WO2012000435A1

WO2012000435A1 - Method and apparatus for transmitting integrity protection parameter

Info

Publication number: WO2012000435A1
Application number: PCT/CN2011/076563
Authority: WO
Inventors: 王登辉
Original assignee: 中兴通讯股份有限公司
Priority date: 2010-06-30
Filing date: 2011-06-29
Publication date: 2012-01-05
Also published as: CN102316455A

Abstract

A method and an apparatus for transmitting an integrity protection parameter are provided. The method includes: after receiving a radio resource reconfiguration accomplishment message transmitted by a terminal, a first Radio Network Controller (RNC) transmits a changed security mode information request message to a second RNC to request the integrity protection parameter COUNT-I corresponding to the terminal; during the relocation process, the first RNC is the target RNC (TRNC) and the second RNC is the source RNC; the first RNC updates the local COUNT-I according to the COUNT-I carried in the received changed security mode information response message returned by the second RNC. With the present invention, the integrity protection parameter COUNT-I can be transmitted correctly during the relocation process, and thereby the consistency between the integrity protection parameter COUNT-I stored in the TRNC and that stored in the terminal in the cross-RNC handoff situation is improved.

Description

Method and device for transmitting integrity protection parameters

The present invention relates to the field of mobile communications, and in particular, to a method and apparatus for transmitting integrity protection parameters. Background technique

Hard handover refers to the form of handover that first disconnects the original cell and then contacts the new base station within a specified time. Among them, it can be a switch between different cells in an RNC (Radio Network Controller), or it can be a switch across RNCs. A hard handoff across RNC is called relocation (RELOCATION).

During the uplink and downlink transmission, the message cell carries the Hyper Frame Number (HFN) of the SPON (Signaling Radio Bearer) and the Radio Resource Control Message Sequence Number (RRC SN). . The HFN and RRC SN form the integrity protection parameter COUNT-I (counter) according to the high and low bits. COUNT-I is the parameter of the integrity protection f algorithm of the air interface signaling message. Integrity protection f The algorithm allows the receiver to verify that the signaling data was illegally modified after it was sent.

Figure 1A shows the composition of COUNT-I. The upper 28 bits of COUNT-I are used for HFN and the lower 4 bits are used for RRC SN. Among them, the upstream and downstream COUNT-I are calculated separately.

As shown in FIG. 1B, the SRNC (Source Radio Network Controller) sends a relocation request message (RELOCATION REQUIRED) to the core network, where the request message carries the uplink and downlink integrity protection parameters COUNT-I. . The core network forwards the relocation request message to the TRNC (Target Radio Network Controller). TRNC returns a relocation response message to the core network. The core network sends a relocation command message to the SRNC. The SRNC sends an air interface reconfiguration message to the terminal, and the air interface reconfiguration is performed. The downstream COUNT-I in the interest is incremented by one with respect to the downstream COUNT-I transmitted to the TRNC. The terminal sends a radio resource reconfiguration complete message to the TRNC after the reconfiguration is completed. The TRNC sends a relocation probe message and a relocation complete message to the core network to complete the relocation process. If the voice service is established after the SRNC sends the relocation request message to the core network, the SRNC interacts with the terminal (Non-Access Stratum) message, for example, the SRNC sends a heavy message to the core network. After the positioning request message, the core network sends a connection (CONNECT) message to the SRNC, and the SRNC forwards the connection message to the terminal. Both the SRNC and the downstream COUNT-I of the terminal will increase, which is greater than the downstream COUNT-I transmitted to the TRNC. After the relocation succeeds, the terminal sends a connection response message to the core network through the TRNC, and the core network sends a ringing message to the terminal through the TRNC. At this time, the downlink COUNT-I carried by the TRNC in the downlink message is equal to the downlink COUNT-L saved by the terminal. Therefore, the terminal discards the received message, causing the voice service transmission to fail. Summary of the invention

The embodiment of the invention provides a method and a device for transmitting an integrity protection parameter, which are used for realizing the transmission of the integrity protection parameter COUNT-I in the relocation process, and improving the TRNC and the COUNT-I saved by the terminal after the RNC switching. consistency.

