WO2007121669A1

WO2007121669A1 - Method and device and system for establishing wireless connection

Info

Publication number: WO2007121669A1
Application number: PCT/CN2007/001301
Authority: WO
Inventors: Jing Chen; Binsong Tang; Zongjie Wang
Original assignee: Huawei Technologies Co., Ltd.
Priority date: 2006-04-20
Filing date: 2007-04-20
Publication date: 2007-11-01
Also published as: CN101060712B; CN101060712A

Abstract

A method for establishing wireless connection includes: a UE requests a access network device to establish wireless connection; the access network device alternates with a core network device that stores the security parameter of the UE, and obtains the security parameter of the UE; the access network device obtains security relationship of current wireless connection according to the received security parameter, and indicates the UE to protect communication by using the security relationship. The present invention also comprises device and system for establishing wireless connection. The present invention can effectively reduce access time delay and increase the security during the wireless connection establishment.

Description

Wireless connection establishment method, device and system

Technical field

The present invention relates to a wireless connection technology in a mobile communication system, and more particularly to a method, device and system for establishing a wireless connection. Background of the invention

In the Global System for Mobile Communications (UMTS), in order to establish a signalling connection between a User Equipment (UE) and a core network, a radio resource control protocol for the UE and the Global Terrestrial Radio Access Network (UTRAN) over the air interface is first established. (RRC) connection.

Figure 1 shows a flow chart of a prior art wireless connection establishment method. As shown in FIG. 1, in steps 101-103, the UE first sends an RRC connection request to the UTRAN through the air interface, and the UTRAN returns an RRC connection setup message to the UE, and then the UE sends an RRC connection setup completion indicating that the connection establishment is successful to the UTRAN. Message.

In order to ensure the security of the communication process, before the UE establishes an RC connection with the UTRAN, that is, when the UE is in the idle (Idle) state, the UE and the core network device such as the serving general packet radio service support node (SGSN) are saved. An encryption key and an integrity key for protecting communication between the UE and the RNC. When the RRC connection between the UE and the UTRAN is successfully established and the UE needs to establish a connection with the core network, the UE reports its own security capabilities, such as encryption algorithms, integrity algorithms, and the like, to the wireless network control in the UTRAN. RNC. The UE then sends its identity, encryption key, and integrity key identifier to the core network device in core network signaling. After the core network device finds the corresponding encryption key and integrity key, it sends the found key to the RNC. The core network device also sends a list of security algorithms that the user is allowed to send to the RNC. The RNC combines the list of security algorithms received from the core network device and the received from the UE according to the algorithm supported by the RNC. The security algorithm supported by the UE selects the security algorithm used for the decision, and then indicates the selected security algorithm to the UE through the security mode command and indicates the start of the security protection. Some other security parameters, such as encryption activation time, etc., are also sent to the UE during the secure mode process. Through such a process, the UE and the RNC complete the negotiation of all parameters required to secure communication between the UE and the RC. We refer to the collection of all security parameters as security associations.

It can be seen from the above process that each time the UE accesses the core network, the RNC in the UE and the UTRAN must perform a security algorithm negotiation, that is, establish a security association, which makes the amount of information to be transmitted in the access process large. Moreover, the number of signalings that need to be exchanged is also large, and therefore, the access time delay is long. Summary of the invention

Embodiments of the present invention provide a method, device, and system for establishing a wireless connection, which can reduce access delay.

A method for establishing a wireless connection, comprising:

The user equipment UE requests the access network device to establish a wireless connection;

The access network device interacts with the core network device that saves the security parameters of the UE in the last wireless connection, and obtains the security parameters of the UE;

The access network device determines to protect the security association of the current wireless connection according to the received security parameter, and instructs the UE to use the corresponding security association to protect the communication.

A method for establishing a wireless connection, comprising:

After receiving the wireless connection establishment request from the user equipment, the access network device interacts with the core network device that stores the security parameter of the user equipment, and obtains the security parameter of the user equipment; and determines according to the security parameter of the user equipment. Protecting the security association of the current wireless connection, instructing the user equipment to use the security association to protect communications.

A wireless connection establishing system includes: The user equipment UE is configured to request the access network device to establish a wireless connection, and the core network device is configured to save the security parameter of the UE, interact with the access network device, and provide the security parameter of the UE to the access network device;

The access network device is configured to interact with the core network device to obtain a security parameter of the UE, determine, according to the security parameter, a security association for protecting the current wireless connection, and instruct the UE to use the corresponding security association to protect the communication.

A core network device, including:

a protection information storage unit, configured to save a security parameter of the user equipment UE;

The determining query unit is configured to: when receiving the security parameter request sent by the access network device, find the security parameter of the UE corresponding to the request from the protection information storage unit, and send the security parameter of the UE to the Network access equipment.

An access network device, including:

a receiving unit, configured to receive a wireless connection establishment request of the user equipment UE;

a security parameter obtaining unit, configured to: after the receiving unit receives the wireless connection establishment request, interact with a core network device that saves the security parameter of the UE, to obtain a security parameter of the UE;

And a determining and indicating unit, configured to determine, according to the security parameter of the UE, a security association for protecting the current connection, and instruct the UE to use the corresponding security association to protect the communication.

