CN109788474A - A kind of method and device of message protection - Google Patents
A kind of method and device of message protection Download PDFInfo
- Publication number
- CN109788474A CN109788474A CN201711125181.0A CN201711125181A CN109788474A CN 109788474 A CN109788474 A CN 109788474A CN 201711125181 A CN201711125181 A CN 201711125181A CN 109788474 A CN109788474 A CN 109788474A
- Authority
- CN
- China
- Prior art keywords
- key
- nas message
- terminal device
- network equipment
- message
- Prior art date
- Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
- Pending
Links
Classifications
-
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
- H04L9/00—Cryptographic mechanisms or cryptographic arrangements for secret or secure communications; Network security protocols
- H04L9/40—Network security protocols
-
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
- H04L9/00—Cryptographic mechanisms or cryptographic arrangements for secret or secure communications; Network security protocols
- H04L9/08—Key distribution or management, e.g. generation, sharing or updating, of cryptographic keys or passwords
-
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04W—WIRELESS COMMUNICATION NETWORKS
- H04W12/00—Security arrangements; Authentication; Protecting privacy or anonymity
- H04W12/02—Protecting privacy or anonymity, e.g. protecting personally identifiable information [PII]
-
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04W—WIRELESS COMMUNICATION NETWORKS
- H04W12/00—Security arrangements; Authentication; Protecting privacy or anonymity
- H04W12/04—Key management, e.g. using generic bootstrapping architecture [GBA]
-
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04W—WIRELESS COMMUNICATION NETWORKS
- H04W12/00—Security arrangements; Authentication; Protecting privacy or anonymity
- H04W12/10—Integrity
Landscapes
- Engineering & Computer Science (AREA)
- Computer Security & Cryptography (AREA)
- Computer Networks & Wireless Communication (AREA)
- Signal Processing (AREA)
- Mobile Radio Communication Systems (AREA)
Abstract
A kind of method and device of message protection, is related to field of communication technology, wherein this method comprises: terminal device according to symmetric key and the first security algorithm, obtains protected Initial NAS message, and protected Initial NAS message is sent to first network equipment;And key relevant parameter is sent to second network equipment, wherein key relevant parameter is for obtaining symmetric key.Since terminal device can carry out safeguard protection to Initial NAS message by symmetric key and the first security algorithm; while improving Initial NAS message transmission security; compared with prior art; help to reduce the complexity for carrying out Initial NAS message safeguard protection, and helps to improve the access efficiency of terminal device.
Description
Technical field
This application involves field of communication technology, in particular to a kind of method and device of message protection.
Background technique
In long term evolution (long term evolution, LTE), Non-Access Stratum (non-access stratum, NAS)
The safeguard protection of message is to send NAS safe mode command (security mode to terminal device in the network equipment
Command, SMC) activate after message, for terminal device before receiving the NAS SMC message that the network equipment is sent, terminal
The NAS message transmitted between equipment and the network equipment such as Initial NAS message is the message not Jing Guo safeguard protection, therefore this
A little message, which exist, to be tampered or by the risk of attacker's sniff.
In the prior art, in order to improve safety of the Initial NAS message in communication process, terminal device is to the network equipment
In the Initial NAS message of transmission only comprising user's permanent identification (subscriber permanent identifier, SUPI) and
The security capabilities of terminal device, after terminal device receives NAS SMC message, to the other parameters in Initial NAS message into
After row safeguard protection, it is being sent to the network equipment, this implementation makes the network equipment for the processing phase of Initial NAS message
To lag, the access efficiency of terminal device is affected, and complex.
Summary of the invention
The embodiment of the present application provides a kind of method and device of message protection, helps to reduce carrying out to Initial NAS message
The complexity of safeguard protection, and improve the access efficiency of terminal device.
In a first aspect, the message protection method of the embodiment of the present application, comprising:
Terminal device obtains protected Initial NAS message according to symmetric key and the first security algorithm, and to the first net
Network equipment sends protected Initial NAS message;And key relevant parameter is sent to second network equipment, wherein key is related
Parameter is for obtaining symmetric key.
Since terminal device can be by symmetric key and the first security algorithm to Initial NAS message in the embodiment of the present application
Carry out safeguard protection compared with prior art, helps to reduce while improving Initial NAS message transmission security
The complexity of safeguard protection is carried out to Initial NAS message, and helps to improve the access efficiency of terminal device.
In a kind of possible design, key relevant parameter includes the public key of terminal device, and terminal device can be under
Column mode obtains symmetric key:
Terminal device generates symmetric key according to the public key of second network equipment and the private key of terminal device.
Terminal device generates symmetric key according to the public key of second network equipment and the private key of terminal device, specific real
Now, a kind of possible design are as follows:
Terminal device generates intermediate key, then basis according to the public key of second network equipment and the private key of terminal device
Intermediate key and fixed character string generate symmetric key.Optionally, fixed character string can be pre-configured in terminal device.
In a kind of possible design, key relevant parameter includes the ciphertext of symmetric key, wherein the ciphertext of symmetric key
It is to be obtained according to the public key of second network equipment, terminal device can obtain symmetric key according to following manner:
Optionally, terminal device generates symmetric key according to random key generating algorithm;Alternatively, optional, terminal device
According to random number, permanent key and cipher key derivative function (key derivation function, KDF), symmetric key is generated.
In a kind of possible design, key relevant parameter includes the ciphertext of the first security algorithm, wherein the first safety is calculated
The ciphertext of method is obtained according to the public key of second network equipment.
The safety of the first security algorithm of transmission is helped to improve through the above technical solution.
In a kind of possible design, the first security algorithm is that terminal device is determined according to the strategy of pre-configuration.
In a kind of possible design, Initial NAS message is login request message.
In a kind of possible design, terminal device is receiving the protected downlink NAS from first network equipment
After message, protected downlink NAS message is decrypted according to symmetric key and the first security algorithm, downlink NAS is obtained and disappears
Breath, wherein downlink NAS message can be registration received message or NAS SMC message.
The safety of transmission registration received message or NAS SMC message is helped to improve through the above technical solution.
In a kind of possible design, terminal device receives the protected downlink NAS message from first network equipment,
It include wherein the second security algorithm in downlink NAS message, then terminal device can be according to symmetric key and the first security algorithm pair
Protected downlink NAS message is decrypted, and obtains downlink NAS message, and the second safety is then obtained from downlink NAS message and is calculated
Method, if last first network equipment is the integrity protection carried out to the ciphertext of downlink NAS message, terminal device is according to second
Security algorithm verifies the integrality of protected downlink NAS message, if first network equipment is to the complete of downlink NAS message progress
Whole property protection, then terminal device verifies the integrality of downlink NAS message according to the second security algorithm.Wherein downlink NAS message is
Register received message.
Since first network equipment can be sent the second security algorithm by registration received message in above-mentioned technical proposal
Facilitate the expense for saving signaling to terminal device so as to not have to transmit NAS SMC message to terminal device again.Wherein
Second security algorithm is the security algorithm of first network equipment selection.
In a kind of possible design, terminal device receives the protected downlink NAS message from first network equipment,
And according to symmetric key and the first security algorithm, the integrality of downlink NAS message is verified, under wherein downlink NAS message can be
Row refuse information.
The integrality that downlink refuse information can be verified through the above technical solution facilitates terminal device determination and receives
Whether downlink refuse information is forged, distorts, reduce terminal device enter Denial of Service attack (Deny of Service,
DoS) a possibility that state.
In a kind of possible design, first network equipment is access and mobile management function (authentication
Management function, AMF), second network equipment be independent data management (unified data management,
UDM) entity or authentication service function (authentication server function, AUSF) entity.
Second aspect, the method for the message protection of the embodiment of the present application, comprising:
Second network equipment receives the key relevant parameter from terminal device, and according to key relevant parameter, acquisition pair
Claim key, then send symmetric key to first network equipment, wherein key relevant parameter is symmetrical close for obtaining symmetric key
Key is used to carry out safeguard protection to Initial NAS message.
Since symmetric key can be sent to first network equipment by second network equipment in the embodiment of the present application, to make
Initial NAS message can be obtained according to symmetric key by obtaining first network equipment.
In a kind of possible design, key relevant parameter includes the public key of terminal device;Second network equipment is under
Column mode obtains symmetric key:
Second network equipment generates symmetric key according to the public key of terminal device and the private key of second network equipment.
Wherein, second network equipment generates symmetric key according to the public key of terminal device and the private key of second network equipment,
In specific implementation, a kind of possible design are as follows:
Second network equipment generates intermediate key, then according to the public key of terminal device and the private key of second network equipment
According to intermediate key and fixed character string, symmetric key is generated.Optionally, fixed character string can be pre-configured in the second network
In equipment.
In a kind of possible design, key relevant parameter includes the ciphertext of symmetric key;Second network equipment is under
Column mode obtains symmetric key:
Second network equipment is decrypted the ciphertext of symmetric key according to the private key of second network equipment, obtains symmetrical close
Key.
In a kind of possible design, key relevant parameter includes the ciphertext of the first security algorithm;Second network equipment root
The ciphertext of the first security algorithm is decrypted according to the public key of second network equipment, obtains the first security algorithm, and to the first net
Network equipment sends the first security algorithm.
The safety of the first security algorithm transmission is helped to improve through the above technical solution.
In a kind of possible design, first network equipment is AMF entity;Second network equipment be UDM entity or
AUSF entity.
The third aspect, the method for the message protection of the embodiment of the present application, comprising:
First network equipment receives the protected Initial NAS message from terminal device;And it receives and comes from the second net
The symmetric key of network equipment;Then according to symmetric key and the first security algorithm, Initial NAS message is obtained.
Due to having carried out safe guarantor to Initial NAS message by symmetric key and the first security algorithm in the embodiment of the present application
Shield, thus while improving Initial NAS message transmission security, compared with prior art, help to reduce to initial
NAS message carries out the complexity of safeguard protection, and helps to improve the access efficiency of terminal device.
In a kind of possible design, first network equipment receives the first security algorithm from second network equipment.
The safety of the first security algorithm transmission is helped to improve through the above technical solution.
In a kind of possible design, Initial NAS message is login request message.
In a kind of possible design, first network equipment is protected according to symmetric key and the first security algorithm, acquisition
Downlink NAS message;And protected downlink NAS message is sent to terminal device.
The safety of transmission downlink NAS message is helped to improve through the above technical solution.
In a kind of possible design, downlink NAS message is registration received message or NAS SMC message.
In a kind of possible design, first network equipment obtains downlink NAS according to symmetric key and the first security algorithm
The ciphertext of message, wherein downlink NAS message is registration received message, and registration received message includes the second security algorithm;Then
One network equipment carries out integrity protection according to the second security algorithm, to the ciphertext of downlink NAS message, obtains protected downlink
NAS message, and protected downlink NAS message is sent to terminal device.Since first network equipment in above-mentioned technical proposal can
The second security algorithm is sent to terminal device by registering received message, so as to not have to transmit to terminal device again
NAS SMC message facilitates the expense for saving signaling.Wherein the second security algorithm is that the safety of first network equipment selection is calculated
Method.
In a kind of possible design, first network equipment carries out downlink NAS message complete according to the second security algorithm
Property protection, wherein downlink NAS message be registration received message, registration received message include the second security algorithm;Then the first net
Network equipment obtains protected downlink NAS message, protected downlink NAS message according to symmetric key and the first security algorithm
For the ciphertext of the downlink NAS message after integrity protection;Finally, first network equipment sends protected downlink to terminal device
NAS message.Since first network equipment can be sent the second security algorithm by registration received message in above-mentioned technical proposal
Facilitate the expense for saving signaling to terminal device so as to not have to transmit NAS SMC message to terminal device again.Wherein
Second security algorithm is the security algorithm of first network equipment selection.
In a kind of possible design, first network equipment disappears to downlink NAS according to symmetric key and the first security algorithm
Breath carries out integrity protection, obtains protected downlink NAS message, then, sends protected downlink NAS to terminal device and disappears
Breath, wherein downlink NAS message can be registration reject message.
Integrity protection can be carried out to downlink refuse information through the above technical solution, facilitate terminal device determination and connect
It receives whether downlink refuse information is forged, distorts, reduces a possibility that terminal device enters DoS state.
In a kind of possible design, first network equipment is AMF entity;Second network equipment be UDM entity or
AUSF entity.
Fourth aspect, the device of the message protection of the embodiment of the present application, the device can be terminal device, be also possible to end
Chip in end equipment.The device has the technical solution for each possible design for realizing above-mentioned first aspect and first aspect
Function.The function can also execute corresponding software realization by hardware realization by hardware.The hardware or software package
Include one or more modules corresponding with above-mentioned function.
In a kind of possible design, which includes processing unit and communication unit, and processing unit for example can be place
Device is managed, communication unit for example can be transceiver, and transceiver may include radio circuit.Wherein processing unit is used for according to symmetrical
Key and the first security algorithm obtain protected Initial NAS message, and communication unit is used to be protected to the transmission of first network equipment
The Initial NAS message of shield, and key relevant parameter is sent to second network equipment, wherein key relevant parameter is for obtaining
Symmetric key.
In alternatively possible design, which includes processor and memory, and wherein memory is used to store program,
Processor is for calling the program stored in memory, to realize first aspect and the possible design of first aspect any one
The method of middle message protection.It should be noted that processor can by input/output interface, pin or circuit etc. send or
Person receives data.Memory can be register, the caching etc. in chip.In addition, memory can also be in terminal device
Positioned at the storage unit of chip exterior, such as read-only memory (read-only memory, ROM) can store static information and refer to
Other kinds of static storage device, random access memory (random access memory, RAM) for enabling etc..
Wherein, the processor that any of the above-described place mentions can be a general central processing unit (central
Processing unit, CPU), microprocessor, application-specific integrated circuit (application-specific
Integrated circuit, ASIC), or it is one or more any for controlling the above-mentioned first aspect of execution or first aspect
The integrated circuit of the program of the method for one message protection that may be designed.
5th aspect, the device of the message protection of the embodiment of the present application, the device can be the network equipment, be also possible to net
Chip in network equipment.The device has the technical solution for each possible design for realizing above-mentioned second aspect and second aspect
Function.The function can also execute corresponding software realization by hardware realization by hardware.The hardware or software package
Include one or more modules corresponding with above-mentioned function.
