CN111357308A - 一种安全保护的方法及装置 - Google Patents

一种安全保护的方法及装置 Download PDF

Info

Publication number
CN111357308A
CN111357308A CN201880074395.6A CN201880074395A CN111357308A CN 111357308 A CN111357308 A CN 111357308A CN 201880074395 A CN201880074395 A CN 201880074395A CN 111357308 A CN111357308 A CN 111357308A
Authority
CN
China
Prior art keywords
nas
access technology
sequence number
message
uplink
Prior art date
Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
Pending
Application number
CN201880074395.6A
Other languages
English (en)
Inventor
李�赫
陈璟
Current Assignee (The listed assignees may be inaccurate. Google has not performed a legal analysis and makes no representation or warranty as to the accuracy of the list.)
Huawei Technologies Co Ltd
Original Assignee
Huawei Technologies Co Ltd
Priority date (The priority date is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the date listed.)
Filing date
Publication date
Application filed by Huawei Technologies Co Ltd filed Critical Huawei Technologies Co Ltd
Publication of CN111357308A publication Critical patent/CN111357308A/zh
Pending legal-status Critical Current

Links

Images

Classifications

    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L63/00—Network architectures or network communication protocols for network security
    • H04L63/04—Network architectures or network communication protocols for network security for providing a confidential data exchange among entities communicating through data packet networks
    • H04L63/0428—Network architectures or network communication protocols for network security for providing a confidential data exchange among entities communicating through data packet networks wherein the data content is protected, e.g. by encrypting or encapsulating the payload
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04W—WIRELESS COMMUNICATION NETWORKS
    • H04W12/00—Security arrangements; Authentication; Protecting privacy or anonymity
    • H04W12/03—Protecting confidentiality, e.g. by encryption
    • H04W12/033—Protecting confidentiality, e.g. by encryption of the user plane, e.g. user's traffic
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04W—WIRELESS COMMUNICATION NETWORKS
    • H04W12/00—Security arrangements; Authentication; Protecting privacy or anonymity
    • H04W12/08—Access security
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L63/00—Network architectures or network communication protocols for network security
    • H04L63/12—Applying verification of the received information
    • H04L63/123—Applying verification of the received information received data contents, e.g. message integrity
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04W—WIRELESS COMMUNICATION NETWORKS
    • H04W12/00—Security arrangements; Authentication; Protecting privacy or anonymity
    • H04W12/04—Key management, e.g. using generic bootstrapping architecture [GBA]
    • H04W12/043—Key management, e.g. using generic bootstrapping architecture [GBA] using a trusted network node as an anchor
    • H04W12/0431—Key distribution or pre-distribution; Key agreement
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04W—WIRELESS COMMUNICATION NETWORKS
    • H04W12/00—Security arrangements; Authentication; Protecting privacy or anonymity
    • H04W12/10—Integrity
    • H04W12/106—Packet or message integrity
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04W—WIRELESS COMMUNICATION NETWORKS
    • H04W12/00—Security arrangements; Authentication; Protecting privacy or anonymity
    • H04W12/10—Integrity
    • H04W12/108—Source integrity
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04W—WIRELESS COMMUNICATION NETWORKS
    • H04W12/00—Security arrangements; Authentication; Protecting privacy or anonymity
    • H04W12/12—Detection or prevention of fraud
    • H04W12/121—Wireless intrusion detection systems [WIDS]; Wireless intrusion prevention systems [WIPS]
    • H04W12/122—Counter-measures against attacks; Protection against rogue devices

Landscapes

  • Engineering & Computer Science (AREA)
  • Computer Security & Cryptography (AREA)
  • Computer Networks & Wireless Communication (AREA)
  • Signal Processing (AREA)
  • Computer Hardware Design (AREA)
  • Computing Systems (AREA)
  • General Engineering & Computer Science (AREA)
  • Mobile Radio Communication Systems (AREA)
  • Communication Control (AREA)
  • Storage Device Security (AREA)

Abstract

本申请涉及无线通信技术领域。本申请的实施例提供一种安全保护的方法及装置，用以实现对多条NAS连接链路进行安全保护。本申请的方法包括：终端确定第一参数，第一参数用于表示传输非接入层NAS消息所使用的接入技术，其中，终端能够支持至少两种接入技术，且能够分别为至少两种接入技术中的每种接入技术维护对应的NAS序列号，然后终端根据第一参数、NAS密钥以及传输NAS消息所使用的接入技术对应的NAS序列号对NAS消息进行安全保护。本申请适用于对NAS消息进行安全保护的流程中。

Description

PCT国内申请，说明书已公开。

Claims (48)

