WO2016078352A1

WO2016078352A1 - Method for updating ssd, media switch center, communication system and related storage medium

Info

Publication number: WO2016078352A1
Application number: PCT/CN2015/078375
Authority: WO
Inventors: 张志华; 周燕; 金华
Original assignee: 中兴通讯股份有限公司
Priority date: 2014-11-18
Filing date: 2015-05-06
Publication date: 2016-05-26
Also published as: CN105682153A

Abstract

Disclosed in an embodiment of the present invention are a method for updating SSD upon fall-back from a long term evolution (LTE) network to a circuit switch (CS) domain, a media switch center (MSC), a communication system and related computer storage medium, the method comprising: when detecting that a user equipment (UE) initiates a voice call service for a CS domain in an LTE network, an interworking solution (IWS) initiates a switching process for an MSC to switch the UE to a target base station of the CS domain; then the MSC initiates an update process for the target base station for updating shared secret data (SSD) of the UE, thus completing the updating of the SSD of the UE.

Description

SSD update method, mobile switching center, communication system and related storage medium

Technical field

The present invention relates to the field of communications, and in particular, to a method for updating a shared secret data (SSD) when a long-term evolution (LTE) network is dropped back to a circuit switched (CS) circuit domain, and a mobile switching center. , communication systems and related computer storage media.

Background technique

LTE is a long-term evolution of the Universal Mobile Telecommunications System (UMTS) technology standard developed by the 3GPP (The 3rd Generation Partnership Project). The LTE network falls back to the network architecture diagram of Code Division Multiple Access (CDMA2000), as shown in Figure 1, which includes the following network elements:

E-RAN (Evolved RAN): It can provide higher uplink and downlink rates, lower transmission delay and more reliable wireless transmission. The network element included in the E-RAN is an evolved base station (eNodeB, Evolved NodeB), which provides radio resources for access of the user equipment UE;

Mobility Management Entity (MME): A control plane function entity that temporarily stores user data. It is responsible for managing and storing UE contexts (such as UE user ID, mobility management status, user security parameters, etc.) and assigning them to users. Temporary identification, when the UE is camped in the tracking area or the network is responsible for authenticating the user; processing all non-access stratum messages between the MME and the UE; triggering paging in the system architecture evolution SAE.

Serving GW (Serving Gateway): The gateway is a user plane entity responsible for user plane data routing processing and terminating downlink data of the UE in idle state. Manage and store the SAE bearer context of the UE, such as the Internet Protocol IP bearer service parameters and network Internal routing information, etc. It is the anchor point of the internal user plane of the 3GPP system. A user can only have one Serving GW at a time;

Interworking Solution (IWS): When the UE under LTE coverage cannot handle voice services, it can first fall back to the circuit domain network and process voice services in the circuit domain network. IWS is responsible for implementing MME and circuit domain mobility under LTE. Interaction of the exchange center (MSC, Media Switch Center).

CDMA2000 1X access network: mainly includes mobile terminal MS and base transceiver station BTS. The base transceiver station is responsible for wireless signal transmission and reception, and realizes communication between the wireless network system and the mobile station.

Base Station Controller (BSC): responsible for BTS control and management, resource allocation, wireless connection establishment, mobility management, power control, etc.

MSC: responsible for call setup, routing, call control, radio resource allocation, mobility management, location level, channel switching in the switching area, etc.

The CDMA2000 1X authenticates the accessed UE through the update of the SSD. In the CDMA2000 network, the traditional user will perform authentication after the voice call is initiated. If the authentication fails, the MSC will trigger the SSD update to the user and try to authenticate again.

In the LTE network, the UE decides to initiate a voice call. In the early stage of LTE network construction, the corresponding IP Multimedia Subsystem (IMS, IP Multimedia Subsystem) has not been established yet, or other resources are considered to cause the voice to be unavailable through the LTE network. business. At this time, in the Evolved Packet System (EPS), the CSFB (Circuit Switched Fallback) function can be utilized, and the UE completes the voice service by dropping back to the circuit domain through the IWS network element. After the UE completes the call connection with the MSC domain under the LTE network, the IWS network element triggers a handover request to the MSC. However, after the UE completes the fallback to the CDMA2000 network, the SSD update during the voice call cannot be completed, and the authentication fails. The reason is that after the UE completes the call connection in the LTE network, the IWS immediately triggers the handover request to the MSC, and the MSC performs the handover. If the SSD update process of the UE is also initiated at the same time, the process conflict may be caused, and the SSD update of the UE cannot be completed.