In a kind of possible design, which includes processing unit and communication unit, and processing unit for example can be place
Device is managed, communication unit for example can be communication interface, and optionally, processor and communication interface can pass through optical fiber, twisted pair etc.
Wired mode connection, communication unit are also possible to transceiver, and transceiver may include radio circuit, optionally, processor and receipts
Hair device can be connected by wireless modes such as Wireless Fidelitys (WIFI, wireless fidelity).
Specifically, communication unit is for receiving the key relevant parameter from terminal device, key relevant parameter is for obtaining
Symmetric key is obtained, symmetric key is used to carry out safeguard protection to Initial NAS message;Processing unit is used for according to key relevant parameter
Symmetric key is obtained, communication unit is also used to send symmetric key to first network equipment.
In alternatively possible design, which includes processor and memory, and wherein memory is used to store program,
Processor is for calling the program stored in memory, to realize second aspect and the possible design of second aspect any one
The method of middle message protection.It should be noted that processor can by input/output interface, pin or circuit etc. send or
Receive data.Memory can be register, the caching etc. in chip.In addition, memory can also be the position in the network equipment
In the storage unit of chip exterior, such as ROM, other kinds of static storage device, the RAM that static information and instruction can be stored
Deng.
Wherein, the processor that any of the above-described place mentions, can be a general CPU, microprocessor, specific ASIC, or
One or more executes the side for the message protection that above-mentioned second aspect or second aspect any one may design for controlling
The integrated circuit of the program of method.
6th aspect, the device of the message protection of the embodiment of the present application, the device can be the network equipment, be also possible to net
Chip in network equipment.The device has the technical solution for each possible design for realizing the above-mentioned third aspect and the third aspect
Function.The function can also execute corresponding software realization by hardware realization by hardware.The hardware or software package
Include one or more modules corresponding with above-mentioned function.
In a kind of possible design, which includes processing unit and communication unit, and processing unit for example can be place
Device is managed, communication unit for example can be communication interface, and optionally, processor and communication interface can pass through optical fiber, twisted pair etc.
Wired mode connection, communication unit are also possible to transceiver, and transceiver may include radio circuit, optionally, processor and receipts
Hair device can be connected by wireless modes such as WIFI.
Specifically, communication unit is used to receive the protected Initial NAS message from terminal device, and receives and come from
The symmetric key of second network equipment, processing unit are used to obtain initial NAS according to symmetric key and the first security algorithm and disappear
Breath.
In alternatively possible design, which includes processor and memory, wherein memory is for storing journey
Sequence, processor is for calling the program stored in memory, to realize that the third aspect and third aspect any one are possible
The guard method of message in design.It should be noted that processor can be sent out by input/output interface, pin or circuit etc.
Send or receive data.Memory can be register, the caching etc. in chip.In addition, memory can also be in the network equipment
The storage unit positioned at chip exterior, such as ROM, the other kinds of static storage device that static information and instruction can be stored,
RAM etc..
Wherein, the processor that any of the above-described place mentions, can be a general CPU, microprocessor, specific ASIC, or
One or more executes the side for the message protection that the above-mentioned third aspect or third aspect any one may design for controlling
The integrated circuit of the program of method.
7th aspect, the embodiment of the present application also provide a kind of computer readable storage medium, the computer-readable storage medium
Matter is stored with program, when the program is running on computers, so that computer executes method described in above-mentioned various aspects.
Eighth aspect, the application also provide a kind of computer program product comprising program, when it runs on computers
When, so that computer executes method described in above-mentioned various aspects.
9th aspect, the embodiment of the present application also provides a kind of communication systems, including fourth aspect or fourth aspect to appoint
The device and the 6th of any one possible design in terms of a kind of device for possible design of anticipating, the 5th aspect or the 5th
The device of any one possible design in terms of aspect or the 6th.
In addition, fourth aspect technical effect brought by any possible design method into the 9th aspect can be found in first
Technical effect brought by different designs mode in aspect, details are not described herein again.
Detailed description of the invention
Fig. 1 is a kind of possible network architecture schematic diagram that the embodiment of the present application is applicable in;
Fig. 2 is the alternatively possible network architecture schematic diagram that the embodiment of the present application is applicable in;
Fig. 3 is a kind of flow diagram of the method for message protection provided by the embodiments of the present application;
Fig. 4 is the flow diagram of the method for another message protection provided by the embodiments of the present application;
Fig. 5 is the flow diagram of the method for another message protection provided by the embodiments of the present application;
Fig. 6 is a kind of flow diagram of the method for message protection provided by the embodiments of the present application;
Fig. 7 is the schematic device of another message protection provided by the embodiments of the present application;
Fig. 8 is the schematic device of another message protection provided by the embodiments of the present application;
Fig. 9 is the schematic device of another message protection provided by the embodiments of the present application;
Figure 10 is the schematic device of another message protection provided by the embodiments of the present application;
Figure 11 is the schematic device of another message protection provided by the embodiments of the present application;
Figure 12 is the schematic device of another message protection provided by the embodiments of the present application;
Figure 13 a and Figure 13 b are respectively the schematic diagram of communication system provided by the embodiments of the present application.
Specific embodiment
As shown in Figure 1, a kind of possible network architecture schematic diagram being applicable in for the embodiment of the present application.The network architecture is the
Four third-generation mobile communication technologies (the 4th Generation mobile communication technology, 4G) network rack
Structure.Network element in the 4G framework include terminal device, mobile management entity (mobility management entity, MME),
Serving GPRS Support Node (serving GPRS support node, SGSN), home signature user server (home
Subscriber server, HSS), gateway (serving gateway, S-GW), grouped data network gateway (packet
Data network gateway, PDN gateway, P-GW), strategy with charging rule functions (policy and charging
Rules function, PCRF) entity, evolution universal land radio access web (evolved universal
Terrestrial radio access network, E-TURAN) etc..
E-UTRAN is made of the base station (evolved nodeB, eNodeB) of multiple evolution, is connect between eNodeB by X2
Mouth mutual connection, passes through S1 interface inter-link between eNodeB and evolution block core net (evolved packet core, EPC),
And eNodeB and terminal device are interconnected by LTE-Uu.
The major function of MME be support NAS message and its safety, tracing area (track area, TA) list management,
The selection of MME when the selection of P-GW and S-GW, across MME switching, in the choosing for carrying out SGSN into 2G/3G access system handoff procedure
It selects, the authentication of terminal device, Roaming control and bearer management, third generation partner program (3rd generation
Partnership project, 3GPP) different access networks core network node between mobile management.
S-GW is the gateway for terminating at E-UTRAN interface, and major function includes: when switching between carrying out base station, as this
Ground anchor point, and assist to complete the reordering function of base station;When switching between 3GPP different access systems, as mobility anchor
Point;Execute Lawful intercept function;Carry out the routing and forward of data packet;Label is grouped in uplink and downlink transport layer;With
Charging etc. between operator.
P-GW is the gateway that SGi interface is ended in towards PDN, if terminal device accesses multiple PDN, terminal device will be right
Answer one or more P-GW.The major function of P-GW includes packet filtering function based on terminal device, Lawful intercept function, terminal
Agreement (internet protocol, IP) address allocation function for interconnecting between the network of equipment is counted in the uplink
According to packet transport level label, the progress charging of the uplink and downlink grade of service and the control of service level thresholding, carry out based on the upper of business
The control etc. of downstream rate.
HSS is the database for storage terminal device signing information, may include one or more in home network
HSS.HSS is responsible for saving relevant to terminal device information, for example, Terminal Equipment Identifier, number and routing iinformation, security information,
Location information, summary (profile) information etc..
When SGSN can be used between 2G/3G and E-UTRAN 3GPP access is netted moving, Signalling exchange is carried out, including to P-GW
With the selection of S-GW, while for be switched to E-UTRAN 3GPP access net terminal device carry out MME selection.
PCRF entity ends in Rx interface and Gx interface, when non-roaming scene, in home public land mobile network network (home
Public land mobile network, HPLMN) in only one PCRF with terminal device an IP-Connectivity Access Network
Network (IP-connectivity access network), IP-CAN session are related;In roaming scence and Business Stream is local
It, may that there are two PCRF be related with the IP-CAN session of terminal device when dredging.
Terminal device is a kind of equipment with radio transmission-receiving function, can be deployed in land, including indoor or room
Outside, hand-held or vehicle-mounted;(such as steamer) can also be deployed on the water surface;It can also dispose and (such as aircraft, balloon and defend in the sky
On star etc.).Specifically, terminal device can be user equipment (user equipment, UE), mobile phone (mobile phone),
Tablet computer (pad), the computer with radio transmission-receiving function, virtual reality (virtual reality, VR) terminal, augmented reality
It is (augmented reality, AR) terminal, the wireless terminal in Industry Control (industrial control), unmanned
The wireless terminal in wireless terminal, tele-medicine (remote medical) in (self driving), smart grid
The wireless terminal in wireless terminal, transportation safety (transportation safety) in (smart grid), smart city
The wireless terminal etc. in wireless terminal, wisdom family (smart home) in (smart city).
As shown in Fig. 2, the alternatively possible network architecture schematic diagram being applicable in for the embodiment of the present application.The network architecture is
5th third-generation mobile communication technology (the 5th Generation mobile communication technology, 5G) network
Framework.The 5G framework may include terminal device, wireless access network (radio access network, RAN), AMF entity, meeting
Talk about management function (session management function, SMF) entity, user plane functions (user plane
Function, UPF) entity, UDM entity, authentication service function (authentication server function, AUSF) reality
Body, data network (datanetwork, DN).In addition, the 5G network architecture is other than including network element as shown in Figure 2, it is also possible to
Function (Authentication Credential Repository and is stored and processed including Service Ticket
Processing Function, ARPF) entity, safe anchor point function (security anchor function, SEAF) reality
Body, signing identity resolution function (subscription identifier de-concealing function, SIDF) entity
Deng.
The major function of RAN is that controlling terminal equipment passes through wireless access to mobile communications network.RAN is mobile communication system
A part of system.It realizes a kind of wireless access technology.In concept, it be resident between some equipment (such as mobile phone,
One computer or any long-range control machine), and the connection with its core net is provided.RAN equipment includes but is not limited to: in 5G
(g nodeB, gNB), evolved node B (evolved node B, eNB), radio network controller (radio network
Controller, RNC), node B (node B, NB), base station controller (base station controller, BSC), base station
Sending and receiving stations (base transceiver station, BTS), Home eNodeB are (for example, home evolved nodeB or home
Node B, HNB), Base Band Unit (base band unit, BBU), transfer point (transmitting and receiving
Point, TRP), launch point (transmitting point, TP), mobile switching centre etc., in addition, it can include wireless protect
Very (wireless fidelity, wifi) access point (access point, AP) etc..
AMF entity is responsible for access-in management and the mobile management of terminal device, in practical applications comprising 4G network
The mobile management function to ps domain of MME in frame, and joined access management function.
SMF entity is responsible for session management, such as the session establishment of user.
UPF entity is the functional network element in user face, be mainly responsible for connection external network comprising in the 4G network architecture
The correlation function of SGW and P-GW.
DN is responsible for terminal device and provides the network of service, and such as some DN provide function of surfing the Net for terminal device, other
DN provides SMS function etc. for terminal device.
AUSF entity has the function of authentication service, the authentication function for the SEAF request that terminates.
UDM entity can storage terminal device signing information, realize be similar to 4G in HSS rear end.
ARPF entity has the function of Service Ticket storage and processing, such as permanent close for storing the long-term authentication voucher of UE
Key K etc..In 5G, the function of ARPF can be merged into UDM entity.
SEAF entity is used to complete the verification process to terminal device, and in 5G, the function of SEAF can be merged into AMF reality
In body.
SIDF entity can parse the identity information of contracted user, for example, hiding identity (subscription according to contracting
Concealed identifier, SUCI) acquisition signing permanent identity (subscription permanent identifier,
SUPI)。
Terminal device may refer to the terminal device in the network architecture shown in Fig. 1.
The embodiment of the present application is not only suitable for the 4G network architecture shown in FIG. 1, is also applied for the 5G network architecture shown in Fig. 2.
In the embodiment of the present application, first network equipment can be the mobility mobile management function for management terminal device
Energy entity, or the chip in mobile management functional entity or mobile management functional entity, for example, in the MME in 4G, 5G
AMF entity or SEAF entity;Second network equipment can be the private key for storage networking device, or decryption according to net
The store function entity or store function of the message of the public key encryption of network equipment intracorporal chip in fact, for example, the HSS in 4G, 5G
In APRF entity or AUSF entity or SIDF entity or UDM entity.For convenience of description, each embodiment of the application
Using first network equipment as mobile management functional entity, second network equipment is is illustrated for store function entity, not
Limitation.
Disappear it should be noted that not only can protect complete initial NAS using the method that each embodiment of the application provides
Breath, can also protect the part field of Initial NAS message.For convenience of description, each embodiment of the application is disappeared with complete initial NAS
It is illustrated for breath, when protecting the part field of Initial NAS message, the ciphertext of Initial NAS message, Initial NAS message
MAC, the MAC of the ciphertext of Initial NAS message can replace with the ciphertext of Initial NAS message part field, Initial NAS message respectively
The MAC of part field, the MAC of the ciphertext of Initial NAS message part field, not limits.
The method of the message protection of the embodiment of the present application is described in detail with reference to the accompanying drawing.
As shown in figure 3, being a kind of flow diagram of the method for message protection provided by the embodiments of the present application, including following
Step:
Step 301, terminal device obtain protected Initial NAS message according to symmetric key and the first security algorithm.
Wherein, Initial NAS message can be during terminal device is linked into mobile management functional entity, be sent to shifting
First NAS message of dynamic management function entity.Exemplary, Initial NAS message can be registration request (registration
Request, RR) message, attach request (attach request) message or tracking area (tracking area update,
TAU request (TAU request) message etc.) is updated.
Wherein, symmetric key can be encryption key or tegrity protection key, also may include encryption key and complete
Whole property protects key.