By applying the invention, the time delay of the UE in the process of accessing the core network can be reduced. Specifically, in the present invention, the UE and the core network device both store the security parameters of the UE, and the current wireless connection establishment process uses the saved security parameters of the UE to secure the wireless signaling without renegotiating all the Security parameters, which greatly reduce the amount of information that needs to be transmitted during the access process. In addition, the negotiation of the security association of the wireless connection security protection is completed during the establishment of the wireless connection, the delay of the access process is effectively shortened, and the wireless connection establishment process can be protected. BRIEF DESCRIPTION OF THE DRAWINGS

The above and other features and advantages of the present invention will become more apparent to those skilled in the <

1 is a flow chart of a conventional R C connection establishment method;

2 is a flowchart of a method for establishing a wireless connection according to Embodiment 1 of the present invention;

3 is a signaling flowchart of a method for establishing a wireless connection according to Embodiment 2 of the present invention; FIG. 4 is a signaling flowchart of a method for establishing a wireless connection according to Embodiment 3 of the present invention; FIG. 5 is a flowchart for establishing a wireless connection according to Embodiment 4 of the present invention; FIG. 6 is a signaling flowchart of a wireless connection establishment method according to Embodiment 5 of the present invention; FIG. 7 is a schematic structural diagram of a wireless connection establishment system according to Embodiment 6 of the present invention. Mode for carrying out the invention

The present invention will be further described in detail below with reference to the accompanying drawings.

According to the embodiment of the method for establishing a wireless connection in the present invention, the UE and the core network device pre-store the security parameters of the UE, and the current wireless connection establishment process uses the security parameters of the saved UE to secure the wireless signaling.

In a mobile communication network, a security association refers to a collection of all security parameters used to protect communications, such as security algorithms, keys, and security association lifetimes. The set of security parameters held in the core network device is referred to as a set of protection information.

Fig. 2 is a flow chart showing a method of establishing a wireless connection in Embodiment 1 of the present invention. The security parameter information of the UE is pre-stored in the UE and the core network device. Referring to FIG. 2, the method for establishing a wireless connection in the present invention includes:

In step 201, the UE requests the access network device to establish a wireless connection;

In step 202, the access network device and the UE are saved in the last wireless connection. The full-threshold core network device interacts to obtain the security parameters of the UE;

In step 203, the access network device obtains a security association that protects the wireless connection according to the received security parameter, and instructs the UE to use the corresponding security association to protect the communication;

In step 204, the UE sends an acknowledgement message to the access network device.

The following describes the wireless connection establishment method in the following, taking the core network device as the access gateway (AGW) in the evolved UTRAN and the access network device as the base station (BS) as an example.

Example 2

In this embodiment, the pre-saved security parameter is all security parameters of the security association used in the last wireless connection, that is, the protection information set includes all the security parameters such as a key for protecting the security of the wireless connection communication, a security algorithm, and the like.

FIG. 3 shows a signaling flow chart of the method for establishing a wireless connection in this embodiment. As shown in FIG. 3, the method for establishing a wireless connection in this embodiment includes:

In step 301, the UE sends a wireless connection establishment request message carrying the identity identifier of the UE, the protection information set identifier, and the information about the AGW to the BS, requesting to establish a wireless connection.

The network architecture in this embodiment uses a resource pool, that is, the BS is connected to multiple AGWs. Therefore, information about the AGW is needed in this step to help the BS find the security parameters of the UE stored in the last wireless connection. AGW. In addition, in this embodiment, the correspondence between the UE and the AGW may be set in advance, so that the BS finds the AGW corresponding to the UE in the preset correspondence according to the received identity of the UE, and therefore the wireless connection in this step. It is not necessary to carry information about the AGW in the setup request message. The protection information set identifier is required to be carried in the wireless connection establishment request message in this step, because a UE can correspond to multiple protection information sets. This protection information set identifier can be an identifier of a key. This key can be a key that protects the wireless connection or a root key used to derive the key that protects the wireless connection. In the steps 302-303, the BS sends a protection information set request message carrying the UE identity identifier and the protection information set identifier to the AGW, and the AGW carries the corresponding protection information set according to the received UI identity and the protection information set identifier. The protection information set response message is returned to the BS. That is, the AGW sends the key, algorithm and other parameters used to protect the security of the wireless connection communication to the BS.

Specifically, after the BS determines the AGW that saves the security parameter according to the received wireless connection establishment request message, the identity identifier of the UE is sent to the determined AGW. After receiving the protection information set request message from the BS, the AGW parses the identity identifier and the protection information set identifier of the UE from the message, and searches for the protection corresponding to the UE according to the identity identifier and the protection information set identifier of the UE. The information set, and the protected information set response message is returned to the BS by the set of protection information.

In step 304, the BS selects a security parameter supported by itself from the received protection information set, obtains a security association for protecting the communication in the current wireless connection, and instructs the UE to use the corresponding security association pair by using a wireless connection establishment message. Communication is protected.

In this step, the BS determines whether to continue using the received protection information set according to the lifetime of the protection information set and whether it supports the security algorithm in the protection information set. In the case of determining to continue to use the protection information set, the BS determines the security parameter in the protection information set as the security parameter used to protect the wireless signaling during the wireless connection process, in other words, the security association in the current wireless connection process. To protect all security parameters in the information set. That is, the security parameters such as the key and algorithm used in this wireless connection are the same as those used in the previous wireless connection. Then, the BS establishes a message through the wireless connection, and sends a security parameter, such as an algorithm, required by the UE in the protection information set to the UE, and notifies the UE to protect the current wireless connection by using the security parameter of the previous wireless connection.

In step 305, after successfully verifying the integrity of the wireless connection message, the UE sends a wireless connection establishment confirmation message, which is protected by the received security parameter, to the BS, indicating the wireless connection. The connection is completed.

In this step, the UE parses all security parameters from the received wireless connection setup message, and performs integrity verification on the security parameters to determine that the message has not been tampered with. After the verification, the integrity verification algorithm in the received security parameters and the integrity key saved by the UE are used to integrity protect the wireless connection confirmation message, and the encryption key and the encryption algorithm are used for confidentiality protection. This message can also be only integrity protected without confidentiality protection.

So far, the flow of establishing the wireless connection in this embodiment is completed.

After the wireless connection is established, the BS can report the security association used in the wireless connection to the AGW for storage.