The present invention provides a method for transmitting an integrity protection parameter, the method comprising the following steps: After receiving a radio resource reconfiguration complete message sent by a terminal, the first RNC (Radio Network Controller) sends a change security mode to the second RNC. The information request message, requesting to obtain the integrity protection parameter COUNT-I corresponding to the terminal; wherein the first RNC is the target RNC, and the second RNC is the source RNC;

The first RNC updates the local COUNT-I according to the COUNT-I carried in the change security mode information response message returned by the second RNC.

In the above method, the step of the first RNC sending a change security mode information request message to the second RNC includes: sending, by the first RNC, a change security mode to the second RNC through the IUR interface Information request message; the change security mode information request message is included in a private message body of the IUR interface.

Further, the method further includes: after the first RNC sends the change security mode information request message to the second RNC, the first RNC starts the timer and enters a state of waiting for response.

Further, the foregoing method further includes: the first RNC continues to transmit the message according to the local COUNT-I after the timer expires.

Further, the step of updating the local COUNT-I according to the integrity protection parameter COUNT-I carried in the received response message by the first RNC includes: the COUNT- carried in the received change security mode information response message by the first RNC. I compares with the local COUNT-I. If the two are inconsistent, the larger value of the COUNT-I and the local COUNT-I carried in the change security mode information response message is saved.

Further, the step of the first RNC sending a change security mode information request message to the second RNC includes: sending, by the first RNC, a relocation detection message and relocation to the core network after receiving the radio resource reconfiguration complete message sent by the terminal The message is completed, and a change security mode information request message is sent to the second RNC after sending the relocation probe message or the relocation complete message.

Furthermore, the present invention provides a method of transmitting an integrity protection parameter, the method comprising the steps of:

After sending the air interface reconfiguration message, the second RNC receives the change security mode information request message sent by the first RNC;

The second RNC generates a change security mode information response message, and returns a change security mode information response message to the first RNC; the response message includes a current integrity protection parameter COUNT-I.

In the above method, the step of the second RNC returning the change security mode information response message to the first RNC includes: returning, by the second RNC, a change security mode information response message to the first RNC through the IUR interface; the change security mode information response message Private elimination contained in the IUR interface In the body.

Accordingly, the present invention also provides a Radio Network Controller (RNC), the radio network controller comprising:

a first transceiver unit, configured to send a change security mode information request message to other RNCs, and receive a change security mode information response message;

And a comparing unit, configured to update the local COUNT-I according to the integrity protection parameter COUNT-I carried in the received change security mode information response message.

In the above device, the first transceiver unit includes an IUR interface, and the first transceiver unit is further configured to send a change security mode information request message to the SRNC through the IUR interface.

Further, the above apparatus further includes: a timer for timing.

Further, the first transceiver unit is further configured to: continue to transmit the message according to the local COUNT-I after the timer expires.

Further, the comparing unit is further configured to: compare the COUNT-I carried in the received change security mode information response message with the local COUNT-I, and if the two are inconsistent, save the change security mode information response message. The larger of the COUNT-I carried and the local COUNT-I.

Further, the first transceiver unit is further configured to: after sending the relocation detection message or the relocation complete message to the core network, send a change security mode information request message to the other RNC.

Further, the first transceiver unit is further configured to: receive a change security mode information request message sent by the second RNC, and return a change security mode information response message to the other RNC; the response message includes an integrity protection parameter C0UNT- L

Further, the first transceiver unit is further configured to: return a change security mode information response message to the other RNCs through the IUR interface.

In addition, the present invention also provides a radio network controller (RNC), where the radio network controller includes: a second transceiver unit, configured to receive a change security mode information request message sent by another RNC, and return a change security mode information response message to other RNCs;

And a generating unit, configured to generate a change security mode information response message after receiving the change security mode information request message sent by the other RNC; the response message includes an integrity protection parameter COUNT-I.

In the above device, the second transceiver unit is further configured to: return a change security mode information response message to other RNCs through the IUR interface.