Illustratively, symmetric key is encryption key, and the first security algorithm is Encryption Algorithm;Alternatively, symmetric key has been
Whole property protects key, and the first security algorithm is protection algorithm integrallty;Alternatively, symmetric key includes that encryption key and integrality are protected
Key is protected, the first security algorithm includes Encryption Algorithm and protection algorithm integrallty.
Wherein, message content of the encryption being related in the application for sending in sending direction intended recipient is not known
After the third party of the relevant parameters such as road encryption key obtains, it can not know the real content to be expressed of the message, be related in the application
And to integrity protection for ensuring that the message content that intended recipient receives is not distorted by third party, sent out with sender
It is consistent to the message of intended recipient.
It should be noted that when symmetric key is encryption key, the first security algorithm is Encryption Algorithm, it is protected first
Beginning NAS message can be the ciphertext of Initial NAS message;When symmetric key is tegrity protection key, the first security algorithm has been
When whole property protection algorism, protected Initial NAS message can be the Message Authentication Code of Initial NAS message and Initial NAS message
(message authentication code, MAC);When symmetric key includes encryption key and tegrity protection key, quilt
The Initial NAS message of protection can be the ciphertext and MAC of Initial NAS message, and wherein MAC can be the ciphertext of Initial NAS message
MAC or MAC be Initial NAS message MAC, in addition, when symmetric key includes encryption key and tegrity protection key
When, protected Initial NAS message can also be the ciphertext of the Initial NAS message after integrity protection, wherein integrity protection
The content encrypted in the ciphertext of Initial NAS message afterwards includes the MAC of Initial NAS message and Initial NAS message, is specifically protected
MAC in the Initial NAS message of shield is the MAC of ciphertext or the MAC of Initial NAS message and terminal device of Initial NAS message
It is that integrity protection or related, the Yi Ji to the ciphertext progress integrity protection of Initial NAS message are carried out to Initial NAS message
Initial NAS message is first carried out integrity protection in the case where encrypting whether to MAC encrypt, be in specific implementation by
What the internal implementation of terminal device determined.
When specific implementation, symmetric key can be pre-configured on the terminal device, can also be generated by terminal device symmetrical
Key.Three kinds of terminal devices provided herein generate the mode of symmetric key, can be applied on the terminal device in advance
In the case where the generating algorithm for configuring symmetric key, it can also apply the case where symmetric key is pre-configured in terminal device
Under.
The mode one of terminal device generation symmetric key are as follows:
Terminal device generates symmetric key according to the public key of store function entity and the private key of terminal device.It needs to illustrate
, terminal device can be according to the public key and private key of preconfigured asymmetry parameter generation terminal device, optionally, generation
The public key of terminal device and the algorithm of private key can be the complete encryption method of elliptic curve (elliptic curve
Integrated encryption scheme, ECIES).
The mode one for generating symmetric key to terminal device below is illustrated.
Example one: terminal device directly generates symmetrical close according to the public key of store function entity and the private key of terminal device
Key.Optionally, the algorithm for generating symmetric key can be the key agreement function (key for being pre-configured in terminal device
Agreement function, KAF).Optionally, the symmetric key generated in example one can be encryption key or integrality
Key is protected, in the case where can be applied to symmetric key as encryption key or tegrity protection key;Alternatively, it is optional, show
The symmetric key generated in example one not only can be used as encryption key, but also can be used as tegrity protection key, can be applied to
Symmetric key includes under encryption key and tegrity protection key and encryption key and the identical situation of tegrity protection key;
Alternatively, optional, terminal device can be directed to different private keys, set respectively according to according to the public key and terminal of store function entity
Standby private key directly generates symmetric key 1 and symmetric key 2, and wherein terminal device can be close as encrypting by symmetric key 1
Key can regard symmetric key 2 as tegrity protection key, and wherein terminal device includes two or more private key,
Can be applied to symmetric key include encryption key and tegrity protection key and encryption key and tegrity protection key not
With in the case where.
Example two: terminal device generates intermediate key, so according to the public key of store function entity and the private key of terminal device
Afterwards according to intermediate key and fixed character string, symmetric key is generated.Wherein, fixed character string can be pre-configured in terminal device
With network side (such as store function entity), it is either pre-configured in terminal device or network side.Specifically, terminal device and net
Network side can be pre-configured with one or more fixed character string, in the case where being pre-configured with multiple fixed character strings, terminal
Equipment can select at least one fixed character string according to preset algorithm or rule, such as randomly choose at least one and consolidate
Determine character string or selects one or more fixed character strings according to certain priority orders.Specifically, fixed character string can be with
It is " NAS ", " INITIAL " " INITIAL NAS ", " SUPI ", " INITIAL ENC ", " INITIAL NAS ENC ",
" INITIAL INT ", " INITIAL NAS INT " etc., furthermore it should be noted that generating the mode of intermediate key in example two
It is similar with a kind of generation mode of symmetric key of example, for example, the algorithm for generating intermediate key can be to be pre-configured in terminal
The KAF of equipment.
For example, optional, the symmetric key generated in example two can be encryption key or tegrity protection key, can
In the case where being applied to symmetric key as encryption key or tegrity protection key;Alternatively, it is optional, it is raw in example two
At symmetric key may act as encryption key, and can be used as tegrity protection key, can be applied to symmetric key packet
Include encryption key and tegrity protection key and under encryption key and the identical situation of tegrity protection key;Alternatively, optional
, terminal device can be directed to different private keys, respectively according to the private key of the public key of store function entity and terminal device, directly
Symmetric key 1 and symmetric key 2 are generated, symmetric key 1 is then concatenated into, according to centre according to intermediate key 1 and fixed character
Key 2 and fixed character concatenate into symmetric key 2, directly regard symmetric key 1 as encryption key, symmetric key 2 is as complete
Property protection key, wherein terminal device exist two or more private keys, can be applied to symmetric key include encryption it is close
Key is with tegrity protection key and in the case that encryption key is different with tegrity protection key;Alternatively, optional, terminal is set
It is standby that an intermediate key is generated according to the public key of store function entity and the private key of terminal device, it is then close in order to obtain encryption
Key and tegrity protection key, terminal device can choose two different fixed character strings, such as fixed character string 1 and fixed word
Symbol string 2, specifically, fixed character string 1 can be " ENC ", " KEY ENC ", " INIITIAL ENC " etc., fixed character string 2 can
To be " INT ", " KEY INT ", " INIITIAL INT " etc., and according to fixed character string 1 and intermediate key, symmetric key is generated
1, and according to fixed character string 2 and intermediate key, symmetric key 2 is generated, it regard symmetric key 1 as encryption key, it is symmetrical close
Key 2 is used as tegrity protection key, and wherein terminal device may exist one or more than one private key, can be applied to pair
Claiming key includes encryption key with tegrity protection key and in the case that encryption key is different with tegrity protection key.
It should be noted that in example two, a kind of optional mode are as follows: terminal device is directly by the public key of terminal device
It is sent to store function entity, in this case, store function entity is according to the public key and store function entity of terminal device
Private key generate intermediate key, symmetric key is then concatenated into according to intermediate key and symmetrical character;Another optional mode
Are as follows: the intermediate key of generation is sent to store function entity by terminal device, by store function entity according to intermediate key and admittedly
Determine character string and directly generate symmetric key, reduces the step of store function entity generates symmetric key, help to improve
Communication efficiency.There are also a kind of optional modes are as follows: terminal device adds symmetric key according to the public key of store function entity
It is close, the ciphertext of symmetric key is then sent to store function entity, in this case, store function entity only need to be by depositing
The private key for storing up functional entity is decrypted the ciphertext of symmetric key, to obtain symmetric key.Specific terminal device is real to store function
The parameter that body is sent is by algorithm preconfigured in terminal device or strategy decision.
Example three: terminal device generates temporary key 1 according to the public key of store function entity and the private key of terminal device,
Then according to temporary key 1, further cipher key derivative is made based on preconfigured KDF, generates temporary key 2.Optionally, eventually
End equipment directly regard temporary key 2 as symmetric key;Alternatively, terminal device is according to preconfigured truncation (truncted) letter
The truncation of the length of temporary key 1 or temporary key 2 is met preconfigured length by number, obtains symmetric key.
For example, optional, the symmetric key generated in example three can be encryption key or tegrity protection key, can
In the case where being applied to symmetric key as encryption key or tegrity protection key;Alternatively, optional, terminal device root
Concatenate into encryption key or tegrity protection key according to the symmetric key and fixed character that generate in example three, specifically, solid
Determining character string can be " NAS ", " INITIAL ", " INITIAL NAS " etc.;Alternatively, optional, what is generated in example three is symmetrical
Key may act as encryption key, and can be used as tegrity protection key, and can be applied to symmetric key includes that encryption is close
Under key and tegrity protection key and encryption key and the identical situation of tegrity protection key;Alternatively, optional, terminal is set
It is standby private key 1 to can be used and private key 2 generates symmetric key 1 and symmetric key 2 in the way of in example three respectively, then directly
By symmetric key 1 be used as encryption key, symmetric key 2 be used as tegrity protection key, wherein terminal device there are two or
More than two private keys, it includes encryption key and tegrity protection key and encryption key and complete for can be applied to symmetric key
Property protection key it is different in the case where;Alternatively, optional, terminal device is according to the public key of store function entity and terminal device
Private key generates a temporary key 1, and then in order to obtain encryption key and tegrity protection key, terminal device be can choose
Two different fixed character strings, such as fixed character string 1 and fixed character string 2, specifically, fixed character string 1 can be
" ENC ", " KEY ENC ", " INIITIAL ENC " etc., fixed character string 2 can be " INT ", " KEY INT ",
" INIITIALINT " etc., and according to fixed character string 1 and temporary key 1, further key is made based on pre-set KDF
It is derivative, symmetric key 1 is generated, and according to fixed character string 2 and intermediate key, make based on pre-set KDF further
Cipher key derivative generates symmetric key 2, regard symmetric key 1 as encryption key, and symmetric key 2 is used as tegrity protection key,
In, there are one or more than one private keys for terminal device, and can be applied to symmetric key includes that encryption key and integrality are protected
Protect key and encryption key it is different with tegrity protection key in the case where.
The mode two of terminal device generation symmetric key are as follows:
Terminal device generates symmetric key according to random key generating algorithm.Optionally, random key generating algorithm is preparatory
Configuration is on the terminal device.Specifically, terminal device generates and meets with secret according to preconfigured random key generating algorithm
Key generating algorithm requires the key of length, using the key as symmetric key.
For example, optional, the symmetric key generated in mode two can be encryption key or tegrity protection key, can
In the case where being applied to symmetric key as encryption key or tegrity protection key;Alternatively, it is optional, it is generated in mode two
Symmetric key not only can be used as encryption key, but also can be used as tegrity protection key, can be applied to symmetric key includes
Under encryption key and tegrity protection key and encryption key and the identical situation of tegrity protection key;Alternatively, it is optional,
Terminal device according to the symmetric key that preconfigured random key generating algorithm generates may include symmetric key 1 and symmetrical close
Key 2, wherein terminal device can regard symmetric key 1 as tegrity protection key as encryption key, symmetric key 2, can be with
In the case where including encryption key and tegrity protection key applied to symmetric key;Alternatively, optional, terminal device can root
According to preconfigured random key generating algorithm, a temporary key 4 is generated, then according to temporary key 4 and preconfigured
First fixed character string generates encryption key based on KDF, according to temporary key 4 and preconfigured second fixed character string, base
Tegrity protection key is generated in KDF, symmetric key is can be applied to and includes the case where encryption key and tegrity protection key
Under.
The mode three of terminal device generation symmetric key are as follows:
Terminal device generates symmetric key, optionally, permanent key, KDF are pre- according to random number, permanent key and KDF
It first configures in terminal device, random number is that terminal device generates at random.
For example, optional, the symmetric key generated in mode three can be encryption key or tegrity protection key, can
In the case where being applied to symmetric key as encryption key or tegrity protection key;Alternatively, it is optional, it is generated in mode three
Symmetric key not only can be used as encryption key, but also can be used as tegrity protection key, can be applied to symmetric key includes
Under encryption key and tegrity protection key and encryption key and the identical situation of tegrity protection key;Alternatively, it is optional,
Terminal device can generate respectively encryption key and integrity protection based on identical mode respectively according to different random numbers
Key can be applied in the case that symmetric key includes encryption key and tegrity protection key;Alternatively, optional, terminal
Equipment can generate encryption key based on KDF according to permanent key, random number and preconfigured first fixed character string, with
And according to permanent key, random number and preconfigured second fixed character string, tegrity protection key is generated based on KDF, it can
In the case where including encryption key and tegrity protection key applied to symmetric key.
In addition, the first security algorithm can be pre-configured in terminal device in the embodiment of the present application, by terminal device root
It is determined according to the strategy of pre-configuration, wherein the strategy being optionally pre-configured is that network side equipment is sent to terminal device, wherein net
The mobile management functional entity that network side apparatus can need to access for terminal device in the embodiment of the present application, or in network
Other mobile management functional entitys for once accessing of terminal device, such as when terminal device accesses mobile management reality for the first time
When body, what other mobile management functional entitys that the strategy of pre-configuration can once access for terminal device in network were sent.
In addition, the strategy being pre-configured may be artificial configuration in terminal device.The strategy that exemplary one kind is optionally pre-configured
Mode are as follows: if terminal device accesses the mobile management functional entity for the first time, the first security algorithm can be to be pre-configured to be in terminal
The security algorithm of equipment, optionally, if terminal device has been pre-configured multiple security algorithms, the first security algorithm can be pre-
How a security algorithm in multiple security algorithms of configuration, specific terminal device select from multiple security algorithms of pre-configuration
The mode for selecting the first security algorithm is determined by the internal implementation of terminal device.If terminal device is n-th, access should
Mobile management functional entity, wherein N is the integer more than or equal to 2, then the first security algorithm can be terminal device at (N-1)
Used security algorithm when secondary access mobile management entity.Optionally, it is preparatory when the strategy of pre-configuration can also be to dispatch from the factory
Configuration is in terminal device, such as the strategy of pre-configuration can be the security algorithm of highest priority in selection security algorithm.
Step 302, terminal device sends protected Initial NAS message to mobile management functional entity, and to storage
Functional entity sends key relevant parameter, and key relevant parameter is for obtaining symmetric key.