In this embodiment, the resource pool is used, that is, the BS can directly communicate with the AGW that saves the security parameters used in the last wireless connection, and all the security parameters in the security association are saved in the AGW, so the wireless connection is established. The BS directly retrieves all security parameters (keys, algorithms, etc.) used to protect the last wireless connection from the AGW without performing security parameter negotiation operations, effectively reducing the access delay. In addition, when receiving the wireless connection message of the BS, the UE performs an integrity insurance certificate on the message to ensure that the message has not been tampered with, and indicates to the BS that the wireless connection is established, and uses the received security parameter to confirm the wireless connection. The message is secured, so the security of the wireless connection is effectively improved.

Example 3

In this embodiment, the pre-saved security parameters include security key information in the last wireless connection. Moreover, the UE moves into a different access network control range, and the BS cannot directly communicate with the AGW that holds the security key information in the last wireless connection. In this embodiment, the AGW directly connected to the BS is AGWnew, and the AGW that stores the security key information in the last wireless connection is AGWold, and the BS cannot directly connect to the AGWold. UE and The AGWold shared key K is used to derive the security key for protecting the wireless connection signaling in the wireless connection.

FIG. 4 shows a signaling flow chart of the method for establishing a wireless connection in this embodiment. Referring to FIG. 4, the method for establishing a wireless connection in this embodiment includes:

In step 401, the UE sends a wireless connection establishment request message carrying the identity identifier of the UE, the protection information set identifier, the information about the AGWold, and the security algorithm supported by the UE to the BS, requesting to establish a wireless connection.

In this embodiment, the BS is only connected to one AGWnew, and then communicates with AGWold through AGWnew. Therefore, this step does not need to carry AGWnew information. In addition, in this step, the information about AGWold may be the identifier of AGWold, and the help BS finds AGWold storing the security association information of the UE in the last wireless connection. In this embodiment, the correspondence between the UE and the AGWold may be set in advance, so that the BS finds the AGWold corresponding to the UE in the preset correspondence according to the received identity of the UE, and therefore the wireless connection establishment request in this step. The message may not carry the information about the AGWold. The wireless connection setup request message in this step also carries the security capability of the UE, such as the security algorithm supported by the UE, and the purpose is to facilitate the BS to determine the current wireless connection in the subsequent steps. The security algorithm used in . Since each UE can support more than one type of security algorithm, it can be performed by means of a list of security algorithms.

In step 402, the BS sends a protection information set request message carrying the UE identity, the protection information set identifier, and the information about the AGWold to the AGWnew, requesting to obtain the security parameter in the last wireless connection.

In this step, the BS parses the identity identifier of the UE, the protection information set identifier, the information about the AGWold, and the security algorithm supported by the UE from the radio connection setup request message from the UE, and after saving the security algorithm supported by the UE, UE identity, The protection information set identifier and the information about the AGWold are placed in the protection information set request message and sent to AGWnew.

In steps 403-404, the AGWnew sends a protection information set request message carrying the identity identifier of the UE and the protection information set identifier to the corresponding AGWold according to the protection information set request message from the BS; the AGWold according to the received message, The device searches for the corresponding protection information set, and returns the found protection information set to AGWnew through the protection information set response message.

AGWnew determines the corresponding AGWokL according to the information about the AGWold carried in the protection information set request message from the BS. The protection information set in the last wireless connection is protected in the protection information set saved by the AGWold or can be derived from the previous wireless. The root key of the security key in the connection, so the AGWold carries the security key corresponding to the UE in the protection information set response message returned to the AGWnew. The security key here contains the shared key K shared by the UE and AGWold.

In steps 405-406, AGWnew derives the encryption key and/or integrity based on the received shared key K and the parameters needed to generate a new encrypted wireless connection's encryption key and/or integrity key. Key, or derive the intermediate key according to the received shared key K and other parameters, and generate a new encryption key and/or integrity key and the UE does not know by the protection information set response message. The parameters required for the encryption key and/or the integrity key are sent to the BS, or the intermediate key and parameters that are not known by the UE and required to generate the intermediate key are sent to the BS.

In steps 405-406, AGWnew first determines whether it is necessary to update the encryption key and/or the integrity key in the protection information set. If updating is required, AGWnew may generate a first random number RAND, and then use the key derivation function. The KDF and the first random number RAND and the BS identity (BS ID) derive an encryption key and/or an integrity key, ie = 500? (88 10, RAND, K, other parameters). In order to pass the commonly used SHA-1 The method is deduced as an example. The specific derivation method is: encryption key = SHA-1 ("cipher key", BS ID, RAND, K, other parameters); integrity key = SHA-1 ( "integrity key", BS ID, RAND, K, other parameters). The K is the key K shared by the UE and the AGWold, and other parameters may be the identity of the UE.

In steps 405-406, AGWnew may also not generate the first random number RAND. At this time, deriving a new encryption key and/or integrity key may use a variable such as a BS identity as an input parameter, because the UE may correspond to different The base station, the base station is replaced, and the BS identity also changes. If the AGWnew does not generate the first random number, or generates a new encryption key and/or the integrity key does not use a parameter that the UE does not know, the protection information set response returned to the BS does not carry the UE does not know. , the parameters required to generate the encryption key and/or integrity key.

In steps 405-406, AGWnew may also derive the intermediate key Kbs based on the shared key K and other parameters such as the random number RAND, BS ID, and the like. AGWnew sends Kbs and the parameters used by Kbs to the BS without knowing the parameters.