Summary of the invention

In order to solve the existing technical problems, an embodiment of the present invention provides an SSD update method, a mobile switching center, a communication system, and a related computer storage medium when the LTE network is dropped back to the CS domain, so as to at least solve the problem due to the existing UE. When the LTE network falls back to the CS domain, the SSD update process and the handover process are simultaneously performed, resulting in a conflict problem.

An embodiment of the present invention provides a method for updating shared encrypted data, where the method includes:

When the interoperation node detects that the user equipment initiates the voice call service of the circuit switched domain in the long term evolution network, initiates a handover procedure to the mobile switching center to switch the user equipment to the target base station of the circuit switched domain;

After the user equipment is handed over to the target base station, the mobile switching center initiates update of the shared encrypted data of the user equipment to the target base station.

In an embodiment of the present invention, the interoperation node determines whether the user equipment initiates a voice call service of a circuit switched domain in a long term evolution network by determining whether a voice start message sent by the user equipment is received.

In an embodiment of the present invention, the interoperation node detects that the user equipment initiates a handover procedure to the mobile switching center after the long-term evolution network initiates the voice call service of the circuit switched domain, and the method further includes: :

Transmitting, by the interoperation node, a CM service request message to the mobile switching center according to the voice start message;

After receiving the CM service request message, the mobile switching center authenticates the user equipment and records the result of the authentication failure.

In an embodiment of the present invention, after the user equipment switches to the target base station, the target base station sends a handover completion notification to the mobile switching center; the mobile switching center initiates a pair to the target base station. The update process of updating the shared encrypted data of the user equipment includes:

After receiving the handover completion notification sent by the target base station, the mobile switching center sends a shared encrypted data update request including the new authentication data to the user equipment by using the target base station according to the record of the authentication failure result, and Calculating the first verification data by using a preset algorithm on the new authentication data;

The user equipment calculates, according to the new authentication data in the shared encrypted data update request, the second verification data by using the preset algorithm, and feeds back to the mobile switching center by using the target base station;

The mobile switching center performs the comparison verification on the first verification data and the second verification data, and the verification result is fed back to the user equipment by the target base station;

When the verification result is that the first verification data and the second verification data are the same, the user equipment locally updates the shared encrypted data, and feeds the update result to the mobile switching center through the target base station.

The embodiment of the invention further provides another method for updating the shared encrypted data, including:

The mobile switching center receives a handover procedure initiated by the interoperation node when detecting that the user equipment initiates a voice call service in the circuit switched domain of the long term evolution network, and switches the user equipment to the target base station of the circuit switched domain;

The mobile switching center initiates update of the shared encrypted data of the user equipment to the target base station.

In an embodiment of the present invention, after the user equipment switches to the target base station, the target base station sends a handover completion notification to the mobile switching center; the mobile switching center initiates a handover to the target base station. The update process for updating the shared encrypted data of the user equipment includes:

After receiving the handover completion notification sent by the target base station, the mobile switching center directly sends a shared encrypted data update request including new authentication data to the user equipment by using the target base station, and adopts the new authentication data for the new authentication data. The preset algorithm performs calculation to obtain first verification data;

The embodiment of the invention further provides a method for updating shared encrypted data, the method comprising:

After the user equipment is switched to the target base station, the shared encrypted data of the user equipment is initiated to be updated to the target base station.

The embodiment of the invention further provides a communication system, including an interoperation node, a mobile switching center, and a base station;

The interoperation node is configured to detect that the user equipment initiates a handover procedure to the mobile switching center when the long term evolution network initiates a voice call service of the circuit switched domain, and the user equipment is switched to the base station of the circuit switched domain. ;

The mobile switching center is configured to initiate, after the user equipment is switched to the base station, update the shared encrypted data of the user equipment to the base station.

In an embodiment of the present invention, the interoperation node is configured to determine whether the user equipment initiates a voice call service in a circuit switched domain in a long term evolution network by determining whether a voice start message sent by the user equipment is received. .