A kind of possible implementation, terminal device directly send key relevant parameter to store function entity;It is another
Key relevant parameter is passed through store function entity by mobile management functional entity by possible implementation, terminal device,
For example, key relevant parameter and protected Initial NAS message can be sent jointly to mobile management function reality by terminal device
Body.
It is exemplary, it is close if symmetric key is generated according to the public key of store function entity and the private key of terminal device
Key relevant parameter includes the public key of terminal device;If symmetric key is generated according to random key generating algorithm, or symmetrical
Key is generated according to random number, permanent key and KDF, then key relevant parameter includes the ciphertext of symmetric key, wherein right
The ciphertext for claiming key is obtained according to the public key of store function entity, specifically, terminal device is according to store function entity
Public key obtains the ciphertext of symmetric key to symmetric key encryption.
Optionally, it for the ease of mobile management functional entity after receiving protected Initial NAS message, obtains initial
NAS message, key relevant parameter further include the ciphertext of the first security algorithm or the first security algorithm, wherein the first safety is calculated
The ciphertext of method is obtained according to the public key of store function entity, specifically, public key of the terminal device according to store function entity,
First security algorithm is encrypted, the ciphertext of the first security algorithm is obtained.
In the case where key relevant parameter does not include the ciphertext of the first security algorithm or the first security algorithm, moving tube
Managing functional entity can be according to symmetric key and the security algorithm itself being pre-configured, to obtain Initial NAS message, under normal conditions
The security algorithm being pre-configured in mobile management functional entity includes the security algorithm being pre-configured in terminal device.
Step 303, store function entity, according to key relevant parameter, obtains symmetrical after receiving key relevant parameter
Key.
It include the public key of terminal device under a kind of example, in key relevant parameter, store function entity can be according to terminal
The public key of equipment and the private key of store function entity generate symmetric key.Specifically, store function entity is according to terminal device
The private key of public key and store function entity generate symmetric key mode and terminal device according to the public key of store function entity and
The mode that the private key of terminal device generates symmetric key is similar, and details are not described herein.
Under another example, in private key generation of the store function entity according to the public key and store function entity of terminal device
Between key, then according to intermediate key and fixed character concatenate into symmetric key mode and terminal device according to store function reality
The public key of body and the private key of terminal device generate intermediate key, then concatenate into symmetric key according to intermediate key and fixed character
Mode it is similar, details are not described herein.
It include the ciphertext of symmetric key under another example, in key relevant parameter, store function entity is according to storage function
The private key of energy entity, is decrypted the ciphertext of symmetric key, obtains symmetric key.
In addition, in key relevant parameter include the first security algorithm ciphertext in the case where, the above method further include: deposit
Functional entity is stored up according to the private key of store function entity, the ciphertext of the first security algorithm is decrypted, the first safety is obtained and calculates
Method.
Step 304, store function entity sends symmetric key to mobile management functional entity.
It should be noted that being generated in store function entity according to the public key of terminal device and the private key of store function entity
In the case where intermediate key, store function entity can also be intermediate close to the symmetric key that mobile management functional entity is sent
Then key can be concatenated into according to intermediate key and fixed character for obtaining Initial NAS message by mobile management functional entity
Symmetric key.
For example, in the case where symmetric key includes encryption key and tegrity protection key, mobile management functional entity
Encryption key can be generated based on KDF according to intermediate key and preconfigured first fixed character string;And according to intermediate close
Key and preconfigured second fixed character string generate tegrity protection key based on KDF.In addition, mobile management functional entity
Symmetric key can also be concatenated into according to intermediate key and fixed character otherwise, it is real specifically to can be found in store function
Body generates the mode of symmetric key, and details are not described herein.
In the case where including the ciphertext of the first security algorithm or the first security algorithm in key relevant parameter, the above method
Further include: store function entity sends the first security algorithm to mobile management functional entity.
Step 305, mobile management functional entity is receiving the protected Initial NAS message from terminal device and is coming
From after the symmetric key of store function entity, according to symmetric key and the first security algorithm, Initial NAS message is obtained.
First security algorithm, which can be, to be pre-configured to be on mobile management functional entity.
Optionally, mobile in the case where store function entity sends the first security algorithm to mobile management functional entity
Management function entity also receives the first security algorithm from store function entity.
Specifically, mobile management functional entity can obtain Initial NAS message based on following manner:
Mode 1: mobile management functional entity disappears to protected initial NAS according to symmetric key and the first security algorithm
Breath is decrypted, and to obtain Initial NAS message, can be applied to the ciphertext that protected Initial NAS message is Initial NAS message
In the case where, wherein symmetric key is encryption key, the first security algorithm is Encryption Algorithm, and the ciphertext of Initial NAS message is root
It is obtained according to encryption key and the first security algorithm,.
Mode 2: mobile management functional entity verifies the complete of Initial NAS message according to symmetric key and the first security algorithm
Whole property, can be applied to symmetric key is in the case that tegrity protection key, the first security algorithm are protection algorithm integrallty.
Specifically, mobile management functional entity can verify the integrality of Initial NAS message based on following manner: due to protected initial
NAS message is the MAC of Initial NAS message and Initial NAS message, then mobile management functional entity can be according to symmetric key, the
One security algorithm and the Initial NAS message received generate new MAC, if the MAC in new MAC and protected Initial NAS message
It is identical, then the integrality success of mobile management functional entity verification Initial NAS message;If new MAC and protected initial NAS disappears
MAC in breath is different, then the integrality failure of mobile management functional entity verification Initial NAS message.
Mode 3: for mobile management functional entity according to tegrity protection key and tegrity protection key's algorithm, verification is initial
The integrality of the ciphertext of NAS message, wherein mobile management functional entity verifies the integrality and mode of the ciphertext of Initial NAS message
The integrality of mobile management functional entity verification Initial NAS message is similar in 2, and this will not be repeated here.Optionally, in movement
In the successful situation of integrality of the ciphertext of management function entity checks Initial NAS message, mobile management functional entity further according to
The ciphertext of Initial NAS message is decrypted in encryption key and Encryption Algorithm, obtains Initial NAS message;Alternatively, it is optional, it moves
Management function entity is moved regardless of the check results of integrity protection, all directly the ciphertext of Initial NAS message is decrypted,
Aforesaid way can be applied to the ciphertext of the ciphertext that protected Initial NAS message is Initial NAS message and Initial NAS message
In the case where MAC, wherein symmetric key includes encryption key and tegrity protection key, and the first security algorithm includes Encryption Algorithm
And protection algorithm integrallty, the ciphertext of Initial NAS message are obtained according to encryption key and Encryption Algorithm, Initial NAS message
The MAC of ciphertext be to be obtained according to tegrity protection key and tegrity protection key's algorithm.
Mode 4: mobile management functional entity first has to according to encryption key and Encryption Algorithm, to protected initial NAS
Message is decrypted, and obtains Initial NAS message, and then according to tegrity protection key and protection algorithm integrallty, verification is obtained
Initial NAS message integrality, the integrality and mode of the Initial NAS message that wherein mobile management functional entity verifies
The integrality of mobile management functional entity verification Initial NAS message is similar in 2, and this will not be repeated here.Aforesaid way can be with
It is that ciphertext that protected Initial NAS message is Initial NAS message and initial NAS disappear applied to protected Initial NAS message
The MAC of breath or the ciphertext of the Initial NAS message after integrity protection, Initial NAS message after integrity protection it is encrypted
Content in include Initial NAS message and Initial NAS message MAC in the case where, wherein symmetric key include encryption key and
Tegrity protection key, the first security algorithm include Encryption Algorithm and protection algorithm integrallty, the ciphertext of Initial NAS message or
The ciphertext of Initial NAS message after integrity protection is obtained according to encryption key and Encryption Algorithm, Initial NAS message
MAC is obtained according to tegrity protection key and tegrity protection key's algorithm.
In the present embodiment, terminal device according to symmetric key and the first security algorithm in Initial NAS message whole or
Partial content has carried out safeguard protection, not by receive the network equipment send NAS SMC message after could to NAS message into
The limitation of row safeguard protection not only increases the reliability of Initial NAS message transmission, also improves the access efficiency of terminal device.
It should be noted that a kind of alternative as embodiment shown in Fig. 3, step 302 could alternatively be: eventually
End equipment sends protected Initial NAS message and key relevant parameter to store function entity.In specific implementation, optional
, terminal device sends protected Initial NAS message and key relevant parameter, mobile management function to mobile management functional entity
Energy entity, will be protected first after receiving the protected Initial NAS message and key relevant parameter from terminal device
Beginning NAS message and key relevant parameter pass through store function entity.Alternatively, optional, terminal device directly will be protected
Initial NAS message and key relevant parameter are sent to store function entity.Then step 303 is executed, and is executing the step 303
Afterwards, step 304 and step 305 are replaced are as follows: store function entity obtains initial according to symmetric key and the first security algorithm
Then NAS message sends Initial NAS message to mobile management functional entity, wherein store function entity according to symmetric key and
First security algorithm obtains in the mode and step 305 of Initial NAS message mobile management functional entity according to symmetric key and the
The mode that one security algorithm obtains Initial NAS message is similar, and details are not described herein.
Further, since mobile management functional entity obtains the true content for needing to transmit in protected Initial NAS message
It is to be obtained under the premise of getting symmetric key and the first security algorithm, therefore work as mobile management entity and getting initially
After NAS message, when needing to send downlink NAS message to terminal device, in order to improve the reliability of downlink NAS message transmission,
After can carrying out safeguard protection to downlink NAS message according to symmetric key and the first security algorithm, it is sent to terminal device.
Specifically, a, a kind of optional implementation are as follows:
Mobile management functional entity obtains protected downlink NAS message, so according to symmetric key and the first security algorithm
Protected downlink NAS message is sent to terminal device afterwards, terminal device is receiving the quilt from mobile management functional entity
After the downlink NAS message of protection, downlink NAS message is obtained according to symmetric key and the first security algorithm.Wherein, it needs to illustrate
It is that mobile management entity can join according to the mode that symmetric key and the first security algorithm obtain protected downlink NAS message
See that terminal device obtains the mode of protected Initial NAS message according to symmetric key and the first security algorithm.Terminal device root
According to the mode of symmetric key and the first security algorithm acquisition downlink NAS message referring to mobile management functional entity according to symmetric key
The mode of Initial NAS message is obtained with the first security algorithm.
Exemplary, when Initial NAS message is login request message, downlink NAS message can receive for registration
(registration accept) message, registration reject (registration reject) message or NAS SMC message etc..
For example, downlink NAS message is NAS SMC message or registration received message, in order to improve the transmission of downlink NAS message
Reliability, optionally, mobile management functional entity obtains protected downlink according to symmetric key and the first security algorithm
Then NAS message is sent protected wherein protected downlink NAS message is the ciphertext of downlink NAS message to terminal device
Downlink NAS message, terminal device is after receiving protected downlink NAS message, according to symmetric key and the first security algorithm,
Protected downlink NAS message is decrypted, downlink NAS message is obtained.Aforesaid way can be applied to symmetric key
In the case that encryption key, the first Complete Algorithm include Encryption Algorithm.In addition, it is optional, it include encryption key in symmetric key
And tegrity protection key, in the case that the first security algorithm includes Encryption Algorithm and protection algorithm integrallty, under protected
Row NAS message may include the ciphertext of downlink NAS message and the ciphertext of downlink NAS message MAC or protected downlink
NAS message includes the ciphertext of downlink NAS message and the MAC of downlink NAS message or the downlink NAS message after integrity protection
Ciphertext, wherein in the encrypted content of the ciphertext of the downlink NAS message after integrity protection include downlink NAS message and downlink
The MAC of NAS message.Optionally, symmetric key include tegrity protection key, the first security algorithm be protection algorithm integrallty
In the case where, protected downlink NAS message is the MAC of downlink NAS message and downlink NAS message.
For another example downlink NAS message is registration reject message, mobile management functional entity is pacified according to symmetric key and first
Full algorithm carries out integrity protection to downlink NAS message, obtains protected downlink NAS message;And quilt is sent to terminal device
The downlink NAS message of protection.Terminal device is after receiving downlink NAS message, according to symmetric key and the first security algorithm, school
Test the integrality of downlink NAS message.It includes tegrity protection key, the first safety calculation that aforesaid way, which can be applied to symmetric key,
In the case that method includes protection algorithm integrallty.
Specifically, since mobile management functional entity is possible to the registration request of refusal terminal device, as SUPI can not be looked for
Arrive, terminal device is illegal etc., the reason of specifically leading to the registration request of mobile management functional entity refusal terminal device, can join
See the table 9.9.3.9.1 of 3GPP TS 24.301.And registration reject message can not be protected under normal conditions in the prior art, lead
The registration reject message for causing mobile management functional entity to send to terminal device may be tampered, be forged, by sniff etc., cause
Terminal device enters DoS state.And in the embodiment of the present application, in the case where downlink NAS message is registration reject message, pass through
Implementation a mobile management functional entity can carry out registration reject message according to symmetric key and the first security algorithm
The protection of whole property and/or encryption, thus help to reduce registration reject message be tampered, be forged, by sniff etc. a possibility that.
B, another optional implementation are as follows:
Mobile management functional entity obtains the ciphertext of downlink NAS message according to symmetric key and the first security algorithm, wherein
Downlink NAS message includes the second security algorithm, and then mobile management functional entity is according to the second security algorithm to downlink NAS message
Ciphertext carry out integrity protection, obtain protected downlink NAS message, then send protected downlink NAS to terminal device
Message.Terminal device is after receiving the protected downlink NAS message from mobile management functional entity, according to symmetric key
It is decrypted with ciphertext of first security algorithm to downlink NAS message, obtains downlink NAS message, then terminal device is from downlink
The second security algorithm obtained in NAS message verifies the integrality of the ciphertext of downlink NAS message then according to the second security algorithm.
Exemplary, in this kind of implementation, downlink NAS message can be registration received message.