  1. PCT国内申请，权利要求书已公开。
CN201880074395.6A 2017-11-17 2018-10-31 一种安全保护的方法及装置 Pending CN111357308A (zh)

Applications Claiming Priority (3)

Application Number Priority Date Filing Date Title
CN201711148926.5A CN109803263A (zh) 2017-11-17 2017-11-17 一种安全保护的方法及装置
CN2017111489265 2017-11-17
PCT/CN2018/112897 WO2019096002A1 (zh) 2017-11-17 2018-10-31 一种安全保护的方法及装置

Publications (1)

Publication Number Publication Date
CN111357308A true CN111357308A (zh) 2020-06-30

Family

ID=65351089

Family Applications (4)

Application Number Title Priority Date Filing Date
CN201811088200.1A Active CN109361655B (zh) 2017-11-17 2017-11-17 一种安全保护的方法及装置
CN201711148926.5A Pending CN109803263A (zh) 2017-11-17 2017-11-17 一种安全保护的方法及装置
CN202011569869.XA Active CN112738804B (zh) 2017-11-17 2017-11-17 一种安全保护的方法及装置
CN201880074395.6A Pending CN111357308A (zh) 2017-11-17 2018-10-31 一种安全保护的方法及装置

Family Applications Before (3)

Application Number Title Priority Date Filing Date
CN201811088200.1A Active CN109361655B (zh) 2017-11-17 2017-11-17 一种安全保护的方法及装置
CN201711148926.5A Pending CN109803263A (zh) 2017-11-17 2017-11-17 一种安全保护的方法及装置
CN202011569869.XA Active CN112738804B (zh) 2017-11-17 2017-11-17 一种安全保护的方法及装置

Country Status (11)

Country Link
US (3) US10681551B2 (zh)
EP (3) EP3681186B1 (zh)
JP (1) JP7101775B2 (zh)
KR (1) KR102354625B1 (zh)
CN (4) CN109361655B (zh)
AU (1) AU2018366571B2 (zh)
BR (1) BR112020009823B1 (zh)
ES (1) ES2882598T3 (zh)
MX (1) MX2020005132A (zh)
SG (1) SG11202004530SA (zh)
WO (1) WO2019096002A1 (zh)

Families Citing this family (10)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN109246688B (zh) 2017-07-11 2021-02-23 华为技术有限公司 设备接入方法、设备及系统
CN109361655B (zh) * 2017-11-17 2019-08-16 华为技术有限公司 一种安全保护的方法及装置
WO2019170104A1 (en) * 2018-03-06 2019-09-12 Mediatek Singapore Pte. Ltd. Apparatuses and methods for protection of an intial non-access stratum (nas) message
CN109862022B (zh) * 2019-02-27 2021-06-18 中国电子科技集团公司第三十研究所 一种基于方向的协议新鲜性检查方法
CN112218285B (zh) * 2019-07-11 2022-06-14 华为技术有限公司 上行用户数据传输的方法、设备及系统
JP7529769B2 (ja) * 2019-09-16 2024-08-06 華為技術有限公司 エアインターフェース情報セキュリティ保護方法および装置
CN113692777B (zh) * 2019-09-30 2024-03-01 Oppo广东移动通信有限公司 一种重定向方法及装置、终端设备、网络设备
CN113381966B (zh) * 2020-03-09 2023-09-26 维沃移动通信有限公司 信息上报方法、信息接收方法、终端及网络侧设备
US12081982B2 (en) * 2020-09-08 2024-09-03 Qualcomm Incorporated Optimization for an initial access stratum security mode command procedure
CN113194097B (zh) * 2021-04-30 2022-02-11 北京数盾信息科技有限公司 一种安全网关的数据处理方法、装置及安全网关

Citations (1)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN109361655A (zh) * 2017-11-17 2019-02-19 华为技术有限公司 一种安全保护的方法及装置