In the embodiment of the present invention, the TRNC sends a change security mode information request message to the SRNC after receiving the radio resource reconfiguration complete message sent by the terminal; the SRNC receives the request message, and returns a change security mode information response message to the TRNC, where The response message contains the latest integrity protection parameter COUNT-I; TRNC updates the local COUNT-I according to the COUNT-I carried in the received response message. Thus, in the relocation process, the present invention can correctly transmit the integrity protection parameter COUNT-I, thereby improving the consistency of the integrity protection parameter COUNT-I held by the TRNC and the terminal when switching between RNCs. DRAWINGS

Figure 1A is a schematic diagram of the composition of the integrity protection parameter COUNT-I;

FIG. 1B is a schematic diagram of dropping NAS messages caused by cross-RC handover;

2 is a main structural diagram of a communication system according to an embodiment of the present invention;

3A is a detailed structural diagram of a TRNC according to an embodiment of the present invention;

3B is a schematic diagram of content of a change security mode information request message according to an embodiment of the present invention; FIG. 3C is a schematic diagram of content of a change security mode information response message according to an embodiment of the present invention; FIG. 4 is a detailed structural diagram of a SRNC according to an embodiment of the present invention;

5 is a flowchart of a main method for transmitting a integrity protection parameter COUNT-I on the TRNC side according to an embodiment of the present invention;

FIG. 6 is a main diagram of the SRNC side transmission integrity protection parameter COUNT-I according to an embodiment of the present invention; Method flow chart;

7 is a flowchart of a detailed method for transmitting an integrity protection parameter COUNT-I when forwarding a message through an IUR interface according to an embodiment of the present invention;

FIG. 8 is a flowchart of a detailed method for transmitting the integrity protection parameter COUNT-I of the TRNC side according to an embodiment of the present invention; FIG.

Figure 9 is a flow chart showing the detailed method of transmitting the integrity protection parameter COUNT-I on the SRNC side in the embodiment of the present invention. detailed description

In the embodiment of the present invention, the TRNC sends a change security mode information request message to the SRNC after receiving the radio resource reconfiguration complete message sent by the terminal; the SRNC receives the request message, and returns a change security mode information response message to the TRNC, where The response message contains the latest integrity protection parameter COUNT-I; TRNC updates the local COUNT-I according to the COUNT-I carried in the received response message. The integrity protection parameter COUNT-I is correctly transmitted during the relocation process, and the consistency of the integrity protection parameter COUNT-I saved by the TRNC and the terminal when the RNC is switched is improved.

Referring to Fig. 2, the communication system in this embodiment includes TRNC 201 and SRNC 202.

The TRNC 201 is configured to send a Changed Security Mode Info Req message to the SRNC 202. In the RNC relocation process, after receiving the radio resource reconfiguration complete message sent by the terminal, the TRNC 201 sends a change security mode information request message to the SRNC 202 to obtain the current integrity protection parameter COUNT-I information, and according to The obtained integrity protection parameter COUNT-I updates the local integrity protection parameter COUNT-I. The TRNC 201 is further configured to: after receiving the relocation request message forwarded by the core network, send a relocation response message to the core network, and send a relocation detection message to the core network after receiving the radio resource reconfiguration complete message sent by the terminal, and The location completion message.

SRNC 202 is used to send change security mode information responses to TRNC 201 (Changed Security Mode Info Rsp ) Message. The SRNC 202 is configured to, after receiving the change security mode information request message sent by the TRNC 201, return a change security mode information response message to the TRNC 201, where the response message includes an integrity protection parameter COUNT-I, especially a downlink COUNT-I. If a connection such as a voice service occurs during the relocation process, the COUNT-I may be changed by transmitting the NAS message, so the latest COUNT-I is sent to the TRNC 201 by changing the security mode information response message. The SRNC 202 is further configured to send a relocation request message to the core network when the relocation needs to be performed, receive a relocation command message sent by the core network in the relocation process, and send the relocation command message sent by the core network to the terminal after receiving the relocation command message sent by the core network. The air interface reconfigures the message, and then enters the state of waiting for the IU release command of the core network, and receives the change security mode information request message sent by the TRNC 201 during the waiting process.

When the RNC is the TRNC 201, the RNC includes a first transceiver unit 2011, a first storage unit 2012, a timer 2013, and a comparison unit 2014. See Figure 3A.