In steps 407-409, the BS selects a self-supported security algorithm from the security algorithm from the UE, and generates a second random number FRESH as one of the parameters of the integrity algorithm, and then selects the selected security algorithm, second. The random number FRESH and the first random number RAND are carried in the wireless connection setup message protected by the integrity key, and are sent to the UE. Here, when the AGWnew does not generate the first random number RAND, the first random number does not need to be sent to the UE. Number RAND; When AGWnew derives the intermediate key Kbs, the BS derives the key to protect the wireless connection according to Kbs and other parameters, such as the integrity key and/or the encryption key, which will derive the intermediate key Kbs and protect the wireless connection. The parameters required by the key, but not known by the UE, are sent to the UE. After successfully verifying the integrity of the wireless connection message, the UE sends a wireless connection establishment confirmation message indicating that the wireless connection establishment is completed, using the received security parameter (such as an algorithm) and the derived protected wireless connection key for protection. The BS selects the security algorithm received in step 401 according to its own characteristics, selects the security algorithm supported by the BS, and uses the selected security algorithm as the security algorithm used in the current wireless connection. In addition, the second random number FRESH generated by the BS acts as an input parameter to the integrity algorithm.

After receiving the wireless connection establishment message, the UE parses the security algorithm, the second random number FRESH, and the first random number RAND from the message, and derives the first random number RAND and the saved key K. The same encryption key and integrity key as in the BS. If the AGWnew does not generate the first random number, the UE may derive the same encryption key and/or integrity key as in the BS according to the same method as the AGWnew according to the parameters of the shared key K, the identity identifier of the BS, and the like. key. If the intermediate key Kbs needs to be deduced, the UE derives the same intermediate key Kbs as in the BS according to the parameters such as the shared key K, and derives the key for protecting the wireless connection according to the intermediate key Kbs. The UE then uses the integrity key for integrity verification, which may require the participation of a second random number FRESH. After verifying, the UE performs integrity protection on the wireless connection confirmation message by using the integrity algorithm in the received security parameter and the integrity key of the protected wireless connection directly derived by the UE or derived from the intermediate key Kbs. The confidentiality protection is protected by an encryption key and an encryption algorithm that protect the wireless connection. This message can also be only integrity protected without confidentiality protection.

So far, the wireless connection establishment procedure in this embodiment is ended.

After the wireless connection is established, the BS can report the security association used in this wireless connection to AGWnew for future wireless connection.

In this embodiment, as an alternative manner for the UE to send the security algorithm to the BS in step 401, the BS may send a message to the UE by using the wireless connection establishment message in step 406, and the UE according to its own characteristics. After the selection is made, an acknowledgment message is established via the wireless connection in step 407, and the selected security algorithm is returned to the BS. The BS communicates with the AGWold that holds the security parameters used in the last wireless connection through AGWnew. Although only the security key in the protection information set is saved in the AGWold, this embodiment only performs the negotiation of partial security parameters, so it can effectively Reduce access latency. In addition, when receiving the wireless connection message of the BS, the UE performs integrity verification on the message to ensure that the message has not been tampered with, and indicates to the BS that the wireless connection confirmation message is received when the wireless connection establishment is completed. Security is secured, so the security of the wireless connection is effectively improved.

In addition, in this embodiment, if all the security parameters are saved in the UE and the AGWold, the difference from the embodiment 2 is that all interactions between the BS and the AGWold are performed by AGWnew. The specific difference is that, in steps 302-303, the BS sends a protection information set request message carrying the UE identity to the AGWold through the AGWnew, and the AGWold carries the corresponding protection information set in the protection information set according to the received UE identity identifier. In the response message, it is returned to the BS through AGWnew.

In this embodiment, the AGWnew and the UE may perform the update of the encryption key and the integrity secret month, or may only update the encryption key or the integrity key.

In this embodiment, the function of AGWnew to generate an encryption key and/or an integrity key or an intermediate key Kbs may also be performed by AGWold. The AGWnew carries the identity of the BS in the protection information set request and sends it to the AGWold. The AGWold generates or does not generate the first random number RAND, and generates an encryption key according to parameters such as the first random number RAND and/or the identity of the BS. Integrity key. In this case, the access gateway directly connected to the base station only plays the role of forwarding during the negotiation of the key.

The method of negotiating a key in this embodiment is also suitable for the case where the BS is directly connected to the AGW that holds the security parameters in the last wireless connection. In this case, AGWold and AGWnew are combined into one, which becomes the AGW directly connected to the BS.

Example 4 In this embodiment, the BS can directly communicate with the AGW that saves the security parameters in the last wireless connection, and the security parameters stored in the UE and the AGW are all parameters (algorithms, keys, etc.) in the security association. In addition, the security capability information of the UE is also stored in the AGW.

FIG. 5 shows a signaling flow chart of the method for establishing a wireless connection in this embodiment. Referring to FIG. 5, the method for establishing a wireless connection in this embodiment includes:

In step 501, the UE sends a wireless connection establishment request message carrying the identity identifier of the UE, the protection information set identifier, and the information about the AGW to the BS, requesting to establish a wireless connection.

In the steps 502-503, the BS sends a protection information set request message carrying the UE identity to the AGW, and the AGW carries the corresponding protection information set and the security capability information of the UE together with the protection information according to the received UE identity identifier. In the collection response message, it is returned to the BS. The security capabilities herein include security related information such as security algorithms supported by the UE.

After the BS determines the AGW that saves the security parameter according to the received wireless connection setup request message, the identity of the UE is sent to the determined AGW. After receiving the protection information set request message from the BS, the AGW parses the identity of the UE from the message, and then finds the protection information set and security capability corresponding to the UE from itself, and uses the protection information set response message to The found protection information set is returned to the BS.

When the AGW does not save the key to protect the wireless connection, but only saves the root key of the key that can be derived to protect the wireless connection, the AGW needs to derive the key or intermediate key Kbs for protecting the wireless connection and send it to BS. The specific process is as shown in Embodiment 3.

In step 504, the BS negotiates the algorithm according to the received protection information set response message.

In this step, the BS parses the protection information set and the security capability information of the UE from the received protection information set response message, and according to the lifetime of the protection information set and itself Whether to support the security algorithm and the like in the protection information set, determine whether to continue using the received protection information set. When the BS determines that it does not support the algorithm in the protection information set, for example, when the BS determines that it does not support the encryption algorithm in the protection information set, the BS selects, according to the parsed security capability information of the UE, the encryption algorithm supported by the BS. A suitable encryption algorithm for both the UE and the BS. At this time, the security association in this wireless connection consists of the selected algorithm and other security parameters in the protection information set.