Specifically, in the case where symmetric key includes encryption key, the first security algorithm includes Encryption Algorithm, in network
Side, mobile management functional entity encrypt downlink NAS message according to encryption key and Encryption Algorithm, obtain downlink NAS and disappear
The ciphertext of breath;In terminal side, terminal device is decrypted the ciphertext of downlink NAS message according to encryption key and Encryption Algorithm,
Obtain downlink NAS message.
C, another possible implementation are as follows:
Mobile management functional entity is according to the second security algorithm, to downlink NAS message progress integrity protection, and according to
Symmetric key and the first security algorithm obtain protected downlink NAS message, wherein protected downlink NAS message is complete
Property protection after downlink NAS message ciphertext, then send protected downlink NAS message to terminal device.Terminal device exists
After receiving the protected downlink NAS message from mobile management functional entity, according to symmetric key and the first security algorithm
Protected downlink NAS message is decrypted, downlink NAS message is obtained, the second safety is then obtained from downlink NAS message
Algorithm, and according to the second security algorithm, verify the integrality of downlink NAS message.Specifically, the downlink NAS after integrity protection
It include the MAC of downlink NAS message and downlink NAS message in the encrypted content of the ciphertext of message.
It should be noted that the embodiment of the present application mobile management functional entity can also be according to the second security algorithm, under
Row NAS message carries out integrity protection, obtains the MAC of downlink NAS message, and according to symmetric key and the first security algorithm,
Downlink NAS message is encrypted, the ciphertext of downlink NAS message is obtained, protected downlink NAS disappears in this implementation
Breath is the ciphertext of downlink NAS message and the MAC of downlink NAS message.Then protected downlink NAS is sent to terminal device to disappear
Breath.Terminal device is after receiving the protected downlink NAS message from mobile management functional entity, first according to symmetric key
It is decrypted to obtain downlink NAS message with ciphertext of first security algorithm to downlink NAS message, then from downlink NAS message
The second security algorithm is obtained, further according to the integrality of the second security algorithm verification downlink NAS message.
Exemplary, in above-mentioned implementation, downlink NAS message can be registration received message or NAS SMC message
Deng.
Wherein in implementation b, c, the second security algorithm includes protection algorithm integrallty, and optionally, the second safety is calculated
It can also include Encryption Algorithm in method, specifically, the second security algorithm is peace of the mobile management functional entity according to terminal device
The algorithm list selection of all-round power and pre-configuration.It should be noted that the first security algorithm can phase with the second security algorithm
Together, it can also be different, for example, the Encryption Algorithm phase that Encryption Algorithm and the second security algorithm that the first security algorithm includes include
The protection algorithm integrallty that the protection algorithm integrallty and the second security algorithm that same, the first security algorithm includes include is different;Or
Encryption Algorithm that person, the Encryption Algorithm that the first security algorithm includes and the second security algorithm include is different, the first security algorithm packet
The protection algorithm integrallty that the protection algorithm integrallty and the second security algorithm included includes is identical;Alternatively, the first security algorithm packet
The protection algorithm integrallty that the Encryption Algorithm included is identical with the Encryption Algorithm that the second security algorithm includes, the first security algorithm includes
It is identical with the protection algorithm integrallty that the second security algorithm includes;Alternatively, the Encryption Algorithm and second that the first security algorithm includes
The protection algorithm integrallty and the second security algorithm that Encryption Algorithm that security algorithm includes is different, the first security algorithm includes include
Protection algorithm integrallty it is different.It optionally, can not be under the first security algorithm and the identical situation of the second security algorithm
The second security algorithm is carried in downlink NAS message, alternatively, the Encryption Algorithm for including in the first security algorithm and the second security algorithm
Including the protection algorithm integrallty that Encryption Algorithm is identical, the first security algorithm includes and the integrality that the second security algorithm includes
In the case that protection algorism is different, the second security algorithm is carried in downlink NAS message, the second peace carried in downlink NAS message
It include protection algorithm integrallty and Encryption Algorithm not to be covered in full algorithm.Terminal device is after obtaining downlink NAS message, then
It is subsequent based on the security algorithm carried in downlink NAS message, communicated between mobile management functional entity.
When downlink NAS message is NAS SMC message, facilitate while improving Initial NAS message transmission reliability
Preferably it is compatible with the negotiation process of existing security algorithm.Optionally, when mobile management functional entity determine security algorithm with
In the case that the security algorithm that terminal device determines is inconsistent, mobile management functional entity can be by NAS SMC message to end
End equipment sends the security algorithm of itself determination, determines when the security algorithm that mobile management functional entity determines with terminal device
Under security algorithm unanimous circumstances, NAS SMC message can not can be sent to terminal device with mobile management functional entity, helped
In the interaction for reducing signaling to a certain extent, the efficiency of communication is provided;When downlink NAS message is registration received message, then
Mobile management functional entity directly can negotiate the security algorithm used by registration received message and terminal device, omit NAS
The transmission of SMC message facilitates the interaction for reducing signaling, improves the efficiency of communication.
Below based on the different implementation of symmetric key, the method for the embodiment of the present application message protection is carried out specific
It introduces.
Shown in Figure 4, a kind of method of message protection provided by the embodiments of the present application, this method includes with symmetric key
It is illustrated, specifically comprises the following steps: for encryption key and tegrity protection key
Step 401, it is symmetrical close to generate first according to the public key of store function entity and the private key of terminal device for terminal device
Key, wherein the first symmetric key includes the first encryption key and the first tegrity protection key.
Specifically, the mode that terminal device generates the first symmetric key may refer to terminal device in embodiment illustrated in fig. 3
The mode of symmetric key is generated according to the private key of the public key of store function entity and terminal device, details are not described herein.
Step 402, terminal device encrypts Initial NAS message according to the first encryption key and the first Encryption Algorithm,
Obtain the ciphertext of Initial NAS message.
Wherein, the first Encryption Algorithm can be pre-configured in terminal device and mobile management functional entity.
Step 403, terminal device is according to the first tegrity protection key and the first protection algorithm integrallty, to initial NAS
The ciphertext of message carries out integrity protection, obtains the MAC of the ciphertext of Initial NAS message.
Wherein, the first protection algorithm integrallty can be pre-configured in terminal device and mobile management functional entity.
Step 404, terminal device sends protected Initial NAS message and terminal device to mobile management functional entity
Public key.
Wherein, protected Initial NAS message may include the ciphertext of Initial NAS message and the ciphertext of Initial NAS message
MAC.
Step 405, mobile management functional entity is in the public key for receiving protected Initial NAS message and terminal device
Afterwards, the public key of terminal device is sent to store function entity.
Step 406, store function entity receive mobile management functional entity transmission terminal device public key after, according to
The public key of terminal device and the private key of store function entity generate the second symmetric key.
Wherein, the second symmetric key may include the second encryption key and the second tegrity protection key, specifically, second
Encryption key and the first encryption key can be identical, and the second tegrity protection key and the first tegrity protection key can phases
Together.
Wherein, the mode that store function entity generates the second symmetric key may refer to store function in embodiment illustrated in fig. 3
Energy entity generates the mode of symmetric key according to the public key of terminal device and the private key of store function entity, is not repeated herein
It is bright.
Step 407, store function entity sends the second symmetric key to mobile management functional entity.
Step 408, after mobile management functional entity receives the second symmetric key of store function entity transmission, according to the
Two tegrity protection keys and the first protection algorithm integrallty, verify the integrality of the ciphertext of Initial NAS message.
Wherein, mobile management functional entity verifies message in the mode and Fig. 3 of the integrality of the ciphertext of Initial NAS message and protects
The mode that the integrality of Initial NAS message is verified in the method for shield is similar, and this will not be repeated here.
Step 409, mobile management functional entity is in the completeness check success of the ciphertext of Initial NAS message, according to the
Two encryption keys and the first Encryption Algorithm, are decrypted the ciphertext of Initial NAS message, obtain Initial NAS message.
Wherein, mobile management functional entity can send downlink NAS to terminal device and disappear after obtaining Initial NAS message
Step 410~step 412 can also be performed in order to improve the reliability of transmission downlink NAS message in breath.
Step 410, mobile management functional entity is according to the second symmetric key and the first security algorithm, under acquisition is protected
Row NAS message.
It should be noted that mobile management functional entity obtains the specific implementation side of protected downlink NAS in step 410
Mobile management functional entity obtains the specific implementation of protected downlink NAS message in formula and embodiment shown in Figure 3
Similar, this will not be repeated here.
Step 411, mobile management functional entity sends protected downlink NAS message to terminal device.
Step 412, terminal device is after receiving protected downlink NAS message, according to the second symmetric key and first
Security algorithm obtains downlink NAS message.
It should be noted that in step 412 terminal device obtain downlink NAS specific implementation with it is shown in Figure 3
The specific implementation of terminal device acquisition downlink NAS message is similar in embodiment, and this will not be repeated here.
Wherein, Initial NAS message be registration request in the case where, downlink NAS message can for registration received message,
NASSMC message or registration reject message, specific downlink NAS message are which message can be by mobile management functional entity root
It is determined according to actual conditions or the strategy of pre-configuration.
Illustratively, in the embodiment shown in fig. 4, the second symmetric key includes the second encryption key and the second integrality
Key is protected, the first security algorithm includes the first Encryption Algorithm and the first protection algorithm integrallty, and mobile management functional entity can
To carry out safeguard protection to downlink NAS message as follows:
Safeguard protection mode one: mobile management functional entity uses the part of key and the first safety in the second symmetric key
Corresponding portion algorithm in algorithm carries out safeguard protection to downlink NAS message, such as only uses the first Encryption Algorithm and second and add
Close key pair downlink NAS message carries out safeguard protection;Or only use the first protection algorithm integrallty and the second integrity protection
Key pair downlink NAS message carries out safeguard protection etc..
Safeguard protection mode two: mobile management functional entity is using the first security algorithm and the second symmetric key both to downlink
NAS message carries out integrity protection and encryption.
Safeguard protection mode three: mobile management functional entity is according to the first Encryption Algorithm and the second encryption key to downlink
NAS message is encrypted, and carries out integrality according to ciphertext of second security algorithm to downlink NAS message or downlink NAS message
Protection, wherein the second security algorithm is the algorithm column of security capabilities and pre-configuration of the mobile management functional entity based on terminal device
Table selection;Second security algorithm includes the second protection algorithm integrallty, and optional second security algorithm can also include second
Encryption Algorithm, wherein including the second security algorithm in downlink NAS message in safeguard protection mode three.
It should be noted that mobile management functional entity which kind of safeguard protection mode be specifically chosen can be by the calculation that is pre-configured
Method determines.
In the present embodiment, terminal device is in initial access network, according to the first symmetric key and the first security algorithm pair
Initial NAS message carries out encryption and integrity protection, not only increases Initial NAS message transmission security, also improves terminal
The efficiency of equipment access network.In addition, mobile management functional entity, after obtaining Initial NAS message, opposite terminal device is sent
Downlink NAS message also carried out safeguard protection, improve downlink NAS message transmission safety.
It should also be noted that, a kind of alternative as embodiment illustrated in fig. 4, step 402 and step 403 can be with
Replacement are as follows: if protected Initial NAS message includes the ciphertext of Initial NAS message and the MAC of Initial NAS message, terminal is set
It is standby that integrity protection, and root are carried out to Initial NAS message according to the first tegrity protection key and the first protection algorithm integrallty
Initial NAS message is encrypted according to the first encryption key and the first Encryption Algorithm.There is no inevitable elder generation between the two step
Sequence is executed afterwards, for example, the encrypting step of Initial NAS message can be first carried out, then executes the integrity protection of Initial NAS message
Step, the integrity protection step that can also first carry out Initial NAS message execute the encrypting step of Initial NAS message again.
Further, step 408 and step 409 could alternatively be: mobile management functional entity receive it is protected
After Initial NAS message, which includes the ciphertext of Initial NAS message and the MAC of Initial NAS message, is moved
Dynamic management function entity can first be decrypted after obtaining Initial NAS message the ciphertext of Initial NAS message, then verify initial
The integrality of NAS message.Other steps can be found in the step in embodiment illustrated in fig. 4, repeat no more.
Certainly, embodiment illustrated in fig. 4 is intended only as a kind of example and is illustrated, for example, only providing in embodiment illustrated in fig. 4
A kind of mode generating symmetric key, furthermore symmetric key can also be pre-configured in terminal device in the embodiment of the present application
In, alternatively, symmetric key can also be generated according to random key generating algorithm or random number etc..
Shown in Figure 5, a kind of method of message protection provided by the embodiments of the present application, this method is to add with symmetric key
It is illustrated for key, it is specific as follows.
Step 501, terminal device generates encryption key.
It is generated specifically, the mode that terminal device generates encryption key may refer to terminal device in embodiment illustrated in fig. 3
The mode of symmetric key, details are not described herein.
Step 502, terminal device encrypts encryption key according to the public key of store function entity, obtains encrypting close
The ciphertext of key.
Step 503, terminal device encrypts Initial NAS message according to encryption key and the first Encryption Algorithm, obtains
The ciphertext of Initial NAS message.
Wherein, the first Encryption Algorithm can be pre-configured in terminal device and mobile management functional entity.
Step 504, terminal device to mobile management functional entity send Initial NAS message ciphertext and encryption key it is close
Text.
Step 505, mobile management functional entity is after the ciphertext of the ciphertext and encryption key that receive Initial NAS message,
The ciphertext of encryption key is sent to store function entity.
Step 506, store function entity receive mobile management functional entity transmission encryption key ciphertext after, according to
The private key of store function entity is decrypted the ciphertext of encryption key, obtains encryption key.
Step 507, store function entity sends encryption key to mobile management functional entity.
Step 508, it is close according to encrypting after mobile management functional entity receives the encryption key that store function entity is sent
Key and the first Encryption Algorithm, decrypt the ciphertext of Initial NAS message, obtain Initial NAS message.
Specifically, mobile management functional entity can send downlink NAS to terminal device after obtaining Initial NAS message
Message can execute step 509~step 511 to improve the reliability of transmission downlink NAS message.
Step 509, mobile management functional entity encrypts downlink NAS message, obtains downlink according to encryption key
The ciphertext of NAS message.
Step 510, mobile management functional entity sends the ciphertext of downlink NAS message to terminal device.
Step 511, terminal device is calculated after the ciphertext for receiving downlink NAS message according to encryption key and the first encryption
The ciphertext of downlink NAS message is decrypted in method, obtains downlink NAS message.