The first transceiver unit 2011 is configured to receive and send a message. The first transceiver unit 2011 is specifically configured to send a change security mode information request message to the SRNC 202. The preferred first transceiver unit 2011 includes an IUR interface, and uses a private message of an IUR interface (an interface directly connected between two RNCs). The (Private Message) structure transmits a change security mode information request message so as not to affect the existing communication protocol, and the message content is as shown in FIG. 3B. And receiving the change security mode information response message returned by the SRNC 202, preferably transmitting the change security mode information response message by using the private message structure of the IUR interface, and the message content is as shown in FIG. 3C. In the change security mode information request message and the change security mode information response message, the identifier may be set for the terminal. For example, the instance number of the terminal on the SRNC 202 side is represented by srnc-U-RNTI, and the first transceiver unit 2011 is set to pass through the IUR interface. The cell type of the request message sent by the SRNC 202 is Changed Security Mode Info Req, indicating that the integrity protection parameter COUNT-I information is requested to obtain the integrity protection parameter COUNT-I that may change due to the delivery of the NAS message. The first transceiver unit 2011 is further configured to receive a relocation request message forwarded by the core network, and the receiving terminal sends the message through the Uu interface. The sent radio resource reconfiguration complete message. The first transceiver unit 2011 is further configured to receive a relocation request message forwarded by the core network, and send a relocation response message to the core network, receive a radio resource reconfiguration complete message sent by the terminal, and send a relocation complete to the core network (RELOCATION COMPLETE). The message completes the relocation process, and sends a relocation probe message to the core network to request switching of the user plane data. The first transceiver unit 2011 may send the change security mode information request message at any time. For example, the change security mode information request message may be sent after receiving the radio resource reconfiguration complete message sent by the terminal. Preferably, the change may be sent to the core network. After relocating the probe message, or after transmitting the relocation complete message to the core network, a change security mode information request message is sent to obtain the latest COUNT-I. The first transceiver unit 2011 may further send the change security mode information request message multiple times after receiving the radio resource reconfiguration complete message sent by the terminal, so as to obtain the latest COUNT-I.

The first storage unit 2012 is used to store the uplink and downlink integrity protection parameters COUNT-L, wherein the first storage unit 2012 may not be located in the TRNC 201, and may be an external storage, or other type of storage device.

Timer 2013 is used for timing. The timer 2013 is specifically configured to: after the first transceiver unit 2011 sends the change security mode information request message through the IUR interface, start timing, and cause the RNC to enter a state of waiting for the SRNC 202 to return a change security mode information response message, and wait for the SRNC 202 to return. The security mode information response message is changed to obtain the latest integrity protection parameter COUNT-L. If the timer 2013 times out and has not received the response message returned by the SRNC 202, the RNC is caused to jump out and wait for the SRNC 202 to return the change security mode information response message. Status, comparison unit 2014 does not have to update the integrity protection parameter COUNT-L

The comparing unit 2014 is configured to determine whether the received change security mode information response message includes the integrity protection parameter COUNT-L. When the determination result is yes, continue to determine whether the COUNT-I is valid, that is, whether the format is correct, and the COUNT- Whether I has a total of 32 bits, whether the high 28 bits are HFN and the lower 4 bits are RRC SNs to complete the judgment process. When the judgment result is yes, it will change The integrity protection parameter COUNT-I carried in the security mode information response message is compared with the integrity protection parameter COUNT-I stored in the first storage unit 2012. If the two are inconsistent, the larger of the two is saved. If the first transceiver unit 2011 does not receive the change security mode information response message sent by the SRNC 202 through the IUR interface after the timer 2013 expires, or the received change security mode information response message does not include a valid integrity protection parameter. The COUNT-I information, or the received message type of the response message is not Changed Security Mode Info Rsp, or the received security mode information response message contains the integrity protection parameter COUNT-I less than or equal to the first storage unit 2012 In the integrity protection parameter COUNT-I saved, it is not necessary to update the integrity protection parameter COUNT-I.

Referring to FIG. 4, when the RNC is the SRNC 202, the RNC includes a second transceiving unit 2021 and a generating unit 2022, and may further include a releasing unit 2023.

The second transceiver unit 2021 is configured to receive and send a message. The second transceiver unit 2021 is configured to receive a change security mode information request message sent by the TRNC 201 by using an internal IUR interface, where the request message is included in a private message body of the IUR interface. After receiving the request message, the second transceiver unit 2021 returns a change security mode information response message to the TRNC 201 through the IUR interface, where the response message is included in the private message body of the IUR interface. The second transceiver unit 2021 is further configured to send a relocation request message to the core network at the beginning of the relocation process, forward the request message to the TRNC 201 through the core network, receive the relocation command sent by the core network, and send the air interface reconfiguration to the terminal. (Radio Bearer Reconfiguration) message. After the second transceiver unit 2021 sends the air interface reconfiguration message, the SRNC 202 enters a state of waiting for the IU release command of the core network, and receives the change security mode information request message sent by the TRNC 201 during the waiting process. If the SRNC 202 is not in the state of waiting for the IU release command of the core network, the change security mode information request message is not processed and the discarding process is performed. After receiving the release command, the release unit 2023 releases the resource of the terminal on the SRNC 202 side after receiving the release command. The generating unit 2022 is configured to generate a change security mode information response message after the second transceiver unit 2021 receives the change security mode information request message sent by the TRNC 201. Wherein, the response message includes an integrity protection parameter COUNT-I ₀

The releasing unit 2023 is configured to release the resources of the terminal on the SRNC 202 side after the second transceiving unit 2021 receives the IU release command sent by the core network. The resource may be a radio resource control (RRC) connection or the like.