In steps 505-506, the BS carries the selected algorithm and other security parameters from the AGW in the radio connection setup message, and sends the message to the UE. After successfully verifying the integrity of the radio connection setup request message, the UE sends the adoption to the BS. The received wireless connection establishment confirmation message of the security parameter indicates that the wireless connection establishment is completed.

Here, the UE parses the algorithm from the received radio connection setup message and performs integrity verification on the strip message. After passing the verification, the UE performs integrity protection on the wireless connection confirmation message by using the received integrity algorithm and the integrity key saved or derived by the UE, and uses the encryption key and the encryption algorithm for confidentiality protection. This message can also be only integrity protected without confidentiality protection.

When the AGW does not save the security capability information of the UE, the security information of the UE does not exist in the protection information set response message sent by the AGW to the BS. The UE may report the security capability of the UE to the BS through the wireless connection setup request message in step 501, and the BS determines, in step 504, an encryption algorithm suitable for both the UE and the BS, and establishes a wireless connection setup message in step 505. The medium indicates to the UE that the current wireless connection is protected using the corresponding security association. In addition, security parameter negotiation may also be performed by interaction with the UE after step 503.

In this embodiment, the BS can save the security association information used in the last wireless connection. The AGW directly communicates, and all security parameters in the protection information set are saved in the AGW, but the BS does not support the encryption algorithm in the protection information set. Therefore, only the negotiation of the encryption algorithm is performed during the establishment of the wireless connection, and other security parameters are directly retrieved from the AGW, thereby effectively shortening the access delay. In addition, when receiving the wireless connection message of the BS, the UE performs integrity verification on the message to ensure that the message has not been tampered with, and indicates to the BS that the wireless connection is received using the received security parameter. The confirmation message is secured, so the security of the wireless connection is effectively improved.

Example 5

In this embodiment, the BS can directly communicate with the AGW that holds the security association information used in the last wireless connection, but only some of the security parameters are stored in the AGW. In this case, the BS needs to determine whether the security parameters in the protection information set are supported, and the unsupported security parameters and the security parameters that are not saved in the AGW are used as security parameters to be negotiated, and interact with the UE to complete the security parameters that need to be negotiated. Negotiation.

FIG. 6 shows a signaling flow chart of the method for establishing a wireless connection in this embodiment. Referring to FIG. 6, the method for establishing a wireless connection in this embodiment includes:

In step 601, the UE sends a wireless connection establishment request message carrying the identity identifier of the UE, the protection information set identifier, and the information about the AGW to the BS, requesting to establish a wireless connection.

In the steps 602-603, the BS sends a protection information set request message carrying the UE identity to the AGW, and the AGW carries the corresponding protection information set in the protection information set response message according to the received UE identity identifier, and returns the message to the BS. .

In step 604, the BS uses the unsupported security parameters and the security parameters that are not in the protection information set as the security parameters to be negotiated, and interacts with the UE to perform security negotiation to determine the security association in the current wireless connection.

In steps 605-606, the BS establishes a message through the wireless connection, indicating the use to the UE. The security association protection communication corresponding to the BS; after successfully verifying the integrity of the wireless connection establishment request message, the UE transmits a wireless connection establishment confirmation message protected by the received security parameter to the BS, indicating that the wireless connection establishment is completed.

In this embodiment, the UE may report the security parameter supported by the UE through the wireless connection establishment request message in step 601, and the BS does not need to interact with the UE in step 604, but supports the received UE according to the characteristics of the BS. The selection of the security parameters completes the determination of the security parameters that need to be negotiated.

In this embodiment, only a part of the security parameters are saved in the UE and the AGW, and the BS does not support some of the security parameters in the part of the security parameters. In this wireless connection establishment process, the negotiation process is performed only on the security parameters that need to be negotiated. Thereby effectively reducing the access delay. In addition, when receiving the wireless connection message of the BS, the UE performs integrity verification on the message to ensure that the message has not been tampered with, and indicates to the BS that the wireless connection is received using the received security parameter. The confirmation message is secured, so the security of the wireless connection is effectively improved.

As can be seen from the above description, when accessing the core network, the UE determines the security association used in the current connection according to the security parameters of the pre-stored UE, and does not need to negotiate the security parameters or only negotiate some of the security parameters, thereby effectively Reduced access latency.

In addition, in the prior art, since the establishment process of the security association is performed after the RC connection is established, the signaling in the RRC connection establishment process cannot be provided with security protection, and the attacker can modify the content in the RRC connection establishment message. The RRC connection is established according to the wrong configuration, which affects the quality of service that the user enjoys. The attacker can also perform the denial of service attack by forging the RC connection rejection message, so that the legitimate user cannot enjoy the service provided by the network side. In the present invention, the core network device is received at the UE. After the message of the security parameter of the wireless connection, the UE performs the integrity verification on the message, and performs the subsequent process if the verification succeeds, which can effectively avoid the malicious attack during the establishment of the wireless connection, and is a legitimate user. Enjoy the protection of network services. Further, after the UE and the core network device determine all the security parameters, the security parameters are used to secure the subsequent signaling in the wireless connection establishment process, thereby effectively improving the security of the wireless connection establishment process.

Example 6

The present embodiment will be described in detail with reference to the accompanying drawings to a wireless connection establishing system provided by the present invention.

FIG. 7 is a schematic structural diagram of a wireless connection establishing system according to this embodiment. Referring to FIG. 7, the system in this embodiment includes a user equipment UE, a core network device, and an access network device, where:

The user equipment UE is configured to request the access network device to establish a wireless connection;

The core network device is configured to save the security parameters of the UE, interact with the access network device, and send the security parameters of the UE to the access network device.