Family Cites Families (17)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN101309500B (zh) 2007-05-15 2011-07-20 华为技术有限公司 不同无线接入技术间切换时安全协商的方法和装置
US8699711B2 (en) * 2007-07-18 2014-04-15 Interdigital Technology Corporation Method and apparatus to implement security in a long term evolution wireless device
CN101378591B (zh) 2007-08-31 2010-10-27 华为技术有限公司 终端移动时安全能力协商的方法、系统及装置
CN101815296A (zh) 2009-02-23 2010-08-25 华为技术有限公司 一种进行接入认证的方法、装置及系统
GB2472580A (en) * 2009-08-10 2011-02-16 Nec Corp A system to ensure that the input parameter to security and integrity keys is different for successive LTE to UMTS handovers
US8730912B2 (en) * 2010-12-01 2014-05-20 Qualcomm Incorporated Determining a non-access stratum message count in handover
WO2012074878A2 (en) * 2010-12-03 2012-06-07 Interdigital Patent Holdings, Inc. Methods, apparatus and systems for performing multi-radio access technology carrier aggregation
CN103002521B (zh) 2011-09-08 2015-06-03 华为技术有限公司 传递上下文的方法及移动性管理实体
US10433161B2 (en) 2012-01-30 2019-10-01 Telefonaktiebolaget Lm Ericsson (Publ) Call handover between cellular communication system nodes that support different security contexts
US9119062B2 (en) * 2012-10-19 2015-08-25 Qualcomm Incorporated Methods and apparatus for providing additional security for communication of sensitive information
CN103781069B (zh) * 2012-10-19 2017-02-22 华为技术有限公司 一种双向认证的方法、设备及系统
GB2509937A (en) * 2013-01-17 2014-07-23 Nec Corp Providing security information to a mobile device in which user plane data and control plane signalling are communicated via different base stations
CN104349317A (zh) * 2013-07-31 2015-02-11 中兴通讯股份有限公司 一种移动网络的接入方法、ue、安全服务网关和系统
CN103607713A (zh) * 2013-10-29 2014-02-26 小米科技有限责任公司 网络接入方法、装置、设备和系统
EP3120515B1 (en) * 2014-03-17 2020-07-08 Telefonaktiebolaget LM Ericsson (publ) Improved end-to-end data protection
CN108848112B (zh) * 2015-09-22 2019-07-12 华为技术有限公司 用户设备ue的接入方法、设备及系统
CN115567922A (zh) * 2017-05-08 2023-01-03 瑞典爱立信有限公司 使用单独的计数为多个nas连接提供安全性的方法以及相关的网络节点和无线终端

Patent Citations (2)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN109361655A (zh) * 2017-11-17 2019-02-19 华为技术有限公司 一种安全保护的方法及装置
CN109803263A (zh) * 2017-11-17 2019-05-24 华为技术有限公司 一种安全保护的方法及装置

Non-Patent Citations (1)

* Cited by examiner, † Cited by third party
Title
ERICSSON: "Multiple registrations", 3GPP TSG SA WG3 (SECURITY) MEETING #88-BIS，S3-172491, 2 October 2017 (2017-10-02), pages 1 - 4 *

Also Published As

Publication number Publication date
CN112738804B (zh) 2021-12-21
CN109361655A (zh) 2019-02-19
AU2018366571A1 (en) 2020-06-18
SG11202004530SA (en) 2020-06-29
RU2020119866A (ru) 2021-12-17
EP3910977B1 (en) 2022-06-08
EP4114063A1 (en) 2023-01-04
US20190274051A1 (en) 2019-09-05
JP2021503839A (ja) 2021-02-12
US10904764B2 (en) 2021-01-26
US10681551B2 (en) 2020-06-09
JP7101775B2 (ja) 2022-07-15
EP3681186B1 (en) 2021-04-28
KR102354625B1 (ko) 2022-01-21
BR112020009823A2 (pt) 2020-11-03
CN109361655B (zh) 2019-08-16
US20200275276A1 (en) 2020-08-27
US11564100B2 (en) 2023-01-24
EP3681186A1 (en) 2020-07-15
ES2882598T3 (es) 2021-12-02
RU2020119866A3 (zh) 2021-12-17
EP3910977A1 (en) 2021-11-17
CN112738804A (zh) 2021-04-30
CN109803263A (zh) 2019-05-24
WO2019096002A1 (zh) 2019-05-23
BR112020009823B1 (pt) 2021-11-03
KR20200086721A (ko) 2020-07-17
EP3681186A4 (en) 2020-07-22
US20210227393A1 (en) 2021-07-22
MX2020005132A (es) 2020-08-20
AU2018366571B2 (en) 2021-10-28

Similar Documents

Publication Publication Date Title
CN109361655B (zh) 一种安全保护的方法及装置
CN109362108B (zh) 一种安全保护的方法、装置和系统
CN110830991B (zh) 安全会话方法和装置
CN109922474B (zh) 触发网络鉴权的方法及相关设备
CN109788474A (zh) 一种消息保护的方法及装置
RU2774435C2 (ru) Способ и устройство обеспечения безопасности
US12127049B2 (en) Security protection method, apparatus, and system

Legal Events

Date Code Title Description
PB01 Publication
PB01 Publication
SE01 Entry into force of request for substantive examination
SE01 Entry into force of request for substantive examination