The following describes the method of passing the integrity protection parameters through the implementation process.

Referring to Figure 5, an embodiment of the present invention introduces a method of transmitting integrity protection parameters from the TRNC 201 side. The main method of the TRNC 201 side transmitting the integrity protection parameter COUNT-I is as follows: Step 501: After receiving the radio resource reconfiguration complete message sent by the terminal, the TRNC 201 sends a change security mode information request message to the SRNC 202, requesting to obtain the The integrity protection parameter COUNT-I corresponding to the terminal.

Preferably, the TRNC 201 may also send a change security mode information request message to the SRNC 202 after sending the relocation probe message to the core network or after sending the relocation complete message to the core network, where the control plane and the user plane data have been After the configuration is about to be completed, the core network has stopped or is about to stop transmitting messages to the SRNC 202, and the COUNT-I on the SRNC 202 side is less likely to change, so that the TRNC 201 obtains the latest COUNT-I.

Step 502: The TRNC 201 updates the local COUNT-I according to the COUNT-I carried in the received change security mode information response message.

Referring to Figure 6, the embodiment of the present invention introduces a method of transmitting the integrity protection parameter COUNT-I from the SRNC 202 side. SRNC 202 side pass integrity protection parameters COUNT-I's main method The flow is as follows:

Step 601: After transmitting the air interface reconfiguration message, the SRNC 202 receives the change security mode information request message sent by the TRNC 201.

Step 601: The SRNC 202 returns a change security mode information response message to the TRNC 201. The response message includes the current integrity protection parameter COUNT-L

The embodiment of the present invention implements a method for transmitting the parameter COUNT-I of the integrity protection algorithm f in the security mode by forwarding a message. Among them, the message can be forwarded through the IUR interface. See Figure 7.

Step 701: After transmitting the relocation detection message to the core network, the TRNC 201 sends a change security mode information request message to the SRNC 202 through the IUR interface. The request message is included in the private message of the IUR interface.

Step 702: The SRNC 202 returns a change security mode information response message through the IUR interface. The response message includes the current integrity protection parameter COUNT-L. The response message is included in the private message body of the IUR interface.

Step 703: The TRNC 201 determines whether the integrity protection parameter COUNT-I carried in the received message is greater than the local COUNT-I. When the result of the determination is yes, proceed to step 704, otherwise proceed to step 705.

Step 704: The TRNC 201 updates the locally saved integrity protection parameter COUNT-L, where the TRNC 201 compares the integrity protection parameter COUNT-I carried in the received message with the integrity protection parameter COUNT- saved in the first storage unit 2013. Comparing I, if the two are inconsistent, save the larger of the two. If the change security mode information response message received by the TRNC 201 does not contain a valid integrity protection parameter COUNT-I message, or the cell type of the received response message is not Changed Security Mode Info Rs, or the received change security If the integrity protection parameter COUNT-I contained in the mode information response message is less than or equal to the integrity protection parameter COUNT-I held in the TRNC 201, it is not necessary to update the integrity protection parameter COUNT-I.

Step 705: The TRNC 201 returns a relocation complete message to the core network to complete the relocation process. Referring to Figure 8, an embodiment of the present invention introduces a method of transmitting an integrity protection parameter COUNT-I from the TRNC 201 side. The detailed method flow for passing the integrity protection parameters on the TRNC 201 side is as follows: The terminal sends a message of completion of radio resource reconfiguration to the TRNC 201 through the Uu interface, and the TRNC 201 sends a relocation detection message to the core network.

Step 801: After transmitting the relocation detection message to the core network, the TRNC 201 sends a change security mode information request message to the SRNC 202 through the IUR interface. The change security mode information request message is included in the private message of the IUR interface.