The access network device is configured to interact with the core network device, obtain security parameters of the user equipment, determine a security association for protecting the current wireless connection according to the security parameter, and instruct the user equipment to use the security association to protect communication.

The UE includes a connection establishing unit, configured to send, to the access network device, a wireless connection establishment request message carrying the identity identifier of the UE and the protection information set identifier, requesting to establish a wireless connection;

The UE is further configured to save the UE identity, the protection information set identifier, the information of the core network device that saves the UE security parameter, and the security capability of the UE. If necessary, the information of the core network device that stores the UE security parameter and the security capability of the UE may be carried. The information is sent to the access network device in a wireless connection setup request message. The UE may further include a verification unit, configured to perform integrity verification on the security association received from the access network device, and send an acknowledgement message to the access network device after the verification succeeds.

The core network device is configured to search for a protection information set corresponding to the identity identifier of the UE according to the received protection information set request, and carry the protection information set in the protection information collection response to the access network device.

The core network device includes a protection information storage unit and a judgment inquiry unit.

The protection information storage unit is configured to save the security parameters of the UE, such as the security parameter corresponding to the security association used by the UE in the last wireless connection establishment request, that is, the protection information set. The protection information set storage unit may also save the security capability of the UE, and provide the security capability of the UE to the judgment query unit when needed.

The determining query unit is configured to search for the protection information set with the UE from the protection information storage unit according to the identity identifier and the protection information set identifier of the UE in the received protection information set request, and carry the protection information set in the protection information. The set response is returned to the access network device. When the protection information storage unit saves the security capability of the UE, the security capability of the UE may be further carried in the protection information set response and returned to the access network device.

The access network device is configured to: carry the identifier of the received UE and the protection information set identifier in the protection information set request, and send the information to the core network device; and further, after receiving the protection information set response from the core network device, according to the obtained The set of protection information determines a security association for the current wireless connection, instructing the UE to use the security association to secure communications.

The access network device includes a receiving unit, a security parameter obtaining unit, and a determining and indicating unit; wherein:

The receiving unit is configured to receive a wireless connection establishment request of the user equipment;

After receiving the wireless connection establishment request, the security parameter obtaining unit interacts with the core network device that saves the security parameter of the user equipment to obtain the security parameter of the user equipment; the determining and indicating unit is configured to determine the protection version according to the security parameter of the user equipment. Secondary wireless connection The security association is instructed to indicate that the user equipment uses the corresponding security association to protect the communication.

The access network device may further include a determining unit, configured to determine whether the security parameter of the user equipment is supported by the access network device; and the determining and indicating unit determines, at the determining unit, that the security parameter of the user equipment is obtained. After the access network device is supported, the security parameter of the user equipment is determined to protect the security association of the wireless connection.

The access network device may further include a negotiating unit, where the negotiating unit is configured to negotiate the security parameters that need to be negotiated when the determining unit determines that the security parameter of the user equipment is required to be negotiated; The security parameter that does not need to be negotiated in the security parameters of the UE and the negotiated security parameter are determined by the determining and indicating unit as the security association of the wireless connection.

In this embodiment, the access network device may be a base station, and the core network device may be an access gateway. With the system in this embodiment, the core network device pre-stores the security parameters of the UE. When the UE accesses the core network, the access network device can determine the security of the wireless connection according to the security parameters of the UE obtained from the core network device. Association, no need to negotiate all security parameters, thus effectively reducing the access delay. In addition, the UE can perform integrity verification on the security association received from the access network device, thereby improving security during the establishment of the wireless connection.

The above is only the preferred embodiment of the present invention, and is not intended to limit the present invention. Any modifications, equivalent substitutions and improvements made within the spirit and principles of the present invention should be included in the present invention. Within the scope of protection.

Claims

Claim

A method for establishing a wireless connection, the method comprising:

2. The method according to claim 1, wherein the UE requests the access network device to establish a wireless connection as:

The UE sends a wireless connection establishment request message carrying the identity identifier of the UE and the protection information set identifier to the access network device, requesting to establish a wireless connection.

The method of claim 2, wherein the access network device interacts with a core network device that stores security parameters of the UE, and obtaining security parameters of the UE includes: the access network device saves the UE The core network device of the security parameter sends a protection information set request message carrying the UE identity identifier and the protection information set identifier, and the core network device that saves the security parameter of the UE according to the received UE identity identifier and the protection information set identifier will correspond to The protection information set is carried in the protection information set response message and returned to the access network device.

The method of claim 3, wherein the access network device determines to protect the security association of the current wireless connection according to the received security parameter, and instructs the UE to use the corresponding security association to protect the communication as:

The access network device determines, according to the received protection information set, the security association used to protect the communication in the current wireless connection, and instructs the UE to use the corresponding security association to protect the communication through the wireless connection establishment message.

5. The method according to claim 4, wherein the determining the security association used to protect the communication in the current wireless connection is:

When the access network device determines to continue to use the protection information set, the security parameter in the protection information set is used as a security association for protecting wireless signaling in the current wireless connection process.

The method according to claim 3, wherein the access network device determines to protect the security association of the current wireless connection according to the received security parameter, and instructs the UE to use the corresponding security association to protect the communication as:

The access network device parses the protection information set from the received protection information set response message. When the access network device determines that there is a security parameter to be negotiated, the access network device interacts with the UE to negotiate the security parameters to be negotiated. And the negotiated security parameter and the security parameter supported by the access network device form a security association of the current wireless connection, and the wireless connection establishment message is used to instruct the UE to use the corresponding security association to protect the communication.

The method according to claim 3, wherein the wireless connection establishment request message further includes: security capability information of the UE;

The access network device determines to protect the security association of the current wireless connection according to the received security parameter, and instructs the UE to use the corresponding security association to protect the communication as:

The access network device parses the protection information set from the received protection information set response message. When the access network device determines that there is a security parameter to be negotiated, according to the characteristics of the access network device and the security capability of the UE, A security parameter suitable for both the access network device and the UE, and the selected security parameter and the security parameter supported by the access network device form a security association of the current wireless connection, and the wireless connection establishment message is used to instruct the UE to use the corresponding security association. Protect communications.