In an embodiment of the present invention, the interoperation node is further configured to detect a user setting. After the long-term evolution network initiates the voice call service of the circuit switching domain, before the handover process is initiated to the mobile switching center, the CM service request message is sent to the mobile switching center according to the voice start message;

The mobile switching center is further configured to: after receiving the CM service request message, perform authentication on the user equipment, and record an authentication failure result.

In an embodiment of the present invention, the base station is further configured to send a handover completion notification to the mobile switching center after the handover is completed;

Correspondingly, the mobile switching center is further configured to, after receiving the handover completion notification sent by the base station, send, by using the base station, the sharing including the new authentication data to the user equipment according to the record of the authentication failure result. Encrypting the data update request, and calculating the new authentication data by using a preset algorithm to obtain the first verification data;

The user equipment is further configured to calculate, according to the new authentication data in the shared encrypted data update request, the second verification data by using the preset algorithm, and feed back to the mobile switching center by using the base station;

The mobile switching center is further configured to perform the comparison verification on the first verification data and the second verification data, and the verification result is fed back to the user equipment by the base station;

The user equipment is further configured to: when the verification result is that the first verification data and the second verification data are the same, locally update the shared encrypted data, and feed the update result to the mobile switching center by using the base station .

In an embodiment of the present invention, the base station is further configured to send a handover completion notification to the mobile switching center after the handover is completed; correspondingly,

The mobile switching center is further configured to: after receiving the handover completion notification sent by the base station, send, by the base station, a shared encrypted data update request that includes new authentication data, and the new authentication data is sent by the base station Calculating the first verification data by using a preset algorithm;

The user equipment is further configured to update the new authentication in the request according to the shared encrypted data The data is calculated by using the preset algorithm to obtain second verification data, and is fed back to the mobile switching center by using the base station;

The user equipment is further configured to: when the verification result is that the first verification data and the second verification data are the same, locally update the first verification data, and feed back the update result to the Mobile switching center.

The embodiment of the present invention further provides a mobile switching center, where the mobile switching center includes a switching module and an update module:

The switching module is configured to receive a handover procedure initiated by the interoperation node when detecting that the user equipment initiates a voice call service in the circuit switched domain of the long term evolution network, and switch the user equipment to the target base station in the circuit switched domain;

And an update module, configured to initiate, to the target base station, update the shared encrypted data of the user equipment.

An embodiment of the present invention further provides a computer storage medium, where the computer storage medium stores a first set of computer executable instructions, and the first set of computer executable instructions are used to perform the foregoing application to an interoperation node and an MSC. The SSD update method.

The embodiment of the invention further provides a computer storage medium, wherein the computer storage medium stores a second set of computer executable instructions, and the second set of computer executable instructions are used to execute the foregoing SSD update method applied to the MSC .

The beneficial effects of the embodiments of the present invention are:

The SSD update method, the mobile switching center, the communication system, and the computer storage medium when the LTE network falls back to the CS domain provided by the embodiment of the present invention, and the interoperation node detects that the user equipment initiates the voice call service of the circuit switched domain in the long term evolution network. Initiating a handover procedure to the mobile switching center to switch the user equipment to the target base station of the circuit switched domain; then moving the switching center The update process of initiating update of the shared encrypted data of the user equipment to the target base station completes the update of the shared encrypted data of the user equipment. The solution provided by the embodiment of the present invention can complete the handover process after the user equipment falls back to the CS domain (ie, the CDMA2000 network), and then complete the SSD update process of the user equipment to prevent the UE from falling back from the LTE network to the CS domain. At the same time, the SSD update process and the handover process lead to conflicts.

DRAWINGS

FIG. 1 is a schematic structural diagram of an LTE network falling back to a CDMA2000 network;

2 is a schematic flowchart of an SSD update method when an LTE network is dropped back to a CS domain according to Embodiment 1 of the present invention;

3 is a schematic flowchart of an SSD update method when an LTE network is dropped back to a CDMA2000 network according to Embodiment 1 of the present invention;

FIG. 4 is a schematic structural diagram of a mobile switching center according to Embodiment 1 of the present invention.

detailed description

The present invention will be further described in detail below with reference to the accompanying drawings.

Embodiment 1:

Referring to FIG. 2, the method for updating an SSD of a UE when the LTE network is dropped from the LTE network to the CS domain, includes:

Step 201: The IWS detects that the UE initiates a handover procedure to the MSC when the LTE network initiates the voice call service of the CS domain to switch the