In an implementation manner, the session management network element sends the first key to the user equipment, so that the user equipment generates the encryption protection secret according to the security policy and the first key. Key and/or the integrity protection key.

In an implementation manner, the method further includes: the session management network element sending the encryption protection key and/or the integrity protection key to the user equipment.

A fifteenth aspect of the present application provides a key configuration method, including: a user equipment sends a request, where the request includes an identifier of the user equipment; the user equipment receives a response, where the response carries a security policy, The security policy is based on user security requirements of the user equipment preset in the home subscriber server, service security requirements from the user equipment, security capability requirements supported by the user equipment, security capability requirements from the operator network, and the At least one determination of a security requirement of the other end device of the end-to-end communication; the user device acquiring an encryption protection key and/or an integrity protection key, the encryption protection key being used for the end-to-end communication Confidentiality protection is performed, which is used to integrity the end-to-end communication.

The sixteenth aspect of the present application provides a user equipment, including:

a communication component, configured to send a request, where the request includes an identifier of the user equipment, and receiving a response, where the response carries a security policy, where the security policy is based on the user equipment preset in the home subscriber server At least one of a user security requirement, a service security requirement from the user equipment, a security capability requirement supported by the user equipment, a security capability requirement from an operator network, and a security requirement of the other end device of the end-to-end communication determine. And a processor for obtaining an encryption protection key and/or an integrity protection key.

In an implementation manner, the acquiring, by the user equipment, the encryption protection key and/or the integrity protection key includes: acquiring, by the user equipment, a first key, where the first key is according to the security policy and the user The shared key between the device and the carrier network determines that an encryption protection key and/or an integrity protection key is generated according to the security policy and the first key.

In an implementation manner, the acquiring, by the user equipment, the encryption protection key and/or the integrity protection key comprises: receiving, by the user equipment, an encryption protection key and/or an integrity protection key.

The seventeenth aspect of the present application provides a security policy determining method, including: an operator's policy control network element or a mobility management network element determines an endpoint of security protection; and the security protection endpoint is a user plane node. In the case of the UPF, the policy control network element or the mobility management network element is based on user security requirements of the user equipment preset in the home subscriber server, service security requirements from the user equipment, and supported by the user equipment. At least one of the security capability requirements, and at least one of a security capability requirement from the operator network and a security requirement of the other end device of the end-to-end communication; generating a security policy at the endpoint of the security protection The policy control network element or the mobility management network element is based on user security requirements of the user equipment preset in the home subscriber server, service security requirements from the user equipment, and the user equipment support. At least one of the security capability requirements and the security requirements of the other devices generate security policies. Other equipment includes a branching point or ULCL.

The eighteenth aspect of the present application provides a policy control network element or a mobility management network element, including: a processor, configured to determine an endpoint of security protection, where the endpoint of the security protection is a user plane node UPF In the case of at least one of the user security requirements of the user equipment preset in the home subscriber server, the service security requirements from the user equipment, and the security capability requirements supported by the user equipment, and from the carrier network. At least one of a security capability requirement and a security requirement of the other end device of the end-to-end communication generates a security policy; in case the endpoint of the security protection is another device, according to a preset in the home subscriber server A security policy is generated by at least one of a user security requirement of the user equipment, a service security requirement from the user equipment, and a security capability requirement supported by the user equipment, and a security requirement of the other device, where the other device includes Branching point or ULCL.

In an implementation manner, the determining the endpoint of the security protection comprises: obtaining, according to configuration information or a node policy of the user equipment from other functional network elements of the network of the operator, or obtaining the The configuration information of the user equipment or the node policy, or the security protection end point according to the security requirements of the received service, or the security requirements, service type or slicing policy of the server side.

DRAWINGS

In order to more clearly illustrate the embodiments of the present application or the technical solutions in the prior art, the drawings to be used in the embodiments or the prior art description will be briefly described below. Obviously, the drawings in the following description are only It is a certain embodiment of the present application, and other drawings can be obtained according to the drawings without any creative work for those skilled in the art.

1 is a schematic diagram of a network architecture of future mobile communications;

2 is a flowchart of a method for determining a security policy disclosed in an embodiment of the present application;

FIG. 3 is a flowchart of still another method for determining a security policy according to an embodiment of the present application;

4 is a flowchart of still another method for determining a security policy according to an embodiment of the present application;

FIG. 5 is a flowchart of still another method for determining a security policy according to an embodiment of the present application;

FIG. 6 is a flowchart of still another method for determining a security policy according to an embodiment of the present application;

FIG. 7 is a flowchart of still another method for determining a security policy according to an embodiment of the present application;

FIG. 8 is a flowchart of a key configuration method according to an embodiment of the present disclosure;

FIG. 9 is a flowchart of still another method for configuring a key according to an embodiment of the present application;

FIG. 10 is a flowchart of still another method for configuring a key according to an embodiment of the present application;

FIG. 11 is a flowchart of still another method for configuring a key according to an embodiment of the present application;

FIG. 12 is a flowchart of still another method for configuring a key according to an embodiment of the present application;

FIG. 13 is a flowchart of still another method for configuring a key according to an embodiment of the present application;

FIG. 14 is a flowchart of still another method for configuring a key according to an embodiment of the present application;

FIG. 15 is a flowchart of still another method for configuring a key according to an embodiment of the present application;

16(a) and 16(b) are schematic views of a scene of branching;

17 is a schematic diagram of a scenario in which a session link is a UE-AN-UPF (ULCL)-UPF (anchor);

18 is a schematic diagram of a Home-routed roaming scenario;

FIG. 19 is a schematic structural diagram of a session management network element according to an embodiment of the present disclosure;

FIG. 20 is a schematic structural diagram of a user equipment according to an embodiment of the present disclosure.

detailed description

The technical solutions in the embodiments of the present invention are clearly and completely described in the following with reference to the accompanying drawings in the embodiments of the present invention. It is obvious that the described embodiments are only a part of the embodiments of the present invention, but not all embodiments. All other embodiments obtained by those skilled in the art based on the embodiments of the present invention without creative efforts are within the scope of the present invention.

Figure 1 shows the network architecture of future mobile communications. among them:

The user equipment (User Equipment, UE) is a logical entity, and may specifically include:

Intelligent devices, such as mobile phones, smart terminals and other terminal devices, or communication devices such as servers, gateways, base stations, controllers, or Internet of Things (IoT) devices, such as sensors, meters, water meters, etc.

The UE accesses the carrier network through an access network (English: Access Network, AN).

The carrier network includes:

Mobility Management (MM) network element.

Session management network element (English: Session Management, SM), used to perform session, slice, flow flow or bearer establishment and management.

An authentication unit (English: Authentication Unit, or Authentication Function, AU or AF) is used to perform mutual authentication with the UE. The AU can be deployed as a separate logical function entity or in the MM or SM. That is, the MM or SM plays the role of the AU.

The server node of the operator, or the home subscriber server, including the AAA server of the operator (English: Authentication, Authorization, Accounting server, authentication, authorization, and accounting server), or attribution Home Subscriber Server (HSS), or Authentication Center (AuC) server, or user registration information center (English: subscriber repository). For convenience of explanation, the following is uniformly expressed by AAA. The AAA stores authentication information and user information of each UE, such as an authentication root key, a security algorithm, a registration information of the user, and the like.

Policy control network element for policy negotiation.

The Key Management System (KMS) is responsible for key generation, management, and negotiation, and supports lawful interception. The KMS can be deployed as a separate logical function entity or in the AU, MM or SM, ie the AU, MM or SM plays the role of KMS.

The gateway, also known as User Plane-Gateway (UP-GW), is used to connect the carrier network and the data network (English: Data Network, DN). The AN can also be connected to the DN via GW.

DN server, including application server or business server. It can be deployed inside the carrier network or outside the carrier network.

It should be noted that the logical relationship between each network element is embodied in FIG. 1. In practice, MM,

The AU and the SM can be deployed separately or integrated in at least one or two in one entity. For example, SM and MM are deployed in one entity, AU is deployed separately; or SM and AU are deployed in one entity, and MM is deployed separately.

Based on the architecture of FIG. 1 , in order to implement protection for communication between the end (UE1) and the end (gateway, DN server, or UE2), in the present application, a key configuration apparatus is added to the architecture shown in FIG. Both the UE1 and the gateway (or DN server, or UE2) of the end-to-end communication configure a protection key so that both parties can encrypt the communication using the protection key.

The key configuration apparatus includes: a security policy determination module and a key configuration module. The security policy determining module is configured to ensure security requirements of one end (ie, UE1) of the end-to-end communication, security requirements of the other end of the end-to-end communication (ie, the DN server or the UE2), and security of the carrier network (ie, the gateway). At least one of the requirements to determine the security policy. The key configuration module is configured to use the shared key and the security policy between the end of the end-to-end communication (ie, UE1) and the network element (such as AU, KMS, SM, or MM) of the carrier network, and configured for the protection end ( That is, the protection key of the communication of the UE1) to the end (ie, the DN server or the UE2).

The shared key may be a shared key preset between the UE and the operator's network element (for example, AU, KMS, SM, or MM); or may be a network element of the UE and the operator network (for example, AU, KMS) After the two-way authentication between the SM and the MM, the shared key is obtained, and the shared key is sent to other network elements. For example, in the mutual authentication between the UE and the AU, the shared key is obtained; the AU sends the shared key to the KMS, SM or MM; or the UE and the KMS (SM or MM) perform the authentication, and then send the shared key to the Other network elements.

Taking LTE as an example, the shared key obtained after authentication includes but is not limited to at least one of CK, IK, and Kasme. The shared key includes but is not limited to the authenticated key form in LTE, and includes other authentication methods, such as certificate-based, identity-based, user-based password, and the like; and the shared key is obtained based on the authentication.

Specifically, the security requirement of the UE1 at the end of the end-to-end communication includes the user security requirement of the UE1 preset in the HSS (for the convenience of the following description, in the embodiment of the present application, referred to as security requirement 1 for short), the service security requirement from the UE1. (referred to as security requirement 2) and the security capability requirements supported by the UE (referred to as security requirement 5), such as UE only Support ZUC algorithm. Security requirement 1 is a user security requirement preset in the HSS. It exists in the user's subscription data and can be stored as a single parameter or as part of the user QoS (Quality of Service) in the HSS. Security requirement 2 is sent by the UE to the carrier network when UE1 initiates a communication request.

The security requirements of the carrier network, that is, the gateway, include the security capability requirement (referred to as security requirement 3) from the carrier network (the gateway side), which is stored in the Policy control network element and can be stored as a parameter separately or as a Policy control. A part of the internal QoS may also be stored in the SM network element.

The other end of the end-to-end communication, that is, the security requirement of the DN server (or UE2) (referred to as security requirement 4) is: when the UE1 establishes the communication or the DN server (or UE2) triggers the establishment of the communication, some scenarios require the DN server or the UE2. Participation, the DN server or UE2 will propose security protection requirements, such as the requirement to use the ZUC security algorithm.

Specifically, regardless of the security requirement, the content of the security requirement includes: an algorithm for security protection, and optionally, a key length and a key update time (for example, 6 hours, 12 hours, 1 day, 2 days, January, 1 year, etc.).

Specifically, the security protection algorithm includes an encryption algorithm and/or an integrity protection algorithm. For example, the encryption algorithm is used to specify which encryption algorithm, including but not limited to null (an empty algorithm, indicating no encryption), AES, Snow 3G or ZUC, is used for encryption protection. The integrity protection algorithm is used to specify which integrity protection algorithm, including but not limited to null (empty algorithm, means no integrity protection), AES, Snow 3G, ZUC, HMAC, CMAC, for integrity protection. An algorithm that may be secure in a security requirement includes multiple encryption algorithms and/or multiple integrity protection algorithms; in this case, the security requirements also include prioritization of the algorithm, ie indicating which algorithm to use preferentially.

For example, the length of the protection key includes 64, 128, 256, or 512 bits, and the like. The first possibility is that the security requirement contains only one protection key length, and the subsequent encryption and integrity protection have the same protection key length, which is the protection key length defined in the security requirement. The second possibility is that the security requirements include two protection key lengths, one for specifying the length of the encryption key and one for specifying the length of the integrity protection key.

Any of the above security requirements specifically includes the following information: whether the encryption algorithm, the length of the encryption key, the integrity protection algorithm, the length of the integrity protection key, whether the key needs to be updated, and at least one of the updated periods are required. .

There are many possibilities for the format of security requirements. The possibilities for some specific formats are given below, as shown in Table 1 - Table 5:

Table 1

In Table 1, EA represents the encryption algorithm encryption algorithm. IA stands for integrity control algorithm integrity algorithm. Security requirement IEI indicates the identity of the security requirement. Length of security requirement Contents indicates the length of the content of the security requirement.

As can be seen from Table 1, the security requirement consists of five octets, which are used to indicate the identity of the security requirement, and octet 2 is used to indicate the length of the content of the security requirement.