Step 802: The TRNC 201 starts the timer 2014 and enters a state waiting for a response to wait for the SRNC 202 to return a change security mode information response message.

Step 803: The TRNC 201 receives the change security mode information response message before the timer 2014 times out. Continue with step 804. The response message is received by the TRNC 201 through the IUR interface, and the response message is included in the private message body of the IUR interface. The TRNC 201 parses the private message body to obtain the integrity protection parameter COUNT-I information in the change security mode information response message.

Step 804: The TRNC 201 determines whether the received change security mode information response message includes an integrity protection parameter. COUNT-L When the determination result is yes, proceed to step 805, otherwise proceed to step 807.

Step 805: The TRNC 201 determines whether the integrity protection parameter COUNT-I included in the received response message is greater than the local COUNT-I. When the answer is yes, proceed to step 806, otherwise continue to step 807.

Step 806: The TRNC 201 updates the integrity protection parameter COUNT-I ₀ stored in the local, wherein the comparison unit 2015 compares the integrity protection parameter COUNT-I carried in the response message received by the first transceiver unit 2011 with the first storage unit 2013. The saved integrity protection parameter COUNT-I is compared, if the two are inconsistent, the larger of the two is saved.

If the TRNC 201 does not receive the change security mode information response message after the timer 2014 times out, or the received change security mode information response message does not contain a valid integrity protection parameter COUNT-I message, or the received response The cell type of the message is not Changed Security Mode Info Rsp, or the integrity protection parameter COUNT-I contained in the received change security mode information response message is less than or equal to the integrity protection parameter COUNT-I saved in TRNC 201, and it is not necessary to update the integrity protection parameter COUNT- I. Continue to step 807.

Step 807: The TRNC 201 returns a relocation complete message to the core network to complete the relocation process. Referring to FIG. 9, an embodiment of the present invention introduces a method of transmitting an integrity protection parameter COUNT-I from the SRNC 202 side. The detailed method flow for passing the integrity protection parameters on the SRNC 202 side is as follows:

The SRNC 202 receives the relocation command sent by the core network, and successfully sends the air interface reconfiguration message to the terminal, and enters the state of waiting for the IU release command of the core network.

Step 901: The SRNC 202 receives the change security mode information request message sent by the TRNC 201 through the IUR interface. The request message is included in the private message body of the IUR interface.

Step 902: The SRNC 202 returns a change security mode information response message to the TRNC 201 via the IUR interface. The response message includes the current integrity protection parameter COUNT-I information.

The change security mode information response message is included in the private message body of the IUR interface. The srnc-U-RNTI is set to the instance number of the terminal on the SRNC 202 side, and the cell type of the sent response message is changed to Changed Security Mode Info Rsp, indicating that the sent message carries the integrity protection parameter COUNT-I.

If the SRNC 202 is not waiting in the waiting state of the IU release command of the core network, the change security mode information request message is not processed and the discarding process is performed.

Step 903: The SRNC 202 receives the IU release command sent by the core network.

Step 904: The SRNC 202 releases the resources of the terminal on the SRNC 202 side. The resource may be an RRC connection or the like.

In the embodiment of the present invention, the TRNC 201 sends a change security mode information request message to the SRNC 202 after receiving the radio resource reconfiguration complete message sent by the terminal; the SRNC 202 receives the request message, and returns a change security mode request message response to the TRNC 201. Message, where the response The message contains the current integrity protection parameter COUNT-I; TRNC 201 updates the local COUNT-I according to the COUNT-I carried in the received response message. The integrity protection parameter COUNT-I is correctly transmitted in the relocation process, and the consistency of the integrity protection parameter COUNT-I saved by the TRNC 201 and the terminal when the RNC is switched is not limited, and the number of NAS messages is not limited, nor is it Therefore, the problem of discarding the NAS message occurs, so that the receiver can correctly complete the verification of whether the signaling data is illegally modified during the sending process by using the integrity protection algorithm f9, and avoid the failure of the integrity protection parameter COUNT-I. The correct transmission causes the signaling to be discarded, which in turn affects the establishment and transmission of services. And the TRNC may send the change security mode information request message at any time. For example, the change security mode information request message may be sent after receiving the radio resource reconfiguration complete message sent by the terminal. Preferably, the relocation detection may be sent to the core network. After the message or after sending the relocation complete message to the core network, the change security mode information request message is sent. At this time, the control plane and the user plane data are all configured or will be configured, and the core network may have stopped transmitting the message to the SRNC, and the COUNT- on the SRNC side I is less likely to change again. After the acquisition, the possibility that the COUNT-I changes again due to the continued interaction between the SRNC and the terminal is less, in order to obtain the latest COUNT-I ₀ and change the security mode information request message and change security. The mode information response message can be located in the private message of the IUR interface, which facilitates the extension of the message without affecting the existing communication protocol. All of the above ensure that no call drop occurs during the handover process across the RNC, ensuring that the terminal caller is successful and the service flow is normal. Storage medium. The spirit and scope of the invention. Thus, it is intended that the present invention cover the modifications and the modifications of the invention