Wherein, Initial NAS message be registration request in the case where, downlink NAS message can for registration received message,
NASSMC message or registration reject message, in addition, specific downlink NAS message is which message can be real by mobile management function
Body is according to the actual situation or the strategy of pre-configuration is determined.
In addition, mobile management functional entity can be set based on terminal in the method for the message protection of embodiment shown in Fig. 5
The algorithm list of standby security capabilities and pre-configuration selects new Encryption Algorithm and/or protection algorithm integrallty, and passes through downlink
NAS message is sent to terminal device, can be in addition, mobile management functional entity has been after having selected new protection algorithm integrallty
After first the new protection algorithm integrallty based on selection carries out integrity protection to downlink NAS message, then execute step 509.
In the present embodiment, terminal device, can be according to encryption key and the first Encryption Algorithm pair in initial access network
Initial NAS message is encrypted, and is not only improved Initial NAS message transmission security, is also improved terminal equipment access network
Efficiency, in addition, mobile management functional entity is after obtaining Initial NAS message, the downlink NAS message that opposite terminal device is sent
Safeguard protection has been carried out, the safety of downlink NAS message transmission is improved.
Certainly, embodiment illustrated in fig. 5 is intended only as a kind of example and is illustrated, for example, only providing in embodiment illustrated in fig. 5
A kind of mode generating encryption key, furthermore encryption key can also be pre-configured in terminal device in the embodiment of the present application
In, alternatively, can also be encrypted according to generations such as the public key generation of the private key and store function entity of terminal device or random numbers
Key.For another example a kind of configuration mode of security algorithm is only gived in embodiment illustrated in fig. 5, further, it is also possible in storage function
It can be pre-configured with security algorithm in entity, then mobile management functional entity etc. is sent to by store function entity.
Shown in Figure 6, the embodiment of the present application provides a kind of method of message protection, and this method has been with symmetric key
It is illustrated for whole property protection key, it is specific as follows.
Step 601, terminal device generates tegrity protection key.
Specifically, the mode for the tegrity protection key that terminal device generates may refer to terminal in embodiment illustrated in fig. 3
Equipment generates the mode of symmetric key, and details are not described herein.
Step 602, terminal device protects tegrity protection key and the first integrality according to the public key of store function entity
Shield algorithm is encrypted, and the first ciphertext is obtained.
Wherein, the encrypted content of the first ciphertext may include tegrity protection key and the first protection algorithm integrallty.
Wherein, the first protection algorithm integrallty can be what terminal device was determined according to the strategy of pre-configuration, wherein prewired
The configuration mode for the strategy set is similar with the associated description in embodiment illustrated in fig. 3, and it is no longer repeated herein.
Step 603, terminal device is according to tegrity protection key and the first protection algorithm integrallty, to Initial NAS message
Integrity protection is carried out, the MAC of Initial NAS message is obtained.
Step 604, terminal device to mobile management functional entity send the MAC of Initial NAS message, Initial NAS message and
First ciphertext.
Optionally, the first protection algorithm integrallty is pre-configured in terminal device and mobile management functional entity, at this
In the case of kind, terminal device is not necessarily to carry out encrypting to the first protection algorithm integrallty to be sent to store function entity.
Step 605, mobile management functional entity is in MAC, the Initial NAS message and first close for receiving Initial NAS message
Wen Hou sends the first ciphertext to store function entity.
Step 606, after store function entity receives the first ciphertext that mobile management functional entity is sent, according to storage function
The private key of energy entity, is decrypted key to the first ciphertext, obtains tegrity protection key and the first protection algorithm integrallty.
Step 607, store function entity sends tegrity protection key and the first integrality to mobile management functional entity
Protection algorism.
Step 608, mobile management functional entity receives the tegrity protection key and first of store function entity transmission
After protection algorithm integrallty, according to tegrity protection key and the first protection algorithm integrallty, the complete of Initial NAS message is verified
Property.
Wherein, it is verified in the mode and embodiment illustrated in fig. 3 of mobile management functional entity verification Initial NAS message integrality
The mode of the integrality of Initial NAS message is similar, and this will not be repeated here.
Mobile management functional entity, can be to terminal in the completeness check success to the Initial NAS message received
Equipment sends downlink NAS message, and in order to improve the reliability of transmission downlink NAS message, step 609~step can also be performed
611。
Step 609, mobile management functional entity is according to tegrity protection key and the first protection algorithm integrallty, to downlink
NAS message carries out integrity protection, obtains the MAC of downlink NAS message.
Step 610, mobile management functional entity sends the MAC and downlink NAS message of downlink NAS message to terminal device.
Step 611, terminal device is protected after the MAC for receiving downlink NAS message and downlink NAS message according to integrality
Key and the first protection algorithm integrallty are protected, the integrality of downlink NAS message is verified.
Wherein, Initial NAS message be registration request in the case where, downlink NAS message can for registration received message,
NASSMC message or registration reject message, specifically, downlink NAS message are which message can be by mobile management functional entity
According to the actual situation or the strategy of pre-configuration is determined.
In addition, in the method for message protection shown in Fig. 6, if safety of the mobile management functional entity based on terminal device
Ability and the algorithm list of pre-configuration have selected new protection algorithm integrallty, can be sent to terminal by downlink NAS message
Equipment, in addition, mobile management functional entity can be first after having selected new protection algorithm integrallty in mobile management functional entity
New protection algorithm integrallty based on selection carries out integrity protection to downlink NAS message, specifically, terminal device is receiving
After to the MAC of downlink NAS message and downlink NAS message, new protection algorithm integrallty is first obtained from downlink NAS message, so
Carry out the completeness check of downlink NAS message again afterwards.
In the present embodiment, terminal device is in initial access network, according to Integrity Key and the first integral algorithm pair
Initial NAS message carries out integrity protection, to improve to Initial NAS message integrity protection, in addition, mobile management function is real
Body can receive protected Initial NAS message, and in the successful situation of completeness check of Initial NAS message, opposite
The downlink NAS message that terminal device is sent also carries out integrity protection, improves the safety of downlink NAS message transmission.
Certainly, Fig. 6 is intended only as a kind of example and is illustrated, for example, only giving a kind of generation integrity protection in Fig. 6
The mode of key, furthermore tegrity protection key can also be according to the private key and store function of terminal device in the embodiment of the present application
The public key of entity generates or the generation tegrity protection keys such as random key generating algorithm.For another example being only gived in Fig. 6
A kind of configuration mode of security algorithm, further, it is also possible to be pre-configured with security algorithm in store function entity, then by storage function
Energy entity is sent to mobile management functional entity etc..
It is above-mentioned that mainly scheme provided by the present application is described from the angle of interaction between each network element.It is understood that
, in order to realize the above functions, it comprises execute the corresponding hardware configuration of each function and/or soft for above-mentioned each network element of realization
Part module.Those skilled in the art should be readily appreciated that, in conjunction with each example of embodiment description disclosed herein
Unit and algorithm steps, the application can realize with the combining form of hardware or hardware and computer software.Some function
It is executed in a manner of hardware or computer software driving hardware actually, the specific application and design depending on technical solution are about
Beam condition.Professional technician can use different methods to achieve the described function each specific application, still
It is this to realize it is not considered that exceeding scope of the present application.
Based on identical design, as shown in fig. 7, being a kind of schematic device of message protection provided by the present application, the dress
Setting can be terminal device and can also be can be performed above-mentioned such as Fig. 3, Fig. 4, Fig. 5 and Fig. 6 with the chip or system on chip in terminal device
Shown in the method that is executed by terminal device in any embodiment.
The device 700 includes at least one processor 710, memory 730.
Wherein, memory 730 can be ROM or can store the other types of static information and instruction for storing program
Static storage device such as RAM or the other kinds of dynamic memory of information and instruction can be stored, being also possible to electricity can
Erasable programmable read-only memory (Electrically erasable programmabler-only memory, EEPROM), only
Read CD (compact disc read-only memory, CD-ROM) or other optical disc storages, optical disc storage (including compression
Optical disc, laser disc, optical disc, Digital Versatile Disc, Blu-ray Disc etc.), magnetic disk storage medium or other magnetic storage apparatus or
Can be used in carry or store have instruction or data structure form desired program and can be by any of computer access
Other media, but not limited to this.Memory 730, which can be, to be individually present, and is connected with processor 710.Memory 730 can also be with
It is integrated with processor 710.
Processor 710 is used to execute program in memory 730, in the scheme to realize the embodiment of the present application message protection
Step performed by terminal device, correlated characteristic are referred to above, and details are not described herein again.For example, processor 710 can be one
A universal cpu, microprocessor, specific ASIC or one or more are for controlling the integrated of technical scheme program execution
Circuit.
In the concrete realization, as one embodiment, processor 710 may include one or more CPU, such as in Fig. 7
CPU0 and CPU1.
In the concrete realization, as one embodiment, device 700 may include multiple processors, such as the processing in Fig. 7
Device 710 and processor 711.Each of these processors can be monokaryon (single-CPU) processor, can also be with
It is multicore (multi-CPU) processor, processor here can refer to one or more equipment, circuit, and/or for locating
Manage the processing core of data (such as computer program instructions).
Optionally, when device 700 be terminal device when can also include transceiver 720 as shown in Figure 7, be used for and other
Equipment or communication, transceiver 720 include radio circuit.Wherein in terminal device processor 710, transceiver 720,
Memory 730 can be connected by communication bus.Communication bus may include an access, and information is transmitted between said units.When
Device 700 is chip in terminal device or when system on the upper side, processor 710 can by input/output interface, pin or
Circuit etc. sends or receives data.
As shown in figure 8, the schematic diagram of the device of the embodiment of the present application another kind message protection, the device can be terminal and set
It is standby to be can be performed above-mentioned such as Fig. 3, Fig. 4, Fig. 5 and any implementation shown in fig. 6 with the chip or system on chip in terminal device
The method executed in example by terminal device.
The device includes processing unit 801 and communication unit 802.
Wherein, processing unit 801, for obtaining protected initial NAS and disappearing according to symmetric key and the first security algorithm
Breath, communication unit 802, for sending protected Initial NAS message to first network equipment;And it is sent out to second network equipment
Key relevant parameter is sent, wherein key relevant parameter is for obtaining symmetric key.
Optionally, key relevant parameter includes the public key of terminal device, and processing unit 801 is specifically used for according to the second network
The public key of equipment and the private key of terminal device generate symmetric key.
Optionally, processing unit 801 is specifically used for being generated according to the public key of second network equipment and the private key of terminal device
Intermediate key;Then according to intermediate key and fixed character string, symmetric key is generated.
Optionally, key relevant parameter includes the ciphertext of symmetric key, and wherein the ciphertext of symmetric key is according to the second net
What the public key of network equipment obtained, processing unit 801 is specifically used for according to random key generating algorithm, and generation piles key;Alternatively,
Optionally, processing unit 801 is specifically used for according to random number, permanent key and cipher key derivative function (key derivation
Function, KDF), generate symmetric key.
Optionally, key relevant parameter includes the ciphertext of the first security algorithm, wherein the ciphertext of the first security algorithm is root
It is obtained according to the public key of second network equipment.
Optionally, the first security algorithm is that terminal device is determined according to the strategy of pre-configuration.
Optionally, Initial NAS message is login request message.
Optionally, processing unit 801 is also used to receive in communication unit 802 from the protected of first network equipment
After downlink NAS message, protected downlink NAS message is decrypted according to symmetric key and the first security algorithm, under acquisition
Row NAS message, wherein downlink NAS message can be registration received message or NAS SMC message.
Optionally, communication unit 802 is also used to receive the protected downlink NAS message from first network equipment,
It include the second security algorithm in middle downlink NAS message, then processing unit 801 is also used to according to symmetric key and the first security algorithm
Protected downlink NAS message is decrypted, downlink NAS message is obtained, the second safety is then obtained from downlink NAS message
Algorithm is calculated if last first network equipment is the integrity protection carried out to the ciphertext of downlink NAS message according to the second safety
Method verifies the integrality of protected downlink NAS message, if first network equipment is protected to the integrality that downlink NAS message carries out
Shield then verifies the integrality of downlink NAS message according to the second security algorithm.Wherein downlink NAS message is registration received message.
Optionally, communication unit 802 is also used to receive the protected downlink NAS message from first network equipment, place
Reason unit 801 is also used to verify the integrality of downlink NAS message, wherein downlink NAS according to symmetric key and the first security algorithm
Message can be downlink refuse information.
Optionally, first network equipment is AMF, and second network equipment is UDM or AUSF.
It is executed in the method for the message protection of the embodiment of the present application by terminal device it should be understood that the device can be used to implement
The step of, correlated characteristic is referred to above, and details are not described herein again.
Based on identical design, as shown in figure 9, being a kind of schematic device of message protection provided by the present application, the dress
Set and for example can be second network equipment or chip or system on chip in second network equipment, can be performed it is above-mentioned as Fig. 3, Fig. 4,
The method executed in Fig. 5 and any embodiment shown in fig. 6 by store function entity.
The device 900 includes at least one processor 910, memory 930.
Wherein, memory 930 can be ROM or can store the other types of static information and instruction for storing program
Static storage device such as RAM or the other kinds of dynamic memory of information and instruction can be stored, be also possible to
EEPROM, CD-ROM or other optical disc storages, optical disc storage (including compression optical disc, laser disc, optical disc, Digital Versatile Disc, indigo plant
Light optical disc etc.), magnetic disk storage medium or other magnetic storage apparatus or can be used in carrying or storing that there are instruction or data
The desired program of structure type and can by any other medium of computer access, but not limited to this.Memory 930 can be with
It is to be individually present, is connected with processor 910.Memory 930 can also be integrated with processor 910.
Processor 910 is used to execute program in memory 930, in the scheme to realize the embodiment of the present application message protection
Step performed by second network equipment, correlated characteristic are referred to above, and details are not described herein again.For example, processor 910 can be with
It is that a universal cpu, microprocessor, specific ASIC or one or more are executed for controlling technical scheme program
Integrated circuit.
In the concrete realization, as one embodiment, processor 910 may include one or more CPU, such as in Fig. 9
CPU0 and CPU1.