8-bit byte 3 is used to indicate whether the encryption algorithm and the length of the encryption key are required, wherein the highest bit value of 8-bit byte 3 is used to indicate whether an encryption algorithm is required, 0 means no encryption algorithm is required, and 1 means encryption is required. algorithm. The remaining 7 bits can respectively indicate the length of the encryption key. For example, in Table 1, the next highest bit indicates that the length of the encryption key is 128, and the following bits can indicate that the length of the encryption key is 256, etc. (only in Table 1) Two examples of 128 and 256 are given, and other lengths can be set according to actual needs). A value of 0 indicating a length of the encryption key indicates a length not represented by the bit, and a value of 1 indicates a length represented by the bit. If there are multiple bits representing the length of the encryption key, the value of the bit is 1, indicating that the security requirement supports multiple lengths of encryption keys.

8-bit byte 4 is used to indicate whether the integrity protection algorithm and the length of the integrity protection key are required, where the highest bit value of the 8-bit byte is used to indicate whether an integrity protection algorithm is required, and 0 means no integrity is required. Protection algorithm, 1 indicates that an integrity protection algorithm is required. The remaining 7 bits can respectively represent the length of the integrity protection key. For example, in Table 1, the next highest bit indicates that the integrity protection key has a length of 128, and the following bits can respectively indicate that the integrity protection key has a length of 256. Etc. (only two examples of 128 and 256 are given in Table 1, and other lengths can be set according to actual needs). A value of 0 indicating the length of the integrity protection key indicates that the length represented by the bit is not used, and a value of 1 indicates the length represented by the bit. If there are multiple bits representing the length of the integrity protection key, the value of the bit is 1, indicating that the security requirement supports multiple lengths of integrity protection keys.

8-bit byte 5 is optional and is used to indicate whether the key needs to be updated and the period of the update. The value of the highest bit of the octet 5 is used to indicate whether an update is needed, 0 means no update is required, and 1 means update is required. The remaining 7 bits can respectively indicate the update period. For example, in Table 1, the next highest bit indicates that the update period is 24 hours, and the following bits can indicate that the update period is 48 hours, etc. (only 24 hours are given in Table 1) And 48 hours two examples, other cycles can be set according to actual needs). A value of 0 indicating a period of the updated period indicates that the period is not employed, and a period of 1 indicates that the period is employed. If there are multiple bits representing the updated period, the value of the bit is 1, indicating that the security requirement supports multiple update cycles.

It should be noted that, for each of the Tables 1 and the following tables, which of the 8-bit bytes given in the table indicates what is meant by the examples, in the present embodiment, the examples in the tables are not limited. For example, the 6th and 7th of the 3rd octet in Table 1 indicate the length of the encryption key. In addition, the length of the encryption key can also be used in the 3rd octet. The other bits represent, and are not limited to, the 7th and 6th bits of the 3rd octet. For another example, the bytes other than the 7th and 6th bits of the 4th octet in Table 1 can also be used to indicate the length of the integrity protection key.

Table 2

Table 2 differs from Table 1 in that the highest bit of the 8-bit byte 3 to the 8-bit byte 5 is represented by a null, and if the value is 1, it represents a null algorithm, that is, it is not required. For example, a value of 1 for the most significant bit of octet 3 indicates that no encryption calculation is required, and a value of 0 indicates that encryption calculation is required (or the meaning of the value is reversed). It is also possible that the highest bit of octet 3 and octet 4 represents a key length of length 0, and a value of 1 means no encryption is required.

table 3

In Table 3, EEA0 represents an Evolved Packet System (EPS) encryption algorithm 0, where EEA represents an EPS encryption algorithm, that is, an EPS encryption algorithm, and EIA0 represents an EPS integrity protection algorithm 0, where EIA represents an EPS integrity algorithm, That is EPS integrity algorithm.

UEA0 represents a Universal Mobile Telecommunication System (UMTS) encryption algorithm 0, where UEA stands for UMTS encryption algorithm, ie UMTS encryption algorithm. UIA0 represents UMTS integrity algorithm 0, where UIA stands for UMTS integrity algorithm, ie UMTS integrity algorithm.

Spare indicates the idle bit and is set to zero.

GEA stands for General Packet Radio Service (GPRS) encryption algorithm, ie GPRS encryption algorithm.

Among them, bytes 5-6 are optional. For example, when it is necessary to support the UMTS access technology, it needs to include 8-bit bytes 5 and 8 bits 6. When you need to support GPRS access technology, you need to include 8-bit byte 7.

Table 3 differs from Table 1 and Table 2 in that Tables 1 and 2 show at least one of encryption, key length, and length of time. The specific supported security algorithms are given in Table 3.

Table 4

The difference between Table 4 and Table 3 is that 8-bit bytes 8-10 are added on the basis of Table 3. The definition of 8-bit bytes 8-10 can be referred to Table 1. The definition of 8-bit bytes 3-7 can be referred to Table 4.

The other 8-bit byte 8-10 can be replaced with the function of 8-bit byte 3-5 in Table 2. The function description of 8-bit byte 3-5 is shown in Table 2.

table 5

Table 5 differs from Table 3 in that the encryption algorithm and integrity protection algorithm for the next generation communication are added in Table 5.

NEA0 represents the next generation communication encryption algorithm 0, wherein NEA stands for Next generation encryption algorithm, ie, Next generation encryption algorithm, and NIA0 represents next generation integrity protection algorithm 0, where NIA stands for Next generation integrity algorithm, ie, Next generation integrity algorithm.

In addition, other possibilities include a processing mechanism similar to Table 4, which combines Table 5 with Table 1 to reflect enhanced security requirements; or Table 5 and Table 2 combine to reflect enhanced security requirements.

In Tables 1-3 and 4 above, the possibility is also included that only one key length is included, and the encryption key length is the same as the integrity protection key length.

It should be noted that Tables 1 to 5 are only examples of the security requirement format. In addition, the security requirements may also include the priority of the security requirement (in the specific format, represented by the value of the bit), or At least one of the above is included in the security requirements.

In addition, security endpoints may also include security endpoint selection. That is, a new byte is added, where one bit represents the user plane protection termination point at the access network node or the core network user plane function node.

In addition, the two requirements for the above-mentioned service security requirements and/or server-side security requirements can also reflect whether the upper layer of the service is encrypted. For example, it is possible to complete the feature of encryption by adding a byte in the above representation.

The specific implementations of the functions of the security policy determination module and the key generation module in the key configuration apparatus will be described in detail below in conjunction with the respective network elements in FIG.

It should be noted that the protection of the end-to-end communication described in the present application includes end-to-end protection of the session, and also includes end-to-end protection based on slices, flow flow or bearing bearer. In the following, the protection of the end-to-end session will be described as an example. Since UE2 is not included in the following figures, the UEs described below are all UE1.

The security policy determination module may be configured in the UE1, the network element of the carrier network (for example, AN, MM, AU, KMS, AAA, SM, Policy control network element), the gateway, and the DN network element (for example, the DN server) shown in FIG. ), or in UE2. The determination of the security policy may be performed during the UE attaching to the network, or after the UE is attached to the network. The following is an example of the security policy determination module setting in the Policy control network element and the security policy determination module setting in the SM.

Figure 2 shows the process of determining the security policy of the Policy control network element (that is, the security policy determination module is set in the Policy control network element), including the following steps:

1. In the process of attaching the network, UE1 accesses the network and performs two-way authentication, AU.

Get security requirements from AAA1.

It should be noted that the home subscriber server receives the security requirement request of the AU, including the user identifier, determines the security requirement 1 according to the user identifier, and sends the security requirement 1 to the AU.

2. AU sends security requirement 1 to MM.

3. The MM generates a network identifier (Identity, ID), such as a session ID, and initiates a conference to the SM.

In the case of a request, the session request includes:

a) UE ID: used for network identification users, including but not limited to IMEI, International Mobile Subscriber Identity (IMSI), IP Multimedia Private Identity (IMPI), At least one of TMSI, IP Multimedia Public Identity (IMPU), user's App ID, MAC address, IP address, mobile phone number, and GUTI. For convenience of explanation, the UE ID is uniformly used in the subsequent embodiments.

b) Network ID (optional): used by the network to identify the user's process (such as slice, bearer, session or flow flow), including but not limited to session ID, bearer ID, flow flow ID, slice ID, PLMN ID One.

c) Security requirements1.

d) Service parameters (optional): used to identify the user's service or application, and related service characteristics, including: service ID, APP ID, server server ID, serial number SN in the service, time stamp and fresh parameters (Fresh) At least one of parameter1).

It should be noted that the foregoing UE ID and/or service parameter may be obtained by the MM from an access message sent by the UE to the MM, or obtained directly from the AU or AAA, where the AU or AAA is accessed from the UE to the network. Obtained in the message.

In addition, MM may also obtain security requirements directly from AAA1.

In addition, when the UE accesses the network, the security requirement 2 and/or the security requirement 5 may also be sent to the network; at this time, the session request sent by the MM also includes the security requirement 2 and/or the security requirement 5.

4. After receiving the session request, the SM will have security requirement 1, and may also include the UE ID and network ID.

(for example, the session ID) is sent to the Policy control network element.

Optionally, the SM may send the security requirement 1 in the policy request message to the Policy control network element. Optionally, the request message may further include at least one of a UE ID and a network ID.

Optionally, if the SM receives the security requirement 2 and/or the security requirement 5 from the MM, the security requirement 2 and/or the security requirement 5 are sent to the policy control.

5. The Policy control network element obtains at least one of the pre-stored security requirements 3, or security requirement 1, security requirement 2, security requirement 3, and security requirement 5, and determines the security policy according to security requirement 1 and security requirement 3.

Specifically, the security policy is determined according to the following preset rules: the security policy is determined according to the content of one or more security requirements. If the security policy is determined based only on the content of a security requirement, the content of the security policy is the same as the content of this security requirement. If you determine your security policy based on the content of multiple security requirements, you can follow these guidelines:

First, follow the principle of higher security and determine the security policy, that is, the content with higher security among the content of multiple security requirements as the content of the security policy.

For example, in the content of security requirement 1, the protection key length is 64, and the protection key length in the content of security requirement 2 is 128, and the protection key length of the security policy is 128.

Second, following the principle of more resource-saving, the security policy is determined, that is, the more resource-saving content of the content of multiple security requirements is used as the content of the security policy.

For example, the content of each security requirement includes an encryption algorithm, and the integrity protection algorithm of the content of some security requirements is null, and the content of the security policy includes an encryption algorithm, and does not include an integrity protection algorithm.

Third, the security policy is determined by following the priority of security requirements. That is, if the priority of the algorithm is specified in a security requirement, the priority of the algorithm is used as the basis for the negotiation of the security algorithm; the final algorithm selected is an algorithm supported by all security requirements, and the algorithm has the highest priority as the highest priority. The content of the security policy.

Or, according to a security requirement priority, the security policy is negotiated. For example, according to the priority of several encryption algorithms specified in security requirement 2, according to the priority specification, determine which encryption is used in the security policy. algorithm.

Alternatively, multiple security requirements specify the priority of the algorithm. In this case, the algorithm priority of a security requirement may be dominant. For example, the priority according to security requirement 2 is the primary priority.

6. The Policy control NE sends a security policy to the SM. Optionally, the Policy control NE

The security policy is carried in the response message feedback.

It should be noted that, in FIG. 2, 1 to 3 are only one implementation manner, and optionally,

A network ID, such as a session ID, is generated by the SM instead of the MM, that is, after receiving the session request sent by the MM, the SM generates a network ID, such as a session ID.

Figure 3 is another security policy determination process. The difference compared with Figure 2 is that after the SM receives the session request,

In addition to the network ID and security requirement 1 (which may also include the UE ID), traffic parameters, such as at least one of a service ID and an APP ID, are also sent to the Policy control network element. After obtaining the security requirement 1, the Policy control network element sends a security requirement request to the DN server or UE2 (not shown in FIG. 3), where the security requirement request includes the UE ID and the service parameter (such as the service ID or the APP ID). At least one. The Policy control NE receives the DN server, or the security requirement 4 fed back by UE2. The Policy control NE determines the security policy based on security requirements 1, security requirements 3, and security requirements 4.

Of course, the security request can be sent by the SM to the DN server or the UE2; and the DN server or the security requirement 4 fed back by the UE2 is received, and then the security requirement 4 is sent by the SM to the Policy control network element. Preferably, in order to simplify the interaction process, the SM may first obtain the security requirement 4, and then send the security requirement 2 and the security requirement 4 to the Policy control network element.

In FIG. 2 or FIG. 3, steps 1 to 2 are processes for the SM to obtain security requirements 1 and various identifiers and parameters. In addition, the network elements of the carrier network may use other methods to implement security requirements 1 and The identification and parameters are transmitted to the SM:

The first:

1. In the two-way authentication process, the AU obtains the security requirement 1 pre-stored in the AAA from the AAA.

2. The AU does not pass the MM but sends a session request directly to the SM. The specific content of the session request is shown in FIG. 2 or FIG. 3, and details are not described herein again.

Second:

The SM receives the session request sent by the AN, the AU, or the MM, and the session request includes at least one of a UE ID, a network identifier, and a service parameter.

2. The SM obtains the pre-stored security requirement 1 locally according to the UE ID.

The third type:

2. The SM obtains the pre-stored security requirement 1 from AAA, MM or AU.

That is to say, in addition to SM and AAA, security requirement 1 can also be pre-stored in other network elements in FIG. in. Since AAA is currently used to store user registration information, the advantage of pre-storing security requirement 1 in AAA is that it is more secure and facilitates unified management.