The method of claim 3, wherein the core network device that holds the security parameter of the UE further saves the security capability information of the UE, and the protection information set response message further includes: Capability information; The access network device determines, according to the received security parameter, the security association that protects the current wireless connection, and instructs the UE to use the corresponding security association to protect the communication as:

The access network device parses the protection information set and the security capability information of the UE from the received protection information set response message, and when the access network device determines that there is a security parameter to be negotiated, according to the characteristics of the access network device and the UE Security capability, selecting security parameters suitable for both the access network device and the UE, and forming the security association of the selected security parameter and the security parameters supported by the access network device to form a security association of the current wireless connection, and establishing a message indication through the wireless connection The UE protects the communication using the corresponding security association.

The method according to claim 6, 7 or 8, wherein the protection information set includes all security parameters in the last wireless connection; and the access network device determines that there are security parameters that need to be negotiated. If the security parameters are not supported by the access network device, the security parameters that are not supported by the access network device are used as security parameters to be negotiated.

The method according to claim 6, 7 or 8, wherein the protection information set includes only part of the security parameters in the last wireless connection; and the access network device determines that there is security to be negotiated. The parameter is: when there is a security parameter that is not supported by the access network device, the security parameter that is not supported by the access network device and the security parameter that is not included in the protection information set are used as security parameters to be negotiated; When the full security parameter in the protection information set is supported, the security parameter not included in the protection information set is used as a security parameter to be negotiated.

The method according to claim 4, 5, 6, 7, or 8, wherein the establishing a message by using a wireless connection to instruct the UE to protect the communication by using a corresponding security association is:

The access network device establishes a message through the wireless connection, sends the security parameters required by the UE to the UE, and notifies the UE to protect the current wireless connection by using the corresponding security parameter.

12. The method of claim 3, 4, 5, 6, 7 or 8 wherein Before the returning the protection information set response message to the access network device, the method further includes:

The core network device storing the security parameter of the UI derives the encryption key and/or the integrity key according to the shared key in the security key saved by itself and the parameters required to generate the encryption key and/or the integrity key;

The returning the protection information set response message to the access network device is: the core network device storing the security parameter of the network encrypts the key and/or the integrity key and the generated encryption key and/or integrity key The parameters that are not known by the UE in the required parameters are carried in the protection information set response message and sent to the access network device.

The method according to claim 12, wherein the access network device determines to protect the security association of the current wireless connection according to the received security parameter, and instructs the UE to use the corresponding security association to protect the communication, including:

The access network device carries the parameters that are not required by the UE in the parameters required for generating the encryption key and/or the integrity key, and the parameters are not carried by the UE, and are sent to the UE;

The method further includes:

The UE parses out, from the wireless connection setup message, the parameters that are not known by the UE in the parameters required to generate the encryption key and/or the integrity key, and according to the parsed parameters required to generate the encryption key and/or the integrity key. The parameters that are not known by the UE and the shared key that is saved by itself are derived from the same encryption key and/or integrity key as in the access network device.

The method according to claim 3, 4, 5, 6, 7, or 8, wherein before the returning the protection information set response message to the access network device, the method further includes:

The core network device that saves the security parameters of the UE derives the intermediate key according to the root key in the security key saved by itself and the parameter required for deriving the intermediate key;

The returning the protection information set response message to the access network device is: saving the UE security The parameter-based core network device carries the intermediate key and the parameters that are not known by the UE in the parameters required by the intermediate key in the protection information set response message, and sends the parameters to the access network device.

The method of claim 14, wherein the access network device determines to protect the security association of the current wireless connection according to the received security parameter, and indicates that the UE uses the corresponding security association to protect the communication, including:

The access network device derives an encryption key and/or an integrity key for protecting the wireless connection according to the intermediate key, and the UE does not know the parameters of the intermediate key and the encryption key and/or the integrity key. The parameter is carried in the wireless connection setup message and sent to the UE;

The method further includes:

The UE parses out, from the wireless connection setup message, parameters that are not known by the UE in the parameters required for deriving the intermediate key and the encryption key and/or the integrity key, and according to parameters required for deriving the intermediate key and roots saved by itself The key, the intermediate key is derived, and then the encryption key and/or integrity key is derived from the intermediate key' and the parameters needed to derive the encryption key and/or the integrity key.

The method according to claim 3, 4, 5, 6, 7, or 8, wherein the core network device that holds the security parameters of the UE is directly connected to the access network device.

The method according to claim 16, wherein the wireless connection establishment request message further includes: information of a core network device; and before the access network device sends a protection information set request message to the core network device , the method further includes:

The access network device determines, according to the information of the core network device in the wireless connection establishment request message, the core network device that saves the security parameter.

The method according to claim 3, 4, 5, 6, 7, or 8, wherein the core network device that stores the security parameters of the UE is connected to the core network device directly connected to the access network device. Access network device communication;

The access network device sends a protection letter to a core network device that saves security parameters of the UE And the core network device that saves the security parameter of the UE returns the protection information set response to the access network device, including:

The access network device sends a protection information set request message carrying the UE identity identifier and the protection information set identifier to the core network device directly connected to the access network device, and the core network device directly connected to the access network device uses the protection information. The aggregate request message is forwarded to the core network device that saves the security parameter of the UE, and the core network device that saves the security parameter of the UE sends the protection information set response to the core network device directly connected to the access network device, and the access network device The directly connected core network device returns a protection information set response to the access network device.

The method according to claim 18, wherein the wireless connection establishment request message further includes: information of a core network device that stores a security parameter of the UE; and the access network device to the access network While the core network device directly connected to the device sends the protection information set request message, the method further includes:

The access network device sends the information of the core network device that saves the security parameter of the UE to the core network device directly connected to the access network device;

Before the core network device directly connected to the access network device forwards the protection information set request message to the core network device that saves the security parameter of the UE, the method further includes:

The core network device directly connected to the access network device determines the core network device that saves the security parameter according to the information of the core network device that stores the security parameter of the UE.

The method according to claim 18, wherein before the returning the protection information set response message to the access network device, the method further includes:

The core network device directly connected to the access network device derives the encryption key and/or the integrity key according to the shared key in the received security key and the parameters needed to generate the encryption key and/or the integrity key. ;

The returning the protection information set response message to the access network device is: The connected core network device carries the encryption key and/or the integrity key and the parameters that are not known by the UE in the parameters required to generate the encryption key and/or the integrity key in the protection information set response message, and sends Give access network equipment.

The method according to claim 20, wherein the access network device determines to protect a security association of the current wireless connection according to the received security parameter, and instructs the UE to use the corresponding security association protection communication, including :

The method further includes:

The method of claim 18, wherein before the returning the protection information set response message to the access network device, the method further includes:

The core network device directly connected to the access network device derives the intermediate key according to the root key in the received security key and the parameters required for deriving the intermediate key;

The returning the protection information set response message to the access network device is: the core network device directly connected to the access network device carries the intermediate key and the parameter that is not known by the UE in the parameters required for deriving the intermediate key to the protection information set response. In the message, it is sent to the access network device.

The method of claim 22, wherein the access network device determines to protect the security association of the current wireless connection according to the received security parameter, and instructs the UE to use the corresponding security association to protect the communication, including:

The access network device derives an encryption key and/or an integrity key for protecting the wireless connection according to the intermediate key, and deduces the parameters of the intermediate key and the encryption key and/or the integrity key. The parameter that the UE does not know is carried in the wireless connection setup message and sent to the UE.

The method further includes:

The UE parses out, from the wireless connection setup message, parameters that are not known by the UE in the parameters required for deriving the intermediate key and the encryption key and/or the integrity key, and according to the parameters required for deriving the intermediate key and the root saved by the UE The key derives the intermediate key and then derives the encryption key and/or integrity key based on the intermediate key and the parameters needed to derive the encryption key and/or the integrity key.

The method according to claim 1, wherein the access network device instructs the UE to use the corresponding security association to protect the communication as:

The access network device sends a wireless connection setup message with the security association protection to the UE, instructing the UE to use the corresponding security association to protect the communication.

The method according to any one of claims 1 to 8, wherein after the access network device instructs the UE to use the corresponding security association to protect the communication, the method further comprises:

The UE sends an acknowledgement message to the access network device.

The method of claim 25, wherein the sending, by the UE, the acknowledgement message to the access network device comprises:

The UE sends a wireless connection setup confirmation message with the security association protection to the access network device, indicating that the wireless connection establishment is completed.

The method according to any one of claims 1 to 8, wherein the access network device is a base station, and the core network device is an access gateway.

28. A method of establishing a wireless connection, the method comprising:

After receiving the wireless connection establishment request from the user equipment, the access network device interacts with the core network device that stores the security parameter of the user equipment, and obtains the security parameter of the user equipment; according to the security parameter of the user equipment Determine the security of this wireless connection And instructing the user equipment to use the security association to protect communications.

The method of claim 28, after the user equipment is instructed to use the security association to protect communications, the method further comprising:

The access network device receives an acknowledgment message from the user equipment.

30. A wireless connection establishing system, the system comprising: a user equipment UE, a core network device, and an access network device;

The UE is configured to request an access network device to establish a wireless connection;

The core network device is configured to save security parameters of the UE, interact with the access network device, and provide security parameters of the UE to the access network device;

The access network device is configured to interact with the core network device to obtain a security parameter of the UE, determine a security association for protecting the current wireless connection according to the security parameter, and instruct the UE to use the corresponding security association to protect the communication.

The system according to claim 30, wherein the UE is configured to send, to the access network device, a wireless connection establishment request message carrying the identity identifier of the UE and the protection information set identifier, requesting to establish a wireless connection;

The core network device is configured to search for a protection information set corresponding to the identity of the UE according to the received protection information set request, and carry the protection information set in the protection information set response to the access network device;

The access network device is configured to carry the received identity identifier and the protection information set identifier of the UE in a protection information set request, and send the message to the core network device; and determine the current wireless according to the protection information set returned by the core network device. The security association used by the connection instructs the UE to use the corresponding security association to protect the communication.

The system according to claim 31, wherein the UE further comprises a verification unit, configured to perform integrity verification on the security association received from the access network device, and after the integrity verification is passed, accessing the system The network device sends a confirmation message.

The system according to claim 30 or 31, wherein the access network device is a base station, and the core network device is an access gateway.

A core network device, the core network device includes: a protection information storage unit, configured to save a security parameter of the user equipment UE;

The core network device according to claim 34, wherein the protection information storage unit is further configured to save a security capability of the UE;

The determining query unit further sends the security capability of the UE to the access network device.

36. An access network device, where the access network device includes: a receiving unit, configured to receive a wireless connection establishment request of the user equipment UE;

The access network device according to claim 36, further comprising: a determining unit, configured to determine whether the security parameter of the UE is supported by the access network device; the determining and indicating unit is determining After the unit determines that the security parameter of the UE can be supported by the access network device, the security parameter of the UE is determined to be a security association for protecting the current wireless connection.

The access network device of claim 37, wherein the access network device further comprises:

a negotiating unit, configured to determine, in the determining, the security parameter of the UE When the security parameters to be negotiated are required, the security parameters that need to be negotiated are negotiated.

The determining and indicating unit is configured to determine, in the security parameter of the UE, the security parameter that is not required to be negotiated and the negotiated security parameter, to protect the security association of the current wireless connection.