In the concrete realization, as one embodiment, device 900 may include multiple processors, such as the processing in Fig. 9
Device 910 and processor 911.Each of these processors can be monokaryon (single-CPU) processor, can also be with
It is multicore (multi-CPU) processor, processor here can refer to one or more equipment, circuit, and/or for locating
Manage the processing core of data (such as computer program instructions).
Optionally, when device 900 be first network equipment when can also include transceiver 920 as shown in Figure 9, for
Other equipment or communication, transceiver 920 include radio circuit.Wherein processor 910, receipts in second network equipment
Hair device 920, memory 930 can be connected by communication bus.Communication bus may include an access, transmit between said units
Information.When device 900 is chip or system on the upper side in second network equipment, processor 910 can pass through input/output
Interface, pin or circuit etc. send or receive data.
As shown in Figure 10, the schematic diagram of the device of the embodiment of the present application another kind message protection, the device can be second
The network equipment can also be can be performed above-mentioned as shown in Fig. 3, Fig. 4, Fig. 5 and Fig. 6 with the chip or system on chip in second network equipment
Any embodiment in the method that is executed by store function entity.
The device includes processing unit 1001 and communication unit 1002.
Wherein, communication unit 1002, for receiving the key relevant parameter from terminal device, processing unit 1001 is used
According to key relevant parameter, symmetric key is obtained, then communication unit 1002, is also used to send to first network equipment symmetrical
Key, wherein key relevant parameter is used to carry out safeguard protection to Initial NAS message for obtaining symmetric key, symmetric key.
Optionally, key relevant parameter includes the public key of terminal device;Processing unit 1001 is specifically used for being set according to terminal
The private key of standby public key and second network equipment generates symmetric key.
Optionally, processing unit 1001 is specifically used for according to the public key of terminal device and the private key of second network equipment, raw
At intermediate key, then according to intermediate key and fixed character string, symmetric key is generated.
Optionally, key relevant parameter includes the ciphertext of symmetric key;Processing unit 1001 is specifically used for according to the second net
The ciphertext of symmetric key is decrypted in the private key of network equipment, obtains symmetric key.
Optionally, key relevant parameter includes the ciphertext of the first security algorithm;Processing unit 1001 is also used to according to second
The ciphertext of the first security algorithm is decrypted in the public key of the network equipment, obtains the first security algorithm, and communication unit 1002 is also used
In to first network equipment send the first security algorithm.
Optionally, first network equipment is AMF entity;The device 1000 is UDM entity or AUSF entity.
It should be understood that the device can be used to implement in the method for the message protection of the embodiment of the present application by second network equipment
The step of execution, correlated characteristic are referred to above, and details are not described herein again.
It is a kind of schematic device of message protection provided by the present application, the dress as shown in figure 11 based on identical design
Set the chip that can be first network equipment or first network equipment or system on the upper side, can be performed it is above-mentioned as Fig. 3, Fig. 4,
The method executed in Fig. 5 and any embodiment shown in fig. 6 by mobile management functional entity.
The first network equipment 1100 includes at least one processor 1110, memory 1130.
Wherein, memory 1130 can be ROM or can store the other types of static information and instruction for storing program
Static storage device such as RAM or the other kinds of dynamic memory of information and instruction can be stored, be also possible to
EEPROM, CD-ROM or other optical disc storages, optical disc storage (including compression optical disc, laser disc, optical disc, Digital Versatile Disc, indigo plant
Light optical disc etc.), magnetic disk storage medium or other magnetic storage apparatus or can be used in carrying or storing that there are instruction or data
The desired program of structure type and can by any other medium of computer access, but not limited to this.Memory 1130 can
To be to be individually present, it is connected with processor 1110.Memory 1130 can also be integrated with processor 1110.
Processor 1110 is used to execute the program in memory 1130, to realize the scheme of the embodiment of the present application message protection
Step performed by middle first network equipment, correlated characteristic are referred to above, and details are not described herein again.For example, processor 1110
It can be a universal cpu, microprocessor, specific ASIC or one or more to hold for controlling technical scheme program
Capable integrated circuit.
In the concrete realization, as one embodiment, processor 1110 may include one or more CPU, such as Figure 11
In CPU0 and CPU1.
In the concrete realization, as one embodiment, device 1100 may include multiple processors, such as the place in Figure 11
Manage device 1110 and processor 1111.Each of these processors can be monokaryon (single-CPU) processor,
It can be multicore (multi-CPU) processor, processor here can refer to one or more equipment, circuit, and/or use
In the processing core of processing data (such as computer program instructions).
Optionally, it can also include transceiver 1120 as shown in figure 11 when device 1100 is first network equipment, use
In with other equipment or communication, transceiver 1120 include radio circuit.The wherein processor in first network equipment
1110, transceiver 1120, memory 1130 can be connected by communication bus.Communication bus may include an access, in above-mentioned list
Information is transmitted between member.When device 1100 is chip in first network equipment or when system on the upper side, processor 1110 can be with
Data are sent or received by input/output interface, pin or circuit etc..
As shown in figure 12, the schematic diagram of the device of the embodiment of the present application another kind message protection, the device can be first
The network equipment can also be can be performed above-mentioned as shown in Fig. 3, Fig. 4, Fig. 5 and Fig. 6 with the chip or system on chip in first network equipment
Any embodiment in the method that is executed by mobile management functional entity.
The device includes processing unit 1201 and communication unit 1202.
Wherein, communication unit 1202 is for receiving the protected Initial NAS message from terminal device;And it receives and
From the symmetric key of second network equipment;Processing unit 1201 is used to be obtained initial according to symmetric key and the first security algorithm
NAS message.
Optionally, communication unit 1202 are also used to receive the first security algorithm from second network equipment.
Optionally, Initial NAS message is login request message.
Optionally, processing unit 1201 are also used to obtain protected downlink according to symmetric key and the first security algorithm
NAS message;Communication unit 1202 is also used to send protected downlink NAS message to terminal device.
Optionally, downlink NAS message is registration received message or NAS SMC message.
Optionally, processing unit 1201 are also used to obtain downlink NAS message according to symmetric key and the first security algorithm
Ciphertext, wherein downlink NAS message be registration received message, registration received message include the second security algorithm;Communication unit
1202 are also used to according to the second security algorithm, carry out integrity protection to the ciphertext of downlink NAS message, obtain protected downlink
NAS message, communication unit 1202 are also used to send protected downlink NAS message to terminal device.
Optionally, processing unit 1201, are also used to according to the second security algorithm, carry out integrality guarantor to downlink NAS message
Shield, wherein downlink NAS message is registration received message, and registration received message includes the second security algorithm;Then according to symmetrical close
Key and the first security algorithm obtain protected downlink NAS message, and protected downlink NAS message is after integrity protection
The ciphertext of downlink NAS message;Communication unit 1202 is also used to send protected downlink NAS message to terminal device.
Optionally, processing unit 1201, are also used to according to symmetric key and the first security algorithm, to downlink NAS message into
Row integrity protection obtains protected downlink NAS message, and then, communication unit 1202 is also used to send quilt to terminal device
The downlink NAS message of protection, wherein downlink NAS message can be registration reject message.
Optionally, which is AMF entity;Second network equipment is UDM entity or AUSF entity.
It should be understood that the device can be used to implement in the method for the message protection of the embodiment of the present application by first network equipment
The step of execution, correlated characteristic are referred to above, and details are not described herein again.
It should be understood that the device of message protection shown in Fig. 8, Figure 10 and Figure 12 be the mode that module divides be it is schematical,
Only a kind of logical function partition, there may be another division manner in actual implementation.It is connect for example, communication unit is divided into
Receive unit and transmission unit etc..
The embodiment of the present application also provides a kind of communication system, which includes device 700, device 900 and device
1100, connection type can as depicted in fig. 13 a, can also be as illustrated in fig. 13b.
In the above-described embodiments, can come wholly or partly by software, hardware, firmware or any combination thereof real
It is existing.When implemented in software, it can entirely or partly realize in the form of a computer program product.The computer program
Product includes one or more computer instructions.When loading on computers and executing the computer program instructions, all or
It partly generates according to process or function described in the embodiment of the present application.The computer can be general purpose computer, dedicated meter
Calculation machine, computer network or other programmable devices.The computer instruction can store in computer readable storage medium
In, or from a computer readable storage medium to the transmission of another computer readable storage medium, for example, the computer
Instruction can pass through wired (such as coaxial cable, optical fiber, number from a web-site, computer, server or data center
User's line (DSL)) or wireless (such as infrared, wireless, microwave etc.) mode to another web-site, computer, server or
Data center is transmitted.The computer readable storage medium can be any usable medium that computer can access or
It is comprising data storage devices such as one or more usable mediums integrated server, data centers.The usable medium can be with
It is magnetic medium, (for example, floppy disk, hard disk, tape), optical medium (for example, DVD) or semiconductor medium (such as solid state hard disk
(Solid State Disk, SSD)) etc..
Although the application is described in conjunction with each embodiment herein, however, implementing the application claimed
In the process, those skilled in the art are by checking the attached drawing, disclosure and the appended claims, it will be appreciated that and it is real
Other variations of the existing open embodiment.In the claims, " comprising " (comprising) word is not excluded for other compositions
Part or step, "a" or "an" are not excluded for multiple situations.Claim may be implemented in single processor or other units
In several functions enumerating.Mutually different has been recited in mutually different dependent certain measures, it is not intended that these are arranged
It applies to combine and generates good effect.
It will be understood by those skilled in the art that embodiments herein can provide as method, apparatus (equipment), computer-readable
Storage medium or computer program product.Therefore, complete hardware embodiment, complete software embodiment or knot can be used in the application
They, are all referred to as " module " or " system " by the form of the embodiment in terms of conjunction software and hardware here.
The application is the flow chart and/or box referring to the present processes, device (equipment) and computer program product
Figure describes.It should be understood that each process and/or the side in flowchart and/or the block diagram can be realized by computer program instructions
The combination of process and/or box in frame and flowchart and/or the block diagram.These computer program instructions be can provide to logical
With the processor of computer, special purpose computer, Embedded Processor or other programmable data processing devices to generate a machine
Device, so that being generated by the instruction that computer or the processor of other programmable data processing devices execute for realizing in process
The device for the function of being specified in figure one process or multiple processes and/or block diagrams one box or multiple boxes.
These computer program instructions, which may also be stored in, is able to guide computer or other programmable data processing devices with spy
Determine in the computer-readable memory that mode works, so that it includes referring to that instruction stored in the computer readable memory, which generates,
Enable the manufacture of device, the command device realize in one box of one or more flows of the flowchart and/or block diagram or
The function of being specified in multiple boxes.
These computer program instructions also can be loaded onto a computer or other programmable data processing device, so that counting
Series of operation steps are executed on calculation machine or other programmable devices to generate computer implemented processing, thus in computer or
The instruction executed on other programmable devices is provided for realizing in one or more flows of the flowchart and/or block diagram one
The step of function of being specified in a box or multiple boxes.
Although the application is described in conjunction with specific features and embodiment, it is clear that, do not departing from this Shen
In the case where spirit and scope please, it can be carry out various modifications and is combined.Correspondingly, the specification and drawings are only institute
The exemplary illustration for the application that attached claim is defined, and be considered as covered within the scope of the application any and all and repair
Change, change, combining or equivalent.Obviously, those skilled in the art the application can be carried out various modification and variations without
It is detached from spirit and scope.If in this way, these modifications and variations of the application belong to the claim of this application and its
Within the scope of equivalent technologies, then the application is also intended to include these modifications and variations.
Claims (30)
1. a kind of method of message protection, which is characterized in that the described method includes:
Terminal device obtains protected initial non access stratum NAS message according to symmetric key and the first security algorithm;
The terminal device sends the protected Initial NAS message to first network equipment;
The terminal device sends key relevant parameter to second network equipment, and the key relevant parameter is described right for obtaining
Claim key.
2. the method as described in claim 1, which is characterized in that the key relevant parameter includes the public affairs of the terminal device
Key;The method also includes:
The terminal device generates described symmetrical close according to the public key of second network equipment and the private key of the terminal device
Key.
3. method according to claim 2, which is characterized in that the terminal device is according to the public key of second network equipment
With the private key of the terminal device, the symmetric key is generated, comprising:
The terminal device generates intermediate key according to the public key of second network equipment and the private key of the terminal device;
The terminal device generates the symmetric key according to the intermediate key and fixed character string.
4. the method as described in claim 1, which is characterized in that the key relevant parameter includes the close of the symmetric key
Text, wherein the ciphertext of the symmetric key is obtained according to the public key of second network equipment;
The method also includes:
The terminal device generates the symmetric key according to random key generating algorithm;Alternatively,
The terminal device generates the symmetric key according to random number, permanent key and cipher key derivative function KDF.
5. the method as described in Claims 1-4 is any, which is characterized in that the key relevant parameter includes first peace
The ciphertext of full algorithm, wherein the ciphertext of first security algorithm is obtained according to the public key of second network equipment.
6. method as claimed in claim 5, which is characterized in that first security algorithm is the terminal device according to prewired
What the strategy set determined.
7. the method as described in claim 1 to 6 is any, which is characterized in that the Initial NAS message is login request message.
8. the method as described in claim 1 to 7 is any, which is characterized in that the method also includes:
The terminal device receives the protected downlink NAS message from the first network equipment, the downlink NAS message
For registration received message or NAS safe mode command SMC message;
The terminal device according to the symmetric key and first security algorithm to the protected downlink NAS message into
Row decryption, obtains the downlink NAS message.
9. the method as described in claim 1 to 7 is any, which is characterized in that the method also includes:
The terminal device receives the protected downlink NAS message from the first network equipment, the downlink NAS message
To register received message, the registration received message includes the second security algorithm;
The terminal device according to the symmetric key and first security algorithm to the protected downlink NAS message into
Row decryption, obtains the downlink NAS message;
The terminal device obtains second security algorithm from the downlink NAS message;
The terminal device verifies the downlink NAS message or the protected downlink according to second security algorithm
The integrality of NAS message.