In addition to the Policy control network element, the security requirement 3 can also be pre-stored in other network elements in FIG. Because the policy control network element is used for the QoS negotiation in the current (for example, LTE) network architecture, the security requirement 3 is pre-stored in the policy control network element, which is beneficial to the security policy determination scheme of the present embodiment. The strategy determines that the process is logically compatible.

In any of the above manners, as long as the security requirement 1 is involved, the execution manner of the HSS may refer to the flow shown in FIG. 2, and details are not described herein again.

FIG. 4 is still another security policy determining process. The difference compared with FIG. 2 or FIG. 3 is that UE1 initiates a session request after the UE attaches to the network. In this case, UE1 can provide security requirement 2 and/or security. Requirement 5, so that the Policy control network element determines the security policy based on more security requirements. Figure 6 includes the following steps:

After the UE is attached to the network, the UE initiates a session request to the MM, where the session request includes:

The ID and security requirements, optionally, may also include network IDs and/or business parameters.

Specifically, security requirements include security requirements 2 and/or security requirements 5. The specific contents of the UE ID, the security requirement, the network ID, and the service parameters are as described above, and are not described here.

It should be noted that, in the process of the two-way authentication shown in FIG. 2 or FIG. 3, the security request 2 and/or the security requirement 5 may also be carried in the access request sent by the UE.

2. The security requirement 1 is stored in the MM. After receiving the session request, the MM generates a network ID (for example, a session ID), and the MM sends a session request to the SM. The session request includes security requirements 1, security requirements 2 and/or security requirements 5, UE ID, network ID, and may also include service parameters.

3. After receiving the session request, the SM sends the security requirement 1, the security requirement 2, and/or the security requirement 5, and may also include the UE ID and the network ID (for example, the session ID) to the Policy control network element.

3. The Policy control NE determines the security policy based on the security requirements sent by the SM and the pre-stored security requirements. The specific rules for determining the security policy are as described above and will not be described here.

4. The Policy control NE sends the security policy to the SM.

It should be noted that, in FIG. 3, 1-3 is only an implementation manner. Optionally, the session request sent by the UE1 may not include the network ID. After receiving the session request of the UE1, the MM generates a network ID and sends it to the SM. . Alternatively, the network ID may be generated by the SM instead of the MM. After the SM receives the session request sent by the MM, the SM generates a network ID, such as a session ID.

The UE directly sends the session request to the SM. In this case, the manner in which the SM obtains the security requirement 1 can refer to the previous acquisition process.

For the specific determination of the security policy, refer to the process shown in Figure 3, and details are not described here.

Figure 5 is another security policy determination process. The difference compared with Figure 4 is that security is added.

The acquisition process of the requirement 4, specifically: after receiving the session request, the SM sends a service parameter, such as a service ID and an APP ID, to the Policy control network element in addition to the UE ID, the network ID, and the respective security requirements. . After the Policy control NE obtains the security requirements sent by the SM, it sends security requirements to the DN server or UE2. The request includes at least one of a UE ID and an APP ID in the security requirement request. The Policy control NE receives the DN server, or the security requirement 4 fed back by UE2. The Policy control NE determines the security policy based on the security requirements and security requirements sent by the SM.

Of course, the security request may be sent by the SM to the DN server or the UE2, and the DN server or the security requirement 4 fed back by the UE2 may be received, and then the security requirement 4 is sent by the SM to the Policy control network element. The specific manner for the SM to obtain and send the security requirement 4 to the Policy control network element can be seen in FIG. 4, and details are not described herein again.

In addition to the FIG. 4 or FIG. 5, other implementation manners for the SM to obtain the security requirement 1 may include the following:

The first:

1. The SM receives a session request sent by the AN, AU, or MM, and the session request is as shown in FIG. 4 or FIG. 5.

Second:

1. The SM receives the session request sent by the AN, AU, or MM, and the session request request is as shown in FIG. 4 or FIG. 5.

2. The SM obtains the pre-stored security requirement 1 from AAA, MM or AU.

The above examples are all processes in which the Policy control network element determines the security policy according to each security requirement. In addition to the Policy control network element, the security policy determination module can also be set in the SM.

For the process of the SM to determine the security policy according to the security requirements, the process of obtaining the security requirement 1, the security requirement 2 and/or the 5, the UE ID, the network ID, and the service parameter of the SM may be referred to FIG. 2 to FIG. 5 , and details are not described herein again. The SM can obtain the security requirement 4 by using the method of FIG. 2 to FIG. 5, or obtain the security requirement 4 by the Policy control network element in the manner of FIG. 2 to FIG. 5, and then receive the security requirement 4 sent by the Policy control network element. The SM may send a security requirement request (including at least one of a UE ID, a network ID, or a service parameter) to the Policy control network element to obtain the security requirement 3 from the Policy control network element. Figure 6 to Figure 7 are only examples of SM's security policy. Nothing is exhausted here.

In the above example, both the Policy control NE and the SM determine the security policy based on at least two security requirements. In addition to the above examples, security policies can also be determined according to a security requirement: receiving at least one security requirement, but only using some of them to determine the security policy, or receiving at least one security policy, determining security based on all received security requirements. Strategy. The embodiments of the present application are not limited.

In the above process, the session ID, the bearer ID, the flow flow ID, or the slice ID in the network ID are all generated by the network element of the operator network, such as an AN, MM, AU, KMS, AAA, SM, or Policy control network element. In addition, the session ID, the bearer ID, the flow flow ID, or the slice ID may also be generated by the UE1, and carried in the attach request or the session request sent by the UE1 to the operator network, and sent to the network element in the operator network. For example, AN, MM, AU, KMS, AAA, SM or Policy control network element. For example, in FIG. 2, before the two-way authentication, the UE1 sends an attach request message carrying the session ID, the bearer ID, the flow flow ID, or the slice ID to the carrier network (the process belonging to the UE1 attaching to the carrier network). For another example, in FIG. 4, the callback request sent by the UE1 to the MM further carries a session ID, a bearer ID, a flow flow ID, or a slice ID.

In the case that the UE1 generates and sends a session ID, a bearer ID, a flow flow ID, or a slice ID to the carrier network, A network element in the carrier network, such as an AN, MM, AU, KMS, AAA, SM, or Policy control network element, will no longer generate a session ID, a bearer ID, a flow flow ID, or a slice ID.

The above is only an example. For other network elements to implement the security policy determination function, refer to the above figure for adaptive adjustment, which will not be described here.

The following describes the specific working process of the key configuration module.

The key configuration module may be configured in the UE1, the network element of the carrier network (for example, AN, MM, AU, KMS, AAA, SM, Policy control network element), the gateway, the network element of the DN (for example, the DN server), or the UE2. One or more. The producer of the protection key needs to obtain the security policy and the shared key K to calculate the protection key, and distribute the protection key to other network elements such as the UE, the gateway (or the DN server, or the UE 2). Specifically, the protection key generation party may send the protection key to the KMS, and the KMS sends the protection key to the UE, the gateway (or the DN server, or the UE2) and other network elements, or directly distribute the protection key to the UE and the gateway. (or DN server, or UE2) and other network elements.

The following is an example of setting one or more of the SM, KMS, or UE with the key configuration module.

Figure 8 includes the following specific steps:

1. The SM sends a key request message to the KMS. The key request message includes: a UE ID

And security policies, optionally, may also include network IDs and/or service parameters. The specific contents of the UE ID, the security requirement, the network ID, and the service parameters are as described above, and are not described here.

For details on how to obtain an IPSec policy, see Figure 2 to Figure 7. If the security policy is determined by the Policy control network element, it is sent to the SM by the Policy control network element.

2. The KMS calculates the protection key according to the security policy and the shared key K. The protection key is used to protect the session between the UE and the gateway (or DN server, or UE2).

The shared key K between the KMS and the UE may be allocated to the UE and the KMS in the process of establishing the context between the UE accessing the network and the MM, or may be allocated to the UE and the KMS in the two-way authentication process or after the two-way authentication process; It may be preset inside the UE and KMS.

Specifically, because the content of the security policy may include at least one of an encryption algorithm and an integrity protection algorithm, a protection key may be calculated according to the security policy, and may be used for encryption and/or integrity protection, or may be separately calculated. Encryption protection key and integrity protection key.

Where the protection key is:

KSID=KDF(K, (UE ID, session ID, bearer ID, flow ID, slice ID, PLMN ID, service parameter, at least one of nonce), policy set).

or:

KSID=KDF(K, (UE ID, session ID, bearer ID, flow ID, slice ID, PLMN ID, service parameter, at least one of nonce)).

or:

KSID_enc=KDF (KSID, encryption algorithm ID, (UE ID, session ID, bearer ID, flow ID, slice ID, PLMN ID, service parameter, at least one of nonce)).

or:

KSID_enc=KDF (KSID, Encryption Identity, (UE ID, Session ID, Bearer ID, Flow ID, Slice ID, PLMN ID, Service Parameter, at least one of nonce)).

or:

KSID_enc=KDF (KSID, Encryption Algorithm ID).

The policy set is a security policy, and K is a shared key between the UE and the KMS.

As mentioned before, the encryption identifier can be a string that identifies the result of this derivation as an encryption key. The nonce is a random parameter, which can be selected by the KMS, or carried by the UE in the session request. The purpose of using the random number calculation is to improve the security and randomness of the key.

The integrity protection key KSID_int is:

KSID_int=KDF (KSID, Integrity Protection Algorithm ID).

or:

KSID_enc=KDF (KSID, integrity protection identifier, (UE ID, session ID, bearer ID, flow ID, slice ID, PLMN ID, service parameter, at least one of nonce)).

or,

KSID_int=KDF (KSID, integrity protection algorithm ID, (UE ID, session ID, bearer ID, flow ID, slice ID, PLMN ID, service parameter, at least one of nonce)).

The integrity protection identifier can be a string that identifies the result of this derivation as an integrity protection key.

The above KDF is a key derivation function, including but not limited to the following cryptographic derivation functions: HMAC (such as HMAC-SHA256, HMAC-SHA1), NMAC, CMAC, OMAC, CBC-MAC, PMAC, UMAC and VMAC, and HASH algorithm. Wait. In addition, because the requirements in the security policy are different, for example, the length of the protection key in the security policy 1 is 256 bits; and the length of the protection key in the security policy 2 is 128 bits; in this case, the KMS can adopt different key derivation algorithms. To meet the requirements of different security policies for different protection key lengths (for example, HMAC-SHA1 is used to generate a 128-bit protection key, and HMAC-SHA256 is used to generate a 256-bit protection key); in addition, KMS may also use only one algorithm to generate protection. The key is then generated by truncate or extension, etc. to generate other lengths of protection keys. The KMS handles the protection of the key length, including but not limited to the above processing.

The parameter bearer ID, the flow ID, the slice ID, the encryption algorithm ID, and the session ID used in the above may be carried in the session request sent by the UE together with the security requirement 2 and/or the security requirement 5 described above.

3. The KMS sends the protection key to the SM, which may also include the UE ID and/or the network ID.

4. The SM distributes the protection key, the network ID, and the UE ID to the gateway (or DN server, or UE2) and UE1. Specifically, the SM may send the protection key to the gateway (or the server, or the UE2) in a User Plane Setup message, and send the protection key to the UE in the Session Setup Complete message.

It is also possible that the KMS sends the network ID and the protection key directly to the gateway (or DN server, or UE2), and the sent message may also contain the UE ID.

If the protection key derivation includes nonce, the KMS will also send the nonce to the SM, and then the SM sends it to the UE; or the KMS directly sends the nonce to the UE.

The difference between FIG. 9 and FIG. 8 is that the UE receives the security policy from the SM, and calculates the protection key according to the security policy. If the UE calculates the protection key to use the random parameter, the random parameter may be sent by the KMS to the UE, or may be generated by the UE itself.

It is also possible that KMS will send the protection key to the MM. Specifically, the MM may request the session protection key from the KMS after sending the session request to the SM and receiving the session response sent by the SM.

It is also possible that the shared key K is pre-stored in the SM, or after the UE performs mutual authentication with the AU, the KMS obtains the shared key K, and the KMS sends the shared key K to the SM. Both the UE and the SM calculate the protection key.

FIG. 10 is still another method for allocating a key according to an embodiment of the present application, including the following steps:

2. The KMS calculates the first key according to the security policy and the shared key K. The first key is used for the UE and the gateway (or the server (including the server of the DN or the carrier network, hereinafter referred to as the server for short), or the controller (including the controller of the DN or the carrier network, hereinafter referred to as the controller) ), or the session between UE2) is protected.

The shared key K between the KMS and the UE may be allocated to the UE and the KMS in the process of establishing the context between the UE accessing the network and the MM, or may be allocated to the UE and the KMS in the two-way authentication process or after the two-way authentication process. It may be preset inside the UE and KMS.

Specifically, because the content of the security policy may include at least one of an encryption algorithm and an integrity protection algorithm, a first key may be calculated according to the security policy, and may be used for encryption and/or integrity protection, or may be respectively The encryption protection key and the integrity protection key are calculated. There are various ways to calculate the protection key according to the security policy and the shared key K, including but not limited to the following ways:

The first key (that is, the protection key in the foregoing embodiment, in order to be unified with the foregoing embodiment, hereinafter collectively referred to as a protection key) is:

or:

The encryption protection key K_SID_enc is:

KSID_enc=KDF(K, (encryption algorithm ID, UE ID, session ID, bearer ID, flow ID, slice ID, PLMN ID, service parameter, nonce, at least one of policy set)).

or:

KSID_enc=KDF(K, (encrypted identity, UE ID, session ID, bearer ID, flow ID, slice ID, PLMN ID, at least one of the service parameters, nonce, policy set)).

Where policy set is the security policy, K is the shared key between the UE and the KMS, and the UE ID

The definition is as described in the previous embodiment.

As mentioned before, the encryption identifier can be a string that identifies the result of this derivation as an encryption key. The nonce is a random parameter, which can be selected by the KMS, or carried by the UE in the session request. The purpose of using the random number calculation is to improve the security and randomness of the key. It is also possible that the key derivation includes at least one of two nonces, one of which comes from the KMS (selected by the KMS, sent directly to the UE, or sent to the UE through the SM), and the other nonce is from the UE (the session is carried by the UE) Request).

The integrity protection key KSID_int is:

KSID_int=KDF(K, (integrity protection identifier, UE ID, session ID, bearer ID, flow ID, slice ID, PLMN ID, service parameter, nonce, at least one of policy set)).

or,

KSID_int=KDF(K, (integrity protection algorithm ID, UE ID, session ID, bearer ID, flow ID, slice ID, PLMN ID, service parameter, nonce, at least one of policy set)).

The integrity protection identifier can be a string that identifies the result of this derivation as an integrity protection key. The nonce is a random parameter, which can be selected by the KMS, or carried by the UE in the session request. The purpose of using the random number calculation is to improve the security and randomness of the key. It is also possible that the key derivation includes at least one of two nonces, one of which comes from the KMS (selected by the KMS, sent directly to the UE, or sent to the UE through the SM), and the other nonce is from the UE (the session is carried by the UE) Request).

The parameter bearer ID, flow ID, slice ID, and session ID used in the above may be carried in the session request sent by the UE together with the security requirement 2 and/or the security requirement 5, or carried in the first access operation of the UE. The request of the commerce network is carried in the key request message. In addition, the encryption algorithm ID and the integrity protection algorithm ID may be the content of the security policy.

3. The key obtained by the KMS in step 2 (ie, the protection key KSID, the encryption protection key)

At least one of KSID_enc and integrity protection key KSID_int is sent to the SM, possibly including the UE ID and/or the network ID.

4. The SM distributes the key obtained in the second step (ie, at least one of the protection key KSID, the encryption protection key KSID_enc and the integrity protection key KSID_int) to the gateway (or server, or controller, or UE2). ) and UE1. The message may also include at least one of a network ID, a UE ID, and a security policy. Specifically, the SM may carry the protection key in a User Plane Setup message to the gateway (or server, or controller, or UE2).

It is also possible that in step 4, the SM does not send the key obtained in step 2 to the UE, and proceeds to the following steps:

5. The SM sends a security policy to the UE, and the message may further include at least one of a network ID and a UE ID.

6. The UE receives the security policy from the SM (or policy control, or KMS), and calculates at least one of the KSID, the encryption protection key KSID_enc, and the integrity protection key KSID_int according to the security policy in the same manner as described above. If the UE needs to use a random parameter to calculate the protection key, the random parameter may be sent by the KMS to the UE, or may be generated by the UE itself. It is also possible that the key derivation includes at least one of two nones, one of which comes from the KMS (selected by the KMS, sent directly to the UE, or sent to the UE through the SM), and another nonce comes from UE (carried by the UE in the session request).

The above discloses that the UE generates or obtains at least one of a protection key KSID, an encryption protection key KSID_enc, and an integrity protection key from the SM. In addition, it is also possible that the UE is from the KMS (or policy control network element). At least one of a protection key KSID, an encryption protection key KSID_enc, and an integrity protection key, and a security policy are received.

FIG. 11 is still another method for key distribution according to an embodiment of the present application, including the following steps:

2. The KMS calculates the protection key according to the security policy and the shared key K. The protection key is used to protect the session between the UE and the gateway (or server, or controller, or UE2).

Specifically, because the content of the security policy may include at least one of an encryption algorithm and an integrity protection algorithm, a protection key may be calculated according to the security policy, and may be used for encryption and/or integrity protection, or may be separately calculated. Encryption protection key and integrity protection key. There are various ways to calculate the protection key according to the security policy and the shared key K, including but not limited to the following ways:

Where the protection key is:

or:

The parameter bearer ID, the flow ID, the slice ID, the encryption algorithm ID, and the session ID used in the above may be carried in the session request sent by the UE together with the security requirement 2 and/or the security requirement 5, or carried in the UE. The request to access the carrier network for the first time is carried in the key request message. In addition, the encryption algorithm ID and the integrity protection algorithm ID may be the content of the security policy. The nonce is a random parameter, which can be selected by the KMS, or carried by the UE in the session request. The purpose of using the random number calculation is to improve the security and randomness of the key. It is also possible that the key derivation includes at least one of two nonces, one of which comes from the KMS (selected by the KMS, sent directly to the UE, or sent to the UE through the SM), and the other nonce is from the UE (the session is carried by the UE) Request).

3. The KMS sends the protection key KSID to the SM, possibly including the UE ID and/or the network ID.

4. The SM calculates an encryption protection key and/or an integrity protection key according to the security policy and the K_SID. Calculation methods include but are not limited to the following methods:

The encryption protection key KSID_enc is:

KSID_enc=KDF (KSID, (encryption algorithm ID, UE ID, session ID, bearer ID, flow ID, slice ID, PLMN ID, service parameter, nonce, at least one of policy set)).

or:

KSID_enc=KDF (KSID, (encryption identifier, UE ID, session ID, bearer ID, flow ID, slice ID, PLMN ID, service parameter, nonce, at least one of policy set)).

The integrity protection key KSID_int is:

KSID_int=KDF (KSID, (integrity protection identifier, UE ID, session ID, bearer ID, flow ID, slice ID, PLMN ID, service parameter, nonce, at least one of policy set)).

or,

KSID_int=KDF (KSID, (integrity protection algorithm ID, UE ID, session ID, bearer ID, flow ID, slice ID, PLMN ID, service parameter, nonce, at least one of policy set)).

5. The SM distributes the key obtained in the fourth step (ie, at least one of the encryption protection key KSID_enc and the integrity protection key KSID_int) to the gateway (or server, or controller, or UE2) and UE1. The message may also include at least one of a network ID, a UE ID, and a security policy. Specifically, the SM may carry the protection key in a User Plane Setup message to the gateway (or the server, or the controller, or the UE2), and carry the protection key in the Session Setup Complete message. Send to the UE.

It is also possible that in step 5, the SM does not send the key obtained in step 4 to the UE, but performs either of the following two processes:

The first possible process: the SM sends a security policy to the UE, and the message may be

Also included is at least one of a network ID and a UE ID. The UE receives the security policy from the SM (or policy control, or KMS), and calculates the protection key in the same manner as the above embodiment according to the security policy. If the UE calculates the protection key to use the random parameter, the random parameter may be sent by the KMS to the UE, or may be generated by the UE itself. It is also possible that the key derivation contains at least one of two nones, one of which comes from KMS (by KMS) Alternatively, it is sent directly to the UE, or sent to the UE through the SM), and another nonce is from the UE (in the session request by the UE).

The first possible process: the SM sends the KSID and the security policy to the UE, and the UE from the SM (or

The KSID and the security policy are received at the policy control, or KMS), and the protection key is calculated in the same manner as the above embodiment according to the security policy. If the UE calculates the protection key to use the random parameter, the random parameter may be sent by the KMS to the UE, or may be generated by the UE itself. It is also possible that the key derivation includes at least one of two nonces, one of which comes from the KMS (selected by the KMS, sent directly to the UE, or sent to the UE through the SM), and the other nonce is from the UE (the session is carried by the UE) Request).

The above discloses that the UE itself generates or obtains at least one of the protection key KSID, the encryption protection key KSID_enc, and the integrity protection key KSID_int from the SM. In addition, it is also possible that the UE is from the KMS (or the policy control network element) Receiving at least one of a protection key KSID, an encryption protection key KSID_enc, and an integrity protection key, and a security policy.

It can be seen from the above process that the difference between FIG. 11 and FIG. 8 to FIG. 10 is that after the KMS derives the KSID, the KSID is sent to the SM, and the SM further derives the encryption protection key KSID_enc and/or integrity according to the KSID. The protection key KSID_int is transmitted, and the encryption protection key KSID_enc and/or the integrity protection key KSID_int are sent to both ends of the end-to-end communication. That is to say, two different network element devices perform key derivation each time.

The difference between FIG. 12 and FIG. 11 is that after the KMS derives the KSID, the KSID is sent to the SM, and the SM sends the KSID to the gateway (or server, or controller, or UE2) and the UE; the gateway (or server, or control) The UE, or UE2) and UE1 derive the cipher protection key KSID_enc and/or the integrity protection key KSID_int according to the KSID.

It is also possible for the SM to derive the cryptographic protection key KSID_enc and/or the integrity protection key KSID_int according to the KSID, and send the KSID_enc and KSID_int to the UE.

It is also possible that the SM only sends the security policy to the UE, and the UE derives the encrypted protection key KSID_enc and/or the integrity protection key KSID_int according to the security policy.

For the transfer of other parameters in the message and the formula for derivation, reference may be made to the embodiment corresponding to FIG. The above message may include at least one of a security policy, a network ID, and a UE ID.

The difference between FIG. 13 and FIG. 11 is that the SM holds the shared key, derives the KSID, and then derives the encryption protection key KSID_enc and/or the integrity protection key KSID_int based on the KSID, and sends the encryption protection key KSID_enc. And/or integrity protection key KSID_int to the gateway (or server, or controller, or UE2) and the UE.

It is also possible that the SM sends the KSID and the security policy to the UE to cause the UE to derive the cryptographic protection key KSID_enc and/or the integrity protection key KSID_int.

Refer to Figure 11 for the transfer of other parameters in the message and the formula for the derivation. The above message includes at least one of a security policy, a network ID, and a UE ID.

The difference between FIG. 14 and FIG. 11 is that the SM derives the KSID, and then sends the KSID to the gateway (or server, or controller, or UE2) and the UE; then the gateway (or server, or controller, or UE2) and the UE. According to the KSID, the encryption protection key KSID_enc and/or the integrity protection key KSID_int are derived.

It should be noted that, in the foregoing embodiment, the key derivation is mainly performed by using a KMS or an SM. In addition, the protection key may also be used by the UE, AN, MM, AU, KMS, AAA, SM, or The Policy control network element is derived.

For the process of deriving the MME into a protection key, refer to the process in which the SM is derived into a protection key in the foregoing embodiment.

The policy control can perform the derivation of the key by the same process as the above KMS, that is, after receiving the key request, the key is deduced. It is also possible to perform the derivation of the security key immediately after the policy control determines the security policy. The process is shown in Figure 15.

As shown in Figure 15, the policy control network element derives the process of deriving the protection key, including the following steps:

1. After determining the security policy or receiving the security policy from the SM, the policy control network element derives the key into a key. Specifically, at least one of the KSID, KSID_enc, and KSID_int can be directly calculated, or the KSID can be calculated first, and then The KSID calculates at least one of KSID_enc and KSID_int. The policy control may receive the shared key from other network elements (KMS, AU, SM, MM or AAA) after the end of the terminal authentication; or initiate a key request, the UE ID is protected in the request, and the shared key is obtained. .

The specific manner of deriving the key into the key can be seen in the above embodiment.

2. The policy control NE sends the generated key (and possibly the security policy) to the SM, and then the SM sends the key to both ends of the end-to-end communication.

Alternatively, the policy control network element sends the generated key (and possibly a security policy) to the UE through the SM, and directly sends the generated key to the other end of the end-to-end communication.

Alternatively, send a protection key (and possibly a security policy) directly to the UE.

Or, send KSID to SM, SM then deduct and send KSID_enc and KSID_int to both ends.

In the case where the UE derives the protection key, the UE receives the security policy from the SM (or policy control, or KMS), and calculates the protection key in the same manner as the above embodiment according to the security policy. If the UE needs to use a random parameter to calculate the protection key, the random parameter may be sent by the KMS to the UE, or may be generated by the UE itself. It is also possible that the key derivation includes at least one of two nonces, one of which is from the KMS (selected by the KMS, sent directly to the UE, or sent to the UE through the SM), and the other nonce is from the UE (the UE is carried by the UE) In the request,).

Alternatively, the UE receives at least one of the protection key KSID, the encryption protection key KSID_enc, and the integrity protection key KSID_int from the SM (or policy control, or KMS), or after the UE receives the KSID, calculates the KSID according to the KSID. KSID_enc and KSID_int.

The parameter bearer ID used in the UE derivation. The flow ID, the slice ID, and the session ID may be internal to the UE, or may be sent to the UE by the network element (such as KMS, MM, SM, policy control, AU, gateway, AAA, etc.). , as sent to the UE via a session response message.

As mentioned above, the above illustration only takes end-to-end session protection as an example. It should be emphasized that the end-to-end protection based on bearer, flow flow or slice is similar to the above example, but the above illustration is required. The session parameter in the field is replaced with a corresponding parameter. Specifically, the session ID is correspondingly replaced with a bearer ID, a flow flow ID, or a slice ID. The user plane setup message is replaced with a bearer setup message, a flow flow setup message, or a slice setup message.

The key negotiation process and the security policy negotiation process have no specific sequence. For example, the generation of the KSID key may be performed before, during, or after the establishment of the session (bearer, flow flow, or slice). The generation of the encryption and/or integrity protection key can be done at any node after the KSID is generated.

As shown in FIG. 4 and FIG. 5, the process shown in FIG. 7 is a process of determining a security policy or a key configuration process when the UE1 sends a session, bearer, flow flow, or slice request to the carrier network, and the operator network agrees to the request. It should be noted that if the operator network does not agree with the session, bearer, flow flow or slice request of UE1, a reject message is sent to UE1.

In the flow shown in Figure 2-9, the security requirement is the case where the security-based endpoint is in the User plane function (UPF). The endpoint of security protection may also be branching point or ULCL at the branch point.

The endpoint of the security protection may be determined by a Mobility Management (MM) network element, a session management network element (SMS), an Authentication Service Function (AUSF), and a security anchor function network element. (Security Anchor Function, SEAF), Mobility Management Entity (MME), Home Subscriber Server (HSS), Authentication Center (AuC), Authentication Trust Store and Processing Function Network Authentication Credential Repository and Processing Function (ARPF), Security Context Management Function (SCMF), Access and Mobility Management Function (AMF), Access Node (Access network) , AN), User plane function (UPF), authentication unit (English: Control Plane-Authentication Unit, CP-AU), or security policy determination module.

The following is only explained by the security policy determination module to determine the endpoint of security protection.

In the flow shown in FIG. 2 to FIG. 9, after the UE1 sends the attach request, or after the mutual authentication succeeds, or during the establishment session of the UE1 (the UE1 may also send the session request before the UE1 sends the session request). Thereafter, the security policy determination module may further perform the steps of: determining the endpoint of the security protection. If the security protection endpoint is UPF, performing the two-way authentication in the process shown in FIG. 2-9 or the UE1 sending the session request. If the endpoint of the security protection is AN, the security requirements of the process shown in Figure 2-9 and the security requirements of UE2 (security requirements) A case of 4) is replaced by the security requirements of the AN. The security requirement of the AN may be obtained by, on the basis of the previous embodiment, after receiving the request message of the UE1, the AN sends the security requirements of the AN to the network together.

16(a) and 16(b) are scenes of branch branching. In this scenario, the security policy determination module needs to determine whether the endpoint of the security protection is the branching point or the UPF. If the endpoint of the security protection is UPF, the steps of the two-way authentication in the flow shown in FIG. 2-9 or the UE1 sending the session request are performed. If the endpoint of the security protection is the branching point, the security requirement 3 in the process shown in FIG. 2-9 or the security requirement of UE2 (a case of security requirement 4) is replaced with the security requirement of the branching point.

17 is a scenario in which the session link is a UE-AN-UPF (uplink classifier functionality, ULCL)-UPF (anchor). In this scenario, the security policy determination module needs to determine whether the security protection endpoint is UPF (ULCL) or UPF (anchor). If it is UPF (anchor), perform the two-way authentication or UE1 in the process shown in FIG. 2-9. Steps after sending a session request. If the endpoint of the security protection is ULCL, the security requirement 3 in the process shown in Figures 2-9 or the security requirement of UE2 (a case of security requirement 4) is replaced with the security requirement of ULCL.

For the Home-routed roaming scenario shown in FIG. 18, the user plane path is UE-AN-UPF (VPLMN)-UPF (HPLMN). The end point of the end-to-end security protection may be UPF (visited public land mobile network, VPLMN) or UPF (home public land mobile network, HPLMN). Scenario, the security policy determines whether the endpoint to determine whether the security protection needs to be UPF (VPLMN) or UPF (HPLMN). If it is UPF (VPLMN), security requirement 3 is the security requirement of the gateway of the VPLMN. If it is UPF (HPLMN), then Security requirement 3 is the security requirement for the gateway of HPLMN.

The security policy determining module may receive the configuration information or the node policy of the UE1 according to other functional network elements, such as the HSS, AUSF, ARPF, AMF, SEAF, SCMF, SM, or AuC, or obtain the UE or the session from the local storage ( Or the configuration information or the node policy of the flow, bearer, and slice, and determine whether the endpoint of the security protection is AN, branching point, ULCL, or UPF according to the configuration information of the UE or the session (or flow, bearer, slice). This node policy can be a node policy for each UE, can be a node policy for such a service, can be a node policy for such a slice, and can be a node policy for such a data type. In addition, the security policy determination module may also determine the endpoint of the security protection according to the security requirements of the service or the security requirements of the server side, the service type, the slice type, or the slicing policy.

The above examples are all security policy negotiation for session granularity and session data protection key generation and distribution process. It should be noted that the above method is also applicable to security policy negotiation for slice granularity and generation and distribution of data protection keys in slices. The specific implementation is similar to the session granularity, except that the session ID is a slice ID, and the protection key of the UE in the slice is determined, and the protection node may be a function network element in the slice, such as UPF.

The security policy determination module of the slice may be set in a mobility management (MM) network element, a session management network element (Sssion Management, SM), an authentication service controller (AUSF), and a security anchor function network element. (Security Anchor Function, SEAF), Mobility Management Entity (MME), Home Subscriber Server (HSS), Authentication Center (AuC), Authentication Trust Store and Processing Function Network Authentication Credential Repository and Processing Function (ARPF), Security Context Management Network Element (Security) Context Management Function (SCMF), Access and Mobility Management Function (AMF), AN node, UPF node, Control Plane-Authentication Unit (CP-AU), Or a security policy determination module.

The specific security policy determination process is divided into the following three cases:

Before the session is established, the slice security policy determination module (for example, may be equivalent to the above security policy determination module),

After the authentication is completed, in the same manner as the previous embodiment, at least one according to the security capability of the UE1, the service security requirement, the security capability of the functional network element in the slice, the security capability of the UE1 preset by the network, and the security requirement of the application server side. The item determines the security policy of the slice, wherein the security capability of the function network element in the slice can be obtained by HSS, AUSF, ARPF, AMF, SEAF, SCMF, SM or AuC.

In the session establishment, the slice security policy is determined in a similar manner as before.

After the session is established, the session establishment process does not include the negotiation of the security policy and the key, and after the session is established, the security policy of the slice is determined.

After the security policy determination module determines the security policy of the slice, the security policy of the slice is sent to the UE. The process of distributing the key is similar to the process of the session. The UE and the intra-slice function network element obtain the security protection key and security protection policy.

The key configuration process in the embodiment of the present application can configure a session protection key for the UE and the gateway (or the DN server or the UE 2). Therefore, the end-to-end session protection is implemented based on the 5G mobile communication architecture. Compared with the existing method of segment encryption, it has better security.

The security policy can be determined according to the security requirements of the UE, the carrier network, and the data network. Therefore, the session protection key can be determined according to the security requirements of different parties, and all the service data in the prior art are the same on the base station side. In terms of encryption of the protection key, differentiated security protection can be achieved.

FIG. 19 is a schematic diagram of an SM network element, a communication component, and a processor, and may further include a memory. The communication component is configured to receive a request for end-to-end communication. The processor is used to obtain security policies. The communication component is further configured to send the security policy and/or the protection key to the user equipment, and send the security policy and/or the protection key to another end device of the end-to-end communication . For the specific implementation of the functions of the communication component and the processor, refer to FIG. 2 to FIG. 15 , and details are not described herein again.

The embodiment of the present application further discloses a KMS, MM, HSS, and Policy control network element. The specific structure is shown in FIG. 20, and the specific implementation manners of the functions of the communication component and the processor can be seen in FIG. 2 to FIG. I won't go into details here.

FIG. 21 is a user equipment according to an embodiment of the present disclosure, including a communication component and a processor, and the communication component and the processor can communicate through a bus.

The communication component is used to send a request and receive a response. The request includes an identifier of the user equipment. The response carries a security policy.

The processor is configured to obtain a protection key, where the protection key is used to protect the end-to-end communication, where the protection key is based on the security policy and sharing between the user equipment and the operator network Key determination.

For the specific implementation of the functions of the communication component and the processor, refer to FIG. 2 to FIG. 15 , and details are not described herein again.

The above various devices can realize the determination of the security policy and the generation of the end-to-end protection key by mutual cooperation, thereby implementing end-to-end session protection based on the 5G mobile communication architecture.

The various embodiments in the specification are described in a progressive manner, and each embodiment focuses on differences from other embodiments, and the same or similar parts of the respective embodiments may be referred to each other.

Claims

A key configuration method, comprising:

The session management network element receives the end-to-end communication request, and the end-to-end communication request includes an identifier of the user equipment as one end of the end-to-end communication;

The session management network element obtains a security policy, and the security policy is based on user security requirements of the user equipment preset in the home subscriber server, service security requirements from the user equipment, and security capability requirements supported by the user equipment. At least one determination of a security capability requirement from a carrier network and a security requirement of the other end device of the end-to-end communication;

The session management network element obtains a protection key, and the protection key is used to protect the end-to-end communication, where the protection key is based on the security policy and the user equipment and the operator network. Shared key determination;

Transmitting, by the session management network element, the security policy and/or the protection key to the user equipment;

The session management network element sends the security policy and/or the protection key to the other end device of the end-to-end communication.
The method according to claim 1, wherein the request for the end-to-end communication further comprises: at least one of a network identifier and a service parameter.
The method according to claim 2, wherein the obtaining the protection key comprises:

And obtaining the protection key according to the security policy, the shared key, and the parameter derivation, where the parameter includes at least one of an identifier of the user equipment, the network identifier, and the service parameter.
The method according to claim 3, further comprising: before the session management network element derives the protection key according to the security policy, the shared key, and the parameter, further comprising:

The session management network element sends a security policy request to the policy control network element of the operator, where the security policy request includes at least one of an identifier of the user equipment, the network identifier, and a service parameter, where the user At least one of an identifier of the device, the network identifier, and a service parameter is used by the policy control network element to identify the security policy;

The session management network element receives the security policy sent by the policy control network element of the operator.
The method according to claim 4, wherein the security policy request further comprises:

The session management network element pre-acquires a security requirement set, where the security requirement set includes a user security requirement of the user equipment preset in the home user server, a service security requirement from the user equipment, and the At least one of a security capability requirement supported by the user equipment, and a security requirement of the other end device of the end-to-end communication.
The method according to claim 3, further comprising: before the session management network element derives the protection key according to the security policy, the shared key, and the parameter, further comprising:

Obtaining user security requirements of the user equipment at one end of the end-to-end communication preset in the home subscriber server, service security requirements from the user equipment, security capability requirements supported by the user equipment, and from a carrier network At least one of a security capability requirement, and a security requirement of the other end device of the end-to-end communication;

According to the obtained user security requirement of the user equipment at one end of the end-to-end communication preset in the home subscriber server, the service security requirement from the user equipment, the security capability requirement supported by the user equipment, and the operation The security policy is determined by at least one of a security capability requirement of the quotient network and a security requirement of the other end device of the end-to-end communication.
The method according to claim 5 or claim 6, wherein the obtaining the user security requirements of the end user equipment that is preset in the home subscriber server as the end-to-end communication comprises:

After receiving the request for the end-to-end communication, sending a security requirement request to the network element of the carrier network to obtain a user security requirement of the user equipment preset in the home subscriber server;

Or obtaining, from the request for the end-to-end communication, a user security requirement of the user equipment preset in the home subscriber server.
The method according to claim 5 or 6, wherein the obtaining the security requirement from the user equipment and the security capability requirement supported by the user equipment comprises:

Obtaining, from the request for the end-to-end communication, the service security requirement from the user equipment and/or the security capability requirement supported by the user equipment.
The method according to claim 5 or 6, wherein the obtaining security capability requirements from the operator network comprises:

Sending a security requirement request to the policy control network element of the carrier network, where the security requirement request includes at least one of an identifier of the user equipment and the network identifier;

Receiving, by the policy control network element of the operator network, the security capability requirement from the operator network, where the identifier of the user equipment and the network identifier are used by the policy control network element identifier Security capability requirements from the carrier network.
The method according to claim 5 or 6, wherein the security requirements of the other end device for obtaining the end-to-end communication include:

Sending a security requirement request to a policy control network element of the carrier network;

Receiving, by the policy of the operator network, a security requirement of the other end device of the end-to-end communication sent by the network element; or

Sending a security requirement request to the other end device of the end-to-end communication, and receiving a security requirement of the other end device of the end-to-end communication sent by the other end device of the end-to-end communication;

The security requirement request includes at least one of an identifier of the user equipment and the service parameter, and at least one of an identifier of the user equipment and the service parameter is used for the end-to-end communication. One end of the device looks for the security requirements of the other end of the end-to-end communication.
The method according to claim 6, wherein the user security requirement of the user equipment at one end of the end-to-end communication preset in the home subscriber server, the service security requirement from the user equipment, Determining the security policy includes: at least one of a security capability requirement supported by the user equipment, a security capability requirement from the operator network, and a security requirement of the other end device of the end-to-end communication, the determining the security policy includes:

According to the user security requirements of the user equipment at the end of the end-to-end communication preset in the home subscriber server, the service security requirements from the user equipment, the security capability requirements supported by the user equipment, and the network from the operator. Determining a security policy in one of the security capability requirements and the security requirements of the other end device of the end-to-end communication; or,

According to the user security requirements of the user equipment at the end of the end-to-end communication preset in the home subscriber server, the service security requirements from the user equipment, the security capability requirements supported by the user equipment, and the network from the operator. Of the security requirements and the security requirements of the other end of the end-to-end communication, and by default The rules determine the security policy.
The method according to claim 6, wherein the user security requirement from the user equipment at the end of the end-to-end communication preset in the home subscriber server, the service security requirement from the user equipment, At least one of the security capability requirements supported by the user equipment, the security capability requirement from the operator network, and the security requirement of the other end device of the end-to-end communication, before determining the security policy, the method further includes:

The session management network element obtains the configuration information or the node policy of the user equipment according to the configuration information or the node policy of the user equipment, or obtains the configuration information or the node policy of the user equipment from the local storage, or according to the security requirements of the service, the security requirements of the server side, the service type, The security capability or the slicing policy of the user equipment determines that the endpoint of the security protection is at the user plane node UPF;

Alternatively, the session management network element receives a node configuration parameter from the policy control network element of the operator, where the node configuration parameter indicates that the security protection endpoint is at the user plane node UPF.
The method of claim 6 wherein:

The UPF is a UPF of the visited public land mobile communication network VPLMN, and the security capability requirement from the operator network is a security requirement of the gateway of the VPLMN;

The UPF is the UPF of the home public land mobile communication network HPLMN, and the security capability requirement from the operator network is the security requirement of the gateway of the HPLMN.
The method according to claim 11, wherein the content of the security requirement comprises:

An algorithm for security protection, the security protection algorithm comprising an encryption algorithm and/or an integrity protection algorithm.
The method according to claim 14, wherein the content of the security requirement further comprises:

The length of the key and/or the update time of the key.
The method of claim 14 wherein the format of the security requirement comprises:

a plurality of 8-bit bytes, the plurality of 8-bit bytes including any one of the following: an 8-bit byte for indicating an identification of a security requirement, an 8-bit byte for indicating a length of content of the security requirement, An 8-bit byte indicating whether the security requirement requires an encryption algorithm, an 8-bit byte indicating whether the security requirement requires an integrity protection algorithm, an 8-bit byte indicating the length of the encryption algorithm, and is used to represent integrity protection. 8-bit byte of the length of the algorithm, 8-bit byte used to indicate whether the key needs to be updated, 8-bit byte used to represent a specific encryption algorithm, 8-bit byte used to represent a specific integrity protection algorithm .
The method according to claim 3, further comprising: before the session management network element derives the protection key according to the security policy, the shared key, and the parameter, further comprising:

Receiving the shared key sent by a key management center of the carrier network;

Alternatively, the shared key is obtained locally.
The method of claim 2, wherein obtaining the protection key comprises:

Sending a key request to the key management center of the operator, where the key request includes at least one of an identifier of the user equipment, the network identifier, the service parameter, and a security policy, where the user equipment At least one of the identifier, the network identifier, and the service parameter is used by the key management center to determine the shared key;

Receiving the protection key sent by the key management center.
The method according to any one of claims 1 to 18, wherein the method further comprises:

The session management network element sends the network identifier to one end of the end-to-end communication; and/or the session management network element sends the network identifier to the other end device of the end-to-end communication.
A key configuration method, comprising:

The key management center receives a key request, where the key request includes a security policy and a parameter, and the parameter includes at least one of an identifier, a network identifier, and a service parameter of the user equipment as one end of the end-to-end communication; The security policy is based on user security requirements of the user equipment preset in the home server, service security requirements from the user equipment, security capability requirements supported by the user equipment, security capability requirements and requirements from the operator network. Determining at least one determination of the security requirements of the other end device of the end-to-end communication;

Determining, by the key management center, a shared key between the user equipment and the operator network according to the identifier of the user equipment;

The key management center generates a protection key according to the security policy, the shared key, and the parameter, where the protection key is used to protect the end-to-end communication;

Sending, by the key management center, the protection key to the user equipment;

The key management center transmits the protection key to the other end device of the end-to-end communication.
The method according to claim 20, further comprising: after the key management center generates the protection key according to the security policy, the shared key, and the parameter, further comprising:

The key management center sends the protection key to the session management network element of the operator.
The method according to claim 20, wherein the shared key is a shared secret between the user equipment and the operator network obtained after the user equipment and the operator network are authenticated in both directions. key.
A key configuration method, comprising:

The user equipment sends a request, where the request includes an identifier of the user equipment;

The user equipment receives a response, and the response carries a security policy, where the security policy is based on user security requirements of the user equipment preset in the home subscriber server, service security requirements from the user equipment, and the user equipment. At least one determination of a supported security capability requirement, a security capability requirement from an operator network, and a security requirement of the other end device of the end-to-end communication;

The user equipment acquires a protection key, where the protection key is used to protect the end-to-end communication, where the protection key is based on the security policy and between the user equipment and the carrier network. Shared key ok.
The method according to claim 23, wherein the sending, by the user equipment, the request comprises:

The user equipment sends a service parameter and a security requirement set, where the security requirement set includes a service security requirement of the user equipment and/or a security capability requirement supported by the user equipment.
The method of claim 24, wherein the request further comprises:

The session ID, bearer ID, flow flow ID or slice ID generated by the user equipment.
The method according to claim 24, wherein the obtaining the protection key comprises:

And obtaining the protection key according to the security policy, the shared key, and the parameter derivation, where the parameter includes at least one of an identifier of the user equipment, the network identifier, and the service parameter.
The method according to claim 26, further comprising: before the obtaining the protection key according to the security policy, the shared key, and the parameter derivation, further comprising:

Receiving the shared key sent by the operator's key management center; or

Obtaining the shared key locally; or,

Obtaining the user equipment and the operator network after the user equipment and the operator network are authenticated in both directions The shared key between.
The method according to claim 26 or 27, wherein before the obtaining the protection key according to the security policy, the shared key, and the parameter derivation, the method further includes:

Receiving the network identifier sent by the session management network element of the carrier network.
The method according to claim 24, wherein the obtaining the protection key comprises:

The user equipment receives the protection key sent by a key management center or a session management center of the operator network.
A method for determining a security policy, comprising:

The policy control network element of the operator receives the security policy request, where the security policy request includes the user security requirement of the user equipment preset in the home subscriber server, the service security requirement from the user equipment, and the user equipment support. At least one of a security capability requirement and a parameter, the parameter comprising at least one of an identity, a network identity, and a service parameter of the user equipment as one end of the end-to-end communication;

The policy control network element generates a security policy according to the security requirement set, where the security requirement set includes at least a user security requirement of the user equipment preset in the home subscriber server, a service security requirement from the user equipment, and At least one of the security capability requirements supported by the user equipment;

The policy control network element sends the security policy.
The method according to claim 30, wherein the set of security requirements further comprises:

At least one of a security capability requirement from an operator network and a security requirement of the other end device of the end-to-end communication.
The method according to claim 31, wherein obtaining security requirements of the operator network comprises:

After receiving the security policy request, the security requirement of the pre-stored carrier network is obtained locally.
The method according to claim 31, wherein the security requirements of the other end device that acquires the end-to-end communication include:

Receiving a security requirement of the other end device of the end-to-end communication sent by the session management network element; or

Sending a security requirement request to the other end device of the end-to-end communication, and receiving a security requirement sent by the other end device of the end-to-end communication;

The security requirement request includes at least one of an identifier, a network identifier, and a service parameter of the user equipment, where at least one of an identifier, a network identifier, and a service parameter of the user equipment is used for the end-to-end communication. The other end device marks the security requirements of the other end device of the end-to-end communication.
The method according to claim 31, wherein the generating the security policy according to the security requirement set comprises:

According to the user security requirements of the user equipment at the end of the end-to-end communication preset in the home subscriber server, the service security requirements from the user equipment, the security capability requirements supported by the user equipment, and the network from the operator. Determining a security policy in one of the security capability requirements and the security requirements of the other end device of the end-to-end communication; or,

According to the user security requirements of the user equipment at the end of the end-to-end communication preset in the home subscriber server, the service security requirements from the user equipment, the security capability requirements supported by the user equipment, and the network from the operator. Of the security requirements and the security requirements of the other end of the end-to-end communication, and by default The rules determine the security policy.
The method according to claim 34, further comprising: before the generating the security policy according to the security requirement set, the method further comprises:

The policy control network element of the operator obtains the configuration information or the node policy of the user equipment according to the configuration information or the node policy of the user equipment, or obtains the configuration information or the node policy of the user equipment from the local storage, or according to the security requirement of the service, the security requirement of the server side, The service type, the security capability of the user equipment, or the slicing policy determines that the endpoint of the security protection is at the user plane node UPF.
The method according to claim 35, wherein the UPF is a UPF of a visited public land mobile communication network VPLMN, and the security capability requirement from the operator network is a security requirement of a gateway of the VPLMN;

The UPF is the UPF of the home public land mobile communication network HPLMN, and the security capability requirement from the operator network is the security requirement of the gateway of the HPLMN.
The method according to claim 30, further comprising: before the generating the security policy according to the security requirement set, the method further comprises:

The operator's policy control network element determines that the security protection endpoint is at the branch point branching point or the uplink data classifier function ULCL;

The security requirement set also includes:

The branching point or the security requirements of the ULCL.
The method of claim 34, wherein the content of the security requirement comprises:

An algorithm for security protection, the security protection algorithm comprising an encryption algorithm and/or an integrity protection algorithm.
The method of claim 38, wherein the content of the security requirement further comprises:

The length of the key and/or the update time of the key.
A method for determining a security policy, comprising:

The mobility management network element receives a request of the user equipment, where the request of the user equipment includes an identifier of the user equipment that is one end of the end-to-end communication;

The mobility management network element sends an end-to-end communication request, where the end-to-end communication request includes an identifier of the user equipment, and the end-to-end communication request is used to trigger establishment of a security session, The security policy is based on at least one of user security requirements of the user equipment preset in the home server, service security requirements from the user equipment, security capability requirements supported by the user equipment, and security capability requirements from the operator network. Kind of determination.
The method according to claim 40, further comprising: before the request of the mobility management network element to send end-to-end communication, further comprising:

The mobility management network element generates a network identifier;

The request for the end-to-end communication further includes: the network identifier.
The method of claim 41, further comprising:

The mobility management network element obtains a user identity and a user security requirement of the user equipment preset in the home subscriber server from the home subscriber server;

Acquiring the user security requirement of the user equipment preset in the home subscriber server according to the identifier of the user equipment in the request for the end-to-end communication.
The method according to claim 42, wherein the request for the end-to-end communication further comprises:

User security requirements of the user equipment preset in the home subscriber server.
The method according to any one of claims 40 to 43, wherein the request of the user equipment further includes:

At least one of a service parameter, a service security requirement from the user equipment, and a security capability requirement supported by the user equipment.
The method according to claim 44, wherein the request for the end-to-end communication further comprises:

At least one of a service parameter, a service security requirement from the user equipment, and a security capability requirement supported by the user equipment.
A method for determining a security policy, comprising:

The home subscriber server receives a security requirement request, where the security requirement request includes a user identifier, and the home subscriber server stores a user security requirement of the user equipment preset in the home subscriber server;

Determining, by the home subscriber server, a user security requirement of the user equipment preset in the home subscriber server according to the user identifier;

The home user server sends the user security requirement of the user equipment preset in the home subscriber server, and the user security requirement of the user equipment preset in the home subscriber server is used to generate a security policy.
A key configuration method, comprising:

The session management network element receives the end-to-end communication request, and the end-to-end communication request includes an identifier of the user equipment as one end of the end-to-end communication;

The session management network element obtains a security policy, and the security policy is based on user security requirements of the user equipment preset in the home subscriber server, service security requirements from the user equipment, and security capability requirements supported by the user equipment. At least one determination of a security capability requirement from a carrier network and a security requirement of the other end device of the end-to-end communication;

The session management network element acquires a first key, where the first key is used to protect the end-to-end communication, where the first key is according to the security policy and the user equipment and the operation Shared key determination between commercial networks;

The session management network element generates an encryption protection key and/or an integrity protection key according to the security policy and the first key, where the encryption protection key is used for confidentiality of the end-to-end communication Protecting, the integrity protection key is used to complete the end-to-end communication;

Sending, by the session management network element, the security policy to the user equipment;

The session management network element transmits at least one of the encryption protection key and the integrity protection key shown to the other end device of the end-to-end communication and the security policy.
The method of claim 47, further comprising:

The session management network element sends the first key to the user equipment, so that the user equipment generates the encryption protection key and/or the according to the security policy and the first key. Integrity protection key.
The method of claim 47, further comprising:

The session management network element sends the encryption protection key and/or the integrity protection key to the user equipment.
A key configuration method, comprising:

The user equipment sends a request, where the request includes an identifier of the user equipment;

The user equipment receives a response, and the response carries a security policy, where the security policy is based on user security requirements of the user equipment preset in the home subscriber server, service security requirements from the user equipment, and the user equipment. At least one determination of a supported security capability requirement, a security capability requirement from an operator network, and a security requirement of the other end device of the end-to-end communication;

The user equipment acquires an encryption protection key and/or an integrity protection key, where the encryption protection key is used to perform confidentiality protection on the end-to-end communication, and the integrity protection key is used to End-to-end communication for integrity.
The method of claim 50, wherein the request further comprises:

At least one of a network identifier, a service security requirement of the user equipment, and a security capability requirement supported by the user equipment.
The method according to claim 50, wherein the acquiring, by the user equipment, the encryption protection key and/or the integrity protection key comprises:

The user equipment acquires a first key, where the first key is determined according to the security policy and a shared key between the user equipment and the operator network;

The user equipment generates an encryption protection key and/or an integrity protection key according to the security policy and the first key.
The method according to claim 50, wherein the acquiring, by the user equipment, the encryption protection key and/or the integrity protection key comprises:

The user equipment receives an encryption protection key and/or an integrity protection key.
A method for determining a security policy, comprising:

The operator's policy control network element or mobility management network element determines the endpoint of the security protection;

In the case that the endpoint of the security protection is the user plane node UPF, the policy control network element or the mobility management network element is based on the user security requirement of the user equipment preset in the home subscriber server, from the user. At least one of a service security requirement of the device and a security capability requirement supported by the user device, and at least one of a security capability requirement from the operator network and a security requirement of the other end device of the end-to-end communication generates a security policy ;

In the case that the security protection endpoint is another device, the policy control network element or the mobility management network element is based on the user security requirement of the user equipment preset in the home subscriber server, from the user. A security policy is generated by at least one of a service security requirement of the device and a security capability requirement supported by the user device, and a security requirement of the other device, the branch device or the uplink data classifier function ULCL.
The method of claim 54 wherein said determining an endpoint of security protection comprises:

Obtaining the configuration information or the node policy of the user equipment according to the other functional network element of the network of the operator, or obtaining the configuration information or the node policy of the user equipment from the local storage, or according to the received service Security requirements, or server-side security requirements, service types, or slicing policies, determine the endpoint of security protection.
The method according to claim 54 or 55, wherein the UPF is a UPF of a visited public land mobile communication network VPLMN, and the security capability requirement from the operator network is a security requirement of a gateway of the VPLMN;

The UPF is the UPF of the home public land mobile communication network HPLMN, and the security capability requirement from the operator network is the security requirement of the gateway of the HPLMN.
A session management network element, comprising:

a communication component for receiving an end-to-end communication request, the request for the end-to-end communication including an identifier of a user equipment as one end of the end-to-end communication;

a processor, configured to obtain a security policy, where the security policy is based on a user security requirement of the user equipment preset in the home subscriber server, a service security requirement from the user equipment, and a security capability requirement supported by the user equipment, At least one determination of a security capability requirement from an operator network and a security requirement of the other end device of the end-to-end communication; and obtaining a protection key for performing the end-to-end communication Protection, the protection key is determined according to the security policy and a shared key between the user equipment and the operator network;

The communication component is further configured to send the security policy and/or the protection key to the user equipment;

The communication component is further configured to send the security policy and/or the protection key to the other end device of the end-to-end communication.
The session management network element according to claim 57, wherein the request for the communication component to receive end-to-end communication comprises:

The communication component is specifically configured to receive a request for end-to-end communication, where the request for the end-to-end communication further includes: at least one of a network identifier and a service parameter.
The session management network element according to claim 58, wherein the acquiring, by the processor, the protection key comprises:

The processor is specifically configured to obtain the protection key according to the security policy, the shared key, and the parameter derivation, where the parameter includes an identifier of the user equipment, the network identifier, and the service parameter. At least one.
The session management network element according to claim 59, wherein the communication component is further configured to:

Before the processor obtains the protection key according to the security policy, the shared key, and the parameter, sending a security policy request to the policy control network element of the operator, where the security policy request includes At least one of the identifier of the user equipment, the network identifier, and the service parameter, where at least one of the identifier of the user equipment, the network identifier, and the service parameter is used by the policy control network element to identify the security policy; And receiving the security policy sent by the policy control network element of the operator.
The session management network element according to claim 60, wherein the sending, by the communication component, the security policy request to the policy control network element of the operator includes:

The communication component is specifically configured to: send a security policy request to the policy control network element of the operator, where the security policy request further includes: a security requirement set acquired in advance by the session management network element, the security requirement set The user security requirement of the user equipment preset in the home subscriber server, the service security requirement from the user equipment, the security capability requirement supported by the user equipment, and the other end of the end-to-end communication At least one of the security requirements of the device.
The session management network element according to claim 59, wherein the processor is further configured to:

Obtaining user security requirements of the user equipment at one end of the end-to-end communication preset in the home subscriber server, service security requirements from the user equipment, security capability requirements supported by the user equipment, and from a carrier network At least one of a security capability requirement and a security requirement of the other end device of the end-to-end communication; and according to the acquired user of the end user device preset as the end-to-end communication in the home subscriber server Security requirements, service security requirements from the user equipment, security capability requirements supported by the user equipment, from the carrier network The security policy is determined by at least one of a security capability requirement and a security requirement of the other end device of the end-to-end communication.
The session management network element according to claim 61 or 62, wherein the processor is further configured to:

After receiving the request for the end-to-end communication, the communication component is controlled to send a security requirement request to the network element of the carrier network to obtain a user of the user equipment preset in the home subscriber server. Safety requirements;

Or obtaining, from the request for the end-to-end communication, a user security requirement of the user equipment preset in the home subscriber server.
The session management network element according to claim 61 or 62, wherein the processor is further configured to:

Obtaining, from the request for the end-to-end communication, the service security requirement from the user equipment and/or the security capability requirement supported by the user equipment.
The session management network element according to claim 61 or 62, wherein the processor is further configured to:

Controlling, by the communication component, a security requirement request to the policy control network element of the operator network, where the security requirement request includes at least one of an identifier of the user equipment and the network identifier, and through the communication component Receiving, by the policy control network element of the operator network, the security capability requirement from the operator network, where the identifier of the user equipment and the network identifier are used by the policy control network element identifier Security capability requirements from the carrier network.
The session management network element according to claim 61 or 62, wherein the processor is further configured to:

Controlling the communication component to send a security requirement request to a policy control network element of the operator network;

And receiving, by the policy of the operator network, a security requirement of the other end device of the end-to-end communication sent by the network element; or

Controlling, by the communication component, a security requirement request to the other end device of the end-to-end communication, and receiving a security requirement of the other end device of the end-to-end communication sent by the other end device of the end-to-end communication;

The security requirement request includes at least one of an identifier of the user equipment and the service parameter, and at least one of an identifier of the user equipment and the service parameter is used for the end-to-end communication. One end of the device looks for the security requirements of the other end of the end-to-end communication.
The session management network element according to claim 62, wherein the processor is configured to: according to the obtained user security requirement of the user equipment at one end of the end-to-end communication preset in the home subscriber server, Determining at least one of a service security requirement of the user equipment, a security capability requirement supported by the user equipment, a security capability requirement from an operator network, and a security requirement of the other end device of the end-to-end communication Security policies include:

The processor is specifically configured to: according to a user security requirement of a user equipment that is end-to-end communication preset in the home subscriber server, a service security requirement from the user equipment, and the user equipment support Determining a security policy by one of a security capability requirement, a security capability requirement from the carrier network, and a security requirement of the other end device of the end-to-end communication; or, according to the preset in the home subscriber server User security requirements of the user equipment at one end of the end-to-end communication, service security requirements from the user equipment, security capability requirements supported by the user equipment, security capability requirements from the operator network, and the end-to-end communication A plurality of security requirements of a device at one end, and the security policy is determined according to preset rules.
The session management network element according to claim 62, wherein the processor is further configured to:

The user security requirement of the user equipment at the end of the end-to-end communication preset according to the home subscriber server, the service security requirement from the user equipment, the security capability requirement supported by the user equipment, and the carrier At least one of a security capability requirement of the network and a security requirement of the other end device of the end-to-end communication, before determining the security policy, obtaining the location according to the configuration information or the node policy of the user equipment, or from the local storage Determining the configuration information of the user equipment or the node policy, or determining the endpoint of the security protection at the user plane node UPF according to the security requirements of the service, the security requirements of the server, the service type, the security capability of the user equipment, or the slicing policy; or Receiving a node configuration parameter from the policy control network element of the operator, the node configuration parameter indicating that the endpoint of the security protection is at the user plane node UPF.
The session management network element according to claim 62, wherein the processor is further configured to:

In the case that the UPF is determined to be the UPF of the visited public land mobile communication network VPLMN, the security capability requirement from the carrier network is obtained as the security requirement of the gateway of the VPLMN;

In determining that the UPF is a UPF of the home public land mobile communication network HPLMN, the security capability requirement from the carrier network is obtained as a security requirement of the gateway of the HPLMN.
The session management network element according to claim 67, wherein the processor is configured to: according to a user security requirement of the end user equipment that is preset as the end-to-end communication preset in the home subscriber server, Determining a security policy by one or more of the service security requirements of the user equipment, the security capability requirements supported by the user equipment, the security capability requirements from the carrier network, and the security requirements of the other end equipment of the end-to-end communication include:

The processor is specifically configured to: according to a user security requirement of a user equipment that is end-to-end communication preset in the home subscriber server, a service security requirement from the user equipment, and the user equipment support Determining a security policy by one or more of a security capability requirement, a security capability requirement from the carrier network, and a security requirement of the other end device of the end-to-end communication;

The content of the security requirement includes:

An algorithm for security protection, the security protection algorithm comprising an encryption algorithm and/or an integrity protection algorithm.
The session management network element according to claim 70, wherein the processor is configured to: according to a user security requirement of the user equipment at one end of the end-to-end communication preset in the home subscriber server, from the Determining a security policy by one or more of the service security requirements of the user equipment, the security capability requirements supported by the user equipment, the security capability requirements from the carrier network, and the security requirements of the other end equipment of the end-to-end communication include:

The processor is specifically configured to: according to a user security requirement of a user equipment that is end-to-end communication preset in the home subscriber server, a service security requirement from the user equipment, and the user equipment support Determining a security policy by one or more of a security capability requirement, a security capability requirement from the carrier network, and a security requirement of the other end device of the end-to-end communication;

The content of the security requirement further includes:

The length of the key and/or the update time of the key.
The session management network element according to claim 70, wherein the processor is configured to: according to a user security requirement of the user equipment at one end of the end-to-end communication preset in the home subscriber server, from the Determining a security policy by one or more of the service security requirements of the user equipment, the security capability requirements supported by the user equipment, the security capability requirements from the carrier network, and the security requirements of the other end equipment of the end-to-end communication include:

The processor is specifically configured to: according to the end of the end user communication preset in the home subscriber server User security requirements of the user equipment, service security requirements from the user equipment, security capability requirements supported by the user equipment, security capability requirements from the operator network, and security requirements of the other end device of the end-to-end communication One or more of the determination security policies;

The format of the security requirement includes:

a plurality of 8-bit bytes, the plurality of 8-bit bytes including any one of the following: an 8-bit byte for indicating an identification of a security requirement, an 8-bit byte for indicating a length of content of the security requirement, An 8-bit byte indicating whether the security requirement requires an encryption algorithm, an 8-bit byte indicating whether the security requirement requires an integrity protection algorithm, an 8-bit byte indicating the length of the encryption algorithm, and is used to represent integrity protection. 8-bit byte of the length of the algorithm, 8-bit byte used to indicate whether the key needs to be updated, 8-bit byte used to represent a specific encryption algorithm, 8-bit byte used to represent a specific integrity protection algorithm .
The session management network element according to claim 70, wherein the processor is further configured to:

Before the session management network element obtains the protection key according to the security policy, the shared key, and the parameter derivation, controlling the communication component to receive the sharing sent by the key management center of the carrier network. Key

Alternatively, the shared key is obtained locally.
The session management network element according to claim 58, wherein the acquiring, by the processor, the protection key comprises:

The processor is specifically configured to: control the communication component to send a key request to a key management center of the operator, where the key request includes an identifier of the user equipment, the network identifier, and the service At least one of a parameter and a security policy, at least one of an identifier of the user equipment, the network identifier, and the service parameter is used by the key management center to determine the shared key; and receive the key The protection key sent by the management center.
The session management network element according to any one of claims 57 to 73, wherein the communication component is further configured to: send the network identifier to one end of the end-to-end communication; and/or The other end device of the end-to-end communication transmits the network identity.
A key management center, comprising:

a communication component, configured to receive a key request, where the key request includes a security policy and a parameter, where the parameter includes at least one of an identifier, a network identifier, and a service parameter of the user equipment that is one end of the end-to-end communication; The security policy is based on user security requirements of the user equipment preset in the home subscriber server, service security requirements from the user equipment, security capability requirements supported by the user equipment, security capability requirements from an operator network, and At least one determination of a security requirement of the other end device of the end-to-end communication;

a processor, configured to determine, according to the identifier of the user equipment, a shared key between the user equipment and an operator network; and generate a protection key according to the security policy, the shared key, and the parameter The protection key is used to protect the end-to-end communication;

The communication component is further configured to send the protection key to the user equipment, and send the protection key to another end device of the end-to-end communication.
The key management center according to claim 76, wherein said communication component is further configured to:

And after the processor generates the protection key according to the security policy, the shared key, and the parameter, sending the protection key to the session management network element of the operator.
The key management center according to claim 76, wherein the processor is further configured to:

After the user equipment and the carrier network are authenticated in both directions, the shared key between the user equipment and the operator network is obtained.
A user equipment, comprising:

a communication component, configured to send a request, where the request includes an identifier of the user equipment, and receiving a response, where the response carries a security policy, where the security policy is based on the user equipment preset in the home subscriber server At least one of a user security requirement, a service security requirement from the user equipment, a security capability requirement supported by the user equipment, a security capability requirement from an operator network, and a security requirement of the other end device of the end-to-end communication determine;

a processor, configured to obtain a protection key, where the protection key is used to protect the end-to-end communication, where the protection key is according to the security policy and between the user equipment and the carrier network The shared key is determined.
The user equipment according to claim 79, wherein the communication component is configured to send a request comprising:

The communication component is specifically configured to send a service parameter and a security requirement set, where the security requirement set includes a service security requirement of the user equipment and/or a security capability requirement supported by the user equipment.
The user equipment according to claim 80, wherein the processor is further configured to:

Generated session ID, bearer ID, flow flow ID or slice ID;

The communication component for transmitting a request includes:

The communication component is specifically configured to: send a request, where the request further includes: a session ID, a bearer ID, a flow flow ID, or a slice ID generated by the user equipment.
The user equipment according to claim 79, wherein the acquiring, by the processor, the protection key comprises:

The processor is specifically configured to obtain the protection key according to the security policy, the shared key, and the parameter derivation, where the parameter includes an identifier of the user equipment, the network identifier, and the service parameter. At least one.
The user equipment according to claim 82, wherein the processor is further configured to:

Controlling, by the communication component, the shared key sent by the operator's key management center before the obtaining the protection key according to the security policy, the shared key, and the parameter derivation; or Obtaining the shared key locally; or,

After the user equipment and the operator network are authenticated in both directions, the shared key between the user equipment and the operator network is obtained.
The user equipment according to claim 82 or 83, wherein the communication component is further configured to:

Before the processor obtains the protection key according to the security policy, the shared key, and the parameter, the network identifier sent by the session management network element of the carrier network is received.
The user equipment according to claim 80, wherein the acquiring, by the processor, the protection key comprises:

The processor is specifically configured to control the communication component to receive the protection key sent by a key management center or a session management center of the carrier network.
A policy control network element, comprising:

a communication component, configured to receive a security policy request, where the security policy request includes a user security requirement of the user equipment preset in a home subscriber server, a service security requirement from the user equipment, and the user equipment support At least one of a security capability requirement and a parameter, the parameter comprising at least one of an identity, a network identity, and a service parameter of the user equipment as one end of the end-to-end communication;

a processor, configured to generate a security policy according to a security requirement set, where the security requirement set includes at least a user security requirement of the user equipment preset in the home subscriber server, a service security requirement and a location from the user equipment Describe at least one of security capability requirements supported by the user equipment;

The communication component is further configured to send the security policy.
The policy control network element according to claim 86, wherein the generating, by the processor, the security policy according to the security requirement set comprises:

The processor is configured to generate a security policy according to the security requirement set, where the security requirement set further includes: at least one of a security capability requirement from the carrier network and a security requirement of the other end device of the end-to-end communication.
The policy control network element according to claim 87, wherein the processor is further configured to:

After the communication component receives the security policy request, the security requirement of the pre-stored carrier network is obtained locally.
The policy control network element according to claim 88, wherein the processor is further configured to:

Controlling, by the communication component, a security requirement of the other end device of the end-to-end communication sent by the session management network element; or

Controlling, by the communication component, a security requirement request to the other end device of the end-to-end communication, and receiving a security requirement sent by the other end device of the end-to-end communication;

The security requirement request includes at least one of an identifier, a network identifier, and a service parameter of the user equipment, where at least one of an identifier, a network identifier, and a service parameter of the user equipment is used for the end-to-end communication. The other end device marks the security requirements of the other end device of the end-to-end communication.
The policy control network element according to claim 87, wherein the generating, by the processor, the security policy according to the security requirement set comprises:

The processor is specifically configured to: according to a user security requirement of a user equipment that is end-to-end communication preset in the home subscriber server, a service security requirement from the user equipment, and the user equipment support Determining a security policy by one of a security capability requirement, a security capability requirement from the carrier network, and a security requirement of the other end device of the end-to-end communication; or, according to the preset in the home subscriber server User security requirements of the user equipment at one end of the end-to-end communication, service security requirements from the user equipment, security capability requirements supported by the user equipment, security capability requirements from the operator network, and the end-to-end communication A plurality of security requirements of a device at one end, and the security policy is determined according to preset rules.
The policy control network element according to claim 88, wherein the processor is further configured to:

Before the security policy is generated according to the security requirement set, the configuration information or the node policy of the user equipment is obtained according to the configuration information or the node policy of the user equipment, or the local device is obtained, or according to the security requirement of the service, the server side The security requirement, the service type, the security capability of the user equipment, or the slicing policy determine that the endpoint of the security protection is at the user plane node UPF.
The policy control network element according to claim 91, wherein the processor is further configured to:

In the case that the UPF is determined to be the UPF of the visited public land mobile communication network VPLMN, the security capability requirement from the carrier network is obtained as the security requirement of the gateway of the VPLMN;

In the case of determining that the UPF is the UPF of the home public land mobile communication network HPLMN, the security capability requirement from the carrier network is obtained as the security requirement of the gateway of the HPLMN.
The policy control network element according to claim 86, wherein the processor is further configured to:

Before the security policy is generated according to the security requirement set, determining that the security protection endpoint is at the branching point or the uplink data classifier function ULCL;

The security requirement set also includes:

The branching point or the security requirements of the ULCL.
The policy control network element according to claim 90, wherein the processor is configured to: according to a user security requirement of the user equipment at one end of the end-to-end communication preset in the home subscriber server, from the Determining a security policy by one or more of the service security requirements of the user equipment, the security capability requirements supported by the user equipment, the security capability requirements from the carrier network, and the security requirements of the other end equipment of the end-to-end communication include:

The processor is configured to: according to a user security requirement of the end user equipment that is preset in the home subscriber server, a service security requirement from the user equipment, and a security capability requirement supported by the user equipment. Determining a security policy by one or more of a security capability requirement from a carrier network and a security requirement of the other end device of the end-to-end communication;

The content of the security requirement includes:

An algorithm for security protection, the security protection algorithm comprising an encryption algorithm and/or an integrity protection algorithm.
The policy control network element according to claim 94, wherein the processor is configured to: according to a user security requirement of the user equipment at one end of the end-to-end communication preset in the home subscriber server, from the Determining a security policy by one or more of the service security requirements of the user equipment, the security capability requirements supported by the user equipment, the security capability requirements from the carrier network, and the security requirements of the other end equipment of the end-to-end communication include:

The processor is configured to: according to a user security requirement of the end user equipment that is preset in the home subscriber server, a service security requirement from the user equipment, and a security capability requirement supported by the user equipment. Determining a security policy by one or more of a security capability requirement from a carrier network and a security requirement of the other end device of the end-to-end communication;

The content of the security requirement further includes:

The length of the key and/or the update time of the key.
A mobility management network element, comprising:

a communication component, configured to receive a request of the user equipment, where the request of the user equipment includes an identifier of the user equipment as one end of the end-to-end communication; and a request for end-to-end communication, the end-to-end The request for communication includes the identifier of the user equipment, and the request for the end-to-end communication is used to trigger establishment of a security session, where the security policy is based on user security requirements of the user equipment preset in the home subscriber server. At least one determination of a service security requirement of the user equipment, a security capability requirement supported by the user equipment, and a security capability requirement from an operator network.
The mobility management network element according to claim 96, further comprising:

a processor, configured to generate a network identifier before the communication component sends a request for end-to-end communication;

The request of the communication component to send end-to-end communication includes:

The communication component is specifically configured to send an end-to-end communication request, and the end-to-end communication request is further included Including: the network identifier.
The mobility management network element according to claim 97, wherein the processor is further configured to:

Obtaining, from the home subscriber server, the user identity and the user security requirement of the user equipment preset in the home subscriber server; and acquiring, according to the identifier of the user equipment in the request for the end-to-end communication, acquiring the home subscriber server The user security requirements of the user equipment are set.
The mobility management network element of claim 98, wherein the request by the communication component to send end-to-end communication comprises:

The communication component is specifically configured to send an end-to-end communication request, and the end-to-end communication request further includes: a user security requirement of the user equipment preset in the home subscriber server.
The mobility management network element according to any one of claims 96 to 99, wherein the request for the communication component to transmit end-to-end communication comprises:

The communication component is specifically configured to send an end-to-end communication request, where the end-to-end communication request further includes: a service parameter, a service security requirement from the user equipment, and a security capability requirement supported by the user equipment. At least one of them.
The mobility management network element according to claim 100, wherein the request for the communication component to transmit end-to-end communication comprises:

The communication component is specifically configured to send an end-to-end communication request, where the end-to-end communication request further includes: a service parameter, a service security requirement from the user equipment, and a security capability requirement supported by the user equipment. At least one of them.
A home subscriber server, comprising:

a memory, configured to store a user security requirement of the user equipment preset in the home subscriber server;

a communication component, configured to receive a security requirement request, where the security requirement request includes a user identifier;

a processor, configured to determine, according to the user identifier, a user security requirement of the user equipment preset in the home subscriber server;

The communication component is further configured to send a user security requirement of the user equipment preset in the home subscriber server, where a user security requirement of the user equipment preset in the home subscriber server is used to generate a security policy.
A session management network element, comprising:

a communication component for receiving an end-to-end communication request, the request for the end-to-end communication including an identifier of a user equipment as one end of the end-to-end communication;

a processor, configured to obtain a security policy, where the security policy is based on a user security requirement of the user equipment preset in the home subscriber server, a service security requirement from the user equipment, and a security capability requirement supported by the user equipment, At least one determination of a security capability requirement from an operator network and a security requirement of the other end device of the end-to-end communication; and obtaining a first key for the end-to-end The communication is protected, the first key is determined according to the security policy and a shared key between the user equipment and the operator network; and the encryption is generated according to the security policy and the first key a protection key and/or an integrity protection key for confidentiality protection of the end-to-end communication, the integrity protection key being used to complete the end-to-end communication Sex

The communication component is further configured to send the security policy to the user equipment, and to the end-to-end communication The other end device of the letter transmits at least one of the encryption protection key and the integrity protection key shown and the security policy.
The session management network element according to claim 103, wherein the communication component is further configured to:

Sending the first key to the user equipment, so that the user equipment generates the encryption protection key and/or the integrity protection key according to the security policy and the first key.
The session management network element according to claim 103, wherein the communication component is further configured to:

Sending the encryption protection key and/or the integrity protection key to the user equipment.
A user equipment, comprising:

a communication component, configured to send a request, where the request includes an identifier of the user equipment, and receiving a response, where the response carries a security policy, where the security policy is based on the user equipment preset in the home subscriber server At least one of a user security requirement, a service security requirement from the user equipment, a security capability requirement supported by the user equipment, a security capability requirement from an operator network, and a security requirement of the other end device of the end-to-end communication determine;

A processor for obtaining an encryption protection key and/or an integrity protection key.
The user equipment according to claim 106, wherein the communication component is configured to send a request comprising:

The communication component is specifically configured to send a request, where the request further includes:

At least one of a network identifier, a service security requirement of the user equipment, and a security capability requirement supported by the user equipment.
The user equipment according to claim 106, wherein the processor is configured to obtain an encryption protection key and/or an integrity protection key, including:

The processor is specifically configured to acquire a first key, where the first key is determined according to the security policy and a shared key between the user equipment and the carrier network, and according to the security policy And the first key generates an encryption protection key and/or an integrity protection key.
The user equipment according to claim 106, wherein the processor is configured to obtain an encryption protection key and/or an integrity protection key, including:

The processor is specifically configured to receive an encryption protection key and/or an integrity protection key by using the communication component.
A policy control network element or a mobility management network element, including:

a processor, configured to determine an endpoint of the security protection, where the endpoint of the security protection is a user plane node UPF, according to a user security requirement of the user equipment preset in the home subscriber server, from the user At least one of a service security requirement of the device and a security capability requirement supported by the user device, and at least one of a security capability requirement from the operator network and a security requirement of the other end device of the end-to-end communication generates a security policy And in the case that the security protection endpoint is another device, according to user security requirements of the user equipment preset in the home subscriber server, service security requirements from the user equipment, and the user equipment support. At least one of the security capability requirements, and the security requirements of the other devices, generate a security policy, the other devices including a branching point or a ULCL.
The policy control network element or the mobility management network element according to claim 110, wherein the processor is configured to determine an endpoint of security protection, including:

The processor is specifically configured to obtain configuration information or a node policy of the user equipment according to the user equipment received from other functional network elements of the network of the operator, or obtain configuration information or a node policy of the user equipment from local storage. Or determine the endpoint of security protection based on the security requirements of the received service, or the security requirements, service type, or slicing policy on the server side.
The policy control network element or the mobility management network element according to claim 110 or 111, wherein the processor is further configured to:

In the case that the UPF is determined to be the UPF of the visited public land mobile communication network VPLMN, the security capability requirement from the carrier network is obtained as the security requirement of the gateway of the VPLMN;

In the case of determining that the UPF is the UPF of the home public land mobile communication network HPLMN, the security capability requirement from the carrier network is obtained as the security requirement of the gateway of the HPLMN.