Claims

Claim

A method for transmitting an integrity protection parameter, the method comprising: the first RNC, after receiving the radio resource reconfiguration complete message sent by the terminal, the radio network controller sends the change security mode information to the second RNC. a request message, requesting to obtain an integrity protection parameter COUNT-I corresponding to the terminal; wherein, in the relocation process, the first RNC is a target RNC, and the second RNC is a source RNC;

The method of claim 1, wherein the step of the first RNC transmitting a change security mode information request message to the second RNC comprises:

The first RNC sends a change security mode information request message to the second RNC through the IUR interface; the change security mode information request message is included in the private message body of the IUR interface.

The method according to claim 1 or 2, wherein the method further comprises: after the first RNC sends a change security mode information request message to the second RNC, the first RNC starts a timer, and waits for a response. In the state.

The method according to claim 3, wherein the method further comprises: the first RNC continuing to transmit the message according to the local COUNT-I after the timer expires.

The method according to claim 1 or 2, wherein the step of updating the local COUNT-I by the first RNC comprises:

The first RNC compares the COUNT-I carried in the received change security mode information response message with the local COUNT-I, and if the two are inconsistent, saves the COUNT-I and the local carried in the change security mode information response message. The larger value in COUNT-I.

The method according to claim 1 or 2, wherein the step of the first RNC transmitting a change security mode information request message to the second RNC comprises: After receiving the radio resource reconfiguration complete message sent by the terminal, the first RNC sends a relocation detection message and a relocation complete message to the core network, and sends the change security to the second RNC after sending the relocation detection message or the relocation complete message. Mode information request message.

A method for transmitting an integrity protection parameter, the method comprising: after receiving an air interface reconfiguration message, the second RNC receives a change security mode information request message sent by the first RNC;

The second RNC generates a change security mode information response message, and returns the change security mode information response message to the first RNC; the response message includes the current integrity protection parameter COUNT-L

The method of claim 7, wherein the step of the second RNC returning the change security mode information response message to the first RNC comprises:

The second RNC returns a change security mode information response message to the first RNC through the IUR interface; the change security mode information response message is included in the private message body of the IUR interface.

9. A radio network controller RNC, characterized in that the RNC comprises:

The radio network controller according to claim 9, wherein the first transceiver unit comprises an IUR interface; the first transceiver unit is further configured to send a change security mode information request message to the SRNC through the IUR interface.

The radio network controller according to claim 9 or 10, wherein the RNC further comprises: a timer for timing.

The radio network controller according to claim 11, wherein the first transceiver unit is further configured to: continue to transmit a message according to the local COUNT-I after the timer expires.

The radio network controller according to claim 9 or 10, wherein the comparing unit is further configured to: perform COUNT-I carried in the received change security mode information response message with the local COUNT-I For comparison, if the two are inconsistent, the larger value of COUNT-I and local COUNT-I carried in the change security mode information response message is saved.

The radio network controller according to claim 9 or 10, wherein the first transceiver unit is further configured to: send a relocation probe message or a relocation complete message to the core network, and send the message to the other RNC. Change the security mode information request message.

The radio network controller according to claim 9, wherein the first transceiver unit is further configured to: receive a change security mode information request message sent by the second RNC, and return the change security mode information to the other RNC. a response message; the response message includes an integrity protection parameter COUNT-I.

The radio network controller according to claim 15, wherein the first transceiver unit is further configured to: return a change security mode information response message to other RNCs through the IUR interface.

A radio network controller, the radio network controller, comprising: a second transceiver unit, configured to receive a change security mode information request message sent by another RNC, and return a change security mode information response message to another RNC. ;

The radio network controller according to claim 17, wherein the second transceiver unit returns a change security mode information response message to other RNCs through the IUR interface.