10. the method as described in claim 1 to 7 is any, which is characterized in that the method also includes:
The terminal device receives the protected downlink NAS message from the first network equipment, the downlink NAS message
For registration reject message;
The terminal device verifies the complete of the downlink NAS message according to the symmetric key and first security algorithm
Property.
11. the method as described in claims 1 to 10 is any, which is characterized in that the first network equipment is access and movement
Management function AMF entity;
Second network equipment is that independent data manages UDM entity or authentication service function AUSF entity.
12. a kind of method of message protection, which is characterized in that the described method includes:
Second network equipment receives the key relevant parameter from terminal device, and the key relevant parameter is symmetrical close for obtaining
Key, the symmetric key are used to carry out safeguard protection to initial non access stratum NAS message;
Second network equipment obtains the symmetric key according to the key relevant parameter;
Second network equipment sends the symmetric key to first network equipment.
13. method as claimed in claim 12, which is characterized in that the key relevant parameter includes the public affairs of the terminal device
Key;
Second network equipment obtains the symmetric key according to the key relevant parameter, comprising:
For second network equipment according to the public key of the terminal device and the private key of second network equipment, it is described right to generate
Claim key.
14. method as claimed in claim 13, which is characterized in that second network equipment is according to the public affairs of the terminal device
The private key of key and second network equipment, generates the symmetric key, comprising:
Second network equipment generates intermediate close according to the public key of the terminal device and the private key of second network equipment
Key;
Second network equipment generates the symmetric key according to the intermediate key and fixed character string.
15. method as claimed in claim 12, which is characterized in that the key relevant parameter includes the close of the symmetric key
Text;
Second network equipment obtains the symmetric key according to the key relevant parameter, comprising:
Second network equipment is decrypted the ciphertext of the symmetric key according to the private key of second network equipment, obtains
Obtain the symmetric key.
16. the method as described in claim 12 to 15 is any, which is characterized in that the key relevant parameter includes the first safety
The ciphertext of algorithm;The method also includes:
Second network equipment solves the ciphertext of first security algorithm according to the public key of second network equipment
It is close, obtain first security algorithm;
Second network equipment sends first security algorithm to the first network equipment.
17. the method as described in claim 1 to 16 is any, which is characterized in that the first network equipment is access and movement
Management function AMF entity;
Second network equipment is that independent data manages UDM entity or authentication service function AUSF entity.
18. a kind of method of message protection, which is characterized in that the described method includes:
First network equipment receives the protected initial non access stratum NAS message from terminal device;
The first network equipment receives the symmetric key from second network equipment;
The first network equipment obtains the Initial NAS message according to the symmetric key and the first security algorithm.
19. method as claimed in claim 18, which is characterized in that the method also includes:
The first network equipment receives first security algorithm from second network equipment.
20. the method as described in claim 18 or 19, which is characterized in that the Initial NAS message is login request message.
21. the method as described in claim 18 to 20 is any, which is characterized in that the method also includes:
The first network equipment obtains protected downlink NAS and disappears according to the symmetric key and first security algorithm
Breath;
The first network equipment sends the protected downlink NAS message to the terminal device.
22. method as claimed in claim 21, which is characterized in that the downlink NAS message is registration received message or NAS
Safe mode command SMC message.
23. the method as described in claim 18 to 20 is any, which is characterized in that the method also includes:
The first network equipment obtains the ciphertext of downlink NAS message according to the symmetric key and first security algorithm,
The downlink NAS message is registration received message, and the registration received message includes the second security algorithm;
The first network equipment carries out integrality guarantor according to second security algorithm, to the ciphertext of the downlink NAS message
Shield, obtains protected downlink NAS message;
The first network equipment sends the protected downlink NAS message to the terminal device.
24. the method as described in claim 18 to 20 is any, which is characterized in that the method also includes:
The first network equipment carries out integrity protection, the downlink NAS according to the second security algorithm, to downlink NAS message
Message is registration received message, and the registration received message includes the second security algorithm;
The first network equipment obtains protected downlink NAS and disappears according to the symmetric key and first security algorithm
Breath, the protected downlink NAS message are the ciphertext of the downlink NAS message after integrity protection;
The first network equipment sends the protected downlink NAS message to the terminal device.
25. the method as described in claim 18 to 20 is any, which is characterized in that the method also includes:
The first network equipment carries out downlink NAS message complete according to the symmetric key and first security algorithm
Property protection, obtain protected downlink NAS message, the downlink NAS message is registration reject message;
The first network equipment sends the protected downlink NAS message to the terminal device.
26. the method as described in claim 18 to 25 is any, which is characterized in that the first network equipment is access and movement
Management function AMF entity;Second network equipment is that independent data manages UDM entity or authentication service function AUSF is real
Body.
27. a kind of device of message protection, which is characterized in that including processor and memory, in which:
The memory is stored with program;
The processor executes the side as described in claim 1 to 11 is any for calling the program stored in the memory
Method.
28. a kind of device of message protection, which is characterized in that including processor and memory, in which:
The memory is stored with program;
The processor executes the side as described in claim 12 to 17 is any for calling the program stored in the memory
Method.
29. a kind of device of message protection, which is characterized in that including processor, memory, in which:
The memory is stored with program;
The processor executes the side as described in claim 18 to 26 is any for calling the program stored in the memory
Method.
30. a kind of computer readable storage medium, which is characterized in that the computer-readable recording medium storage has program, institute
When stating program and running on computers, so that the computer executes the method as described in claim 1 to 26 is any.
Priority Applications (2)
Application Number | Priority Date | Filing Date | Title |
---|---|---|---|
CN201711125181.0A CN109788474A (en) | 2017-11-14 | 2017-11-14 | A kind of method and device of message protection |
PCT/CN2018/114908 WO2019096075A1 (en) | 2017-11-14 | 2018-11-09 | Method and apparatus for message protection |
Applications Claiming Priority (1)
Application Number | Priority Date | Filing Date | Title |
---|---|---|---|
CN201711125181.0A CN109788474A (en) | 2017-11-14 | 2017-11-14 | A kind of method and device of message protection |
Publications (1)
Publication Number | Publication Date |
---|---|
CN109788474A true CN109788474A (en) | 2019-05-21 |
Family
ID=66494028
Family Applications (1)
Application Number | Title | Priority Date | Filing Date |
---|---|---|---|
CN201711125181.0A Pending CN109788474A (en) | 2017-11-14 | 2017-11-14 | A kind of method and device of message protection |
Country Status (2)
Country | Link |
---|---|
CN (1) | CN109788474A (en) |
WO (1) | WO2019096075A1 (en) |
Cited By (8)
Publication number | Priority date | Publication date | Assignee | Title |
---|---|---|---|---|
CN112087724A (en) * | 2019-06-13 | 2020-12-15 | 华为技术有限公司 | Communication method, network equipment, user equipment and access network equipment |
CN112351431A (en) * | 2019-08-09 | 2021-02-09 | 华为技术有限公司 | Method and device for determining safety protection mode |
CN112601222A (en) * | 2019-09-16 | 2021-04-02 | 华为技术有限公司 | Safety protection method and device for air interface information |
WO2021063298A1 (en) * | 2019-09-30 | 2021-04-08 | 华为技术有限公司 | Method for implementing external authentication, communication device and communication system |
CN112771815A (en) * | 2020-03-31 | 2021-05-07 | 华为技术有限公司 | Key processing method and device |
CN113141327A (en) * | 2020-01-02 | 2021-07-20 | 中国移动通信有限公司研究院 | Information processing method, device and equipment |
CN114040387A (en) * | 2020-07-21 | 2022-02-11 | 中国移动通信有限公司研究院 | Method, device and equipment for determining attack message |
CN114285557A (en) * | 2021-12-23 | 2022-04-05 | 中国电信股份有限公司 | Communication encryption method, system and device |
Families Citing this family (2)
Publication number | Priority date | Publication date | Assignee | Title |
---|---|---|---|---|
KR102369596B1 (en) | 2018-09-24 | 2022-03-02 | 노키아 테크놀로지스 오와이 | Systems and methods for secure protection of NAS messages |
CN114125834A (en) * | 2020-09-01 | 2022-03-01 | 大唐移动通信设备有限公司 | Method, terminal, network side equipment and device for determining application layer key |
Citations (5)
Publication number | Priority date | Publication date | Assignee | Title |
---|---|---|---|---|
CN101473668A (en) * | 2006-06-19 | 2009-07-01 | 交互数字技术公司 | Method and apparatus for security protection of an original user identity in an initial signaling message |
WO2012035850A1 (en) * | 2010-09-13 | 2012-03-22 | Nec Corporation | Relay node device authentication mechanism |
CN102833739A (en) * | 2012-08-24 | 2012-12-19 | 大唐移动通信设备有限公司 | Method, device and system for transmitting initial non access stratum messages |
CN103096302A (en) * | 2011-10-27 | 2013-05-08 | 华为技术有限公司 | Encryption method, deciphering method and related device |
US20170318463A1 (en) * | 2016-04-27 | 2017-11-02 | Qualcomm Incorporated | Enhanced non-access stratum security |
Family Cites Families (1)
Publication number | Priority date | Publication date | Assignee | Title |
---|---|---|---|---|
WO2017026114A1 (en) * | 2015-08-13 | 2017-02-16 | 日本電気株式会社 | Communication terminal, base station, network device, data communication method, and security setting method |
-
2017
- 2017-11-14 CN CN201711125181.0A patent/CN109788474A/en active Pending
-
2018
- 2018-11-09 WO PCT/CN2018/114908 patent/WO2019096075A1/en active Application Filing
Patent Citations (5)
Publication number | Priority date | Publication date | Assignee | Title |
---|---|---|---|---|
CN101473668A (en) * | 2006-06-19 | 2009-07-01 | 交互数字技术公司 | Method and apparatus for security protection of an original user identity in an initial signaling message |
WO2012035850A1 (en) * | 2010-09-13 | 2012-03-22 | Nec Corporation | Relay node device authentication mechanism |
CN103096302A (en) * | 2011-10-27 | 2013-05-08 | 华为技术有限公司 | Encryption method, deciphering method and related device |
CN102833739A (en) * | 2012-08-24 | 2012-12-19 | 大唐移动通信设备有限公司 | Method, device and system for transmitting initial non access stratum messages |
US20170318463A1 (en) * | 2016-04-27 | 2017-11-02 | Qualcomm Incorporated | Enhanced non-access stratum security |
Cited By (10)
Publication number | Priority date | Publication date | Assignee | Title |
---|---|---|---|---|
CN112087724A (en) * | 2019-06-13 | 2020-12-15 | 华为技术有限公司 | Communication method, network equipment, user equipment and access network equipment |
CN112351431A (en) * | 2019-08-09 | 2021-02-09 | 华为技术有限公司 | Method and device for determining safety protection mode |
CN112601222A (en) * | 2019-09-16 | 2021-04-02 | 华为技术有限公司 | Safety protection method and device for air interface information |
CN112601222B (en) * | 2019-09-16 | 2022-04-22 | 华为技术有限公司 | Safety protection method and device for air interface information |
WO2021063298A1 (en) * | 2019-09-30 | 2021-04-08 | 华为技术有限公司 | Method for implementing external authentication, communication device and communication system |
CN113141327A (en) * | 2020-01-02 | 2021-07-20 | 中国移动通信有限公司研究院 | Information processing method, device and equipment |
CN112771815A (en) * | 2020-03-31 | 2021-05-07 | 华为技术有限公司 | Key processing method and device |
CN114040387A (en) * | 2020-07-21 | 2022-02-11 | 中国移动通信有限公司研究院 | Method, device and equipment for determining attack message |
CN114040387B (en) * | 2020-07-21 | 2024-06-04 | 中国移动通信有限公司研究院 | Method, device and equipment for determining attack message |
CN114285557A (en) * | 2021-12-23 | 2022-04-05 | 中国电信股份有限公司 | Communication encryption method, system and device |
Also Published As
Publication number | Publication date |
---|---|
WO2019096075A1 (en) | 2019-05-23 |
Similar Documents
Publication | Publication Date | Title |
---|---|---|
CN109788474A (en) | A kind of method and device of message protection | |
US11582231B2 (en) | Key-derivation verification in telecommunications network | |
Prasad et al. | 3GPP 5G security | |
KR102304147B1 (en) | Unified authentication for integrated small cell and wi-fi networks | |
EP3340690B1 (en) | Access method, device and system for user equipment (ue) | |
US11627458B2 (en) | Key derivation algorithm negotiation method and apparatus | |
CN108810890B (en) | Anchor key generation method, equipment and system | |
CN102905265B (en) | A kind of method and device realizing mobile device attachment | |
US20200228977A1 (en) | Parameter Protection Method And Device, And System | |
CN107079023A (en) | User plane safety for next generation cellular network | |
EP3700245B1 (en) | Communication method and device | |
CN103430582B (en) | Prevention of eavesdropping type of attack in hybrid communication system | |
CN109587685A (en) | Obtain method, equipment and the communication system of key | |
CN109803262B (en) | Network parameter transmission method and device | |
KR102491403B1 (en) | Method for enhancing security of subscriber identification module based on physical unclonable function and apparatus and system therefor | |
CN106998549A (en) | The method for building up and device of ipsec tunnel, terminal and network side equipment | |
EP2648437B1 (en) | Method, apparatus and system for key generation | |
CN105764052A (en) | TD-LTE authentication and protective encryption method | |
Abdeljebbar et al. | Security analysis of LTE/SAE networks over E-UTRAN | |
CN109428852A (en) | Communication tunnel end-point addresses separation method, terminal, ePDG and storage medium | |
Amgoune et al. | 5g: Interconnection of services and security approaches | |
CN101938743B (en) | Generation method and device of safe keys | |
CN105848249A (en) | Access point name (APN) processing method, device and system | |
CN110536301A (en) | A kind of refuse information processing method and processing device | |
Ouaissa et al. | Group access authentication of machine to machine communications in LTE networks |
Legal Events
Date | Code | Title | Description |
---|---|---|---|
PB01 | Publication | ||
PB01 | Publication | ||
SE01 | Entry into force of request for substantive examination | ||
SE01 | Entry into force of request for substantive examination | ||
RJ01 | Rejection of invention patent application after publication |
Application publication date: 20190521 |
|
RJ01 | Rejection of invention patent application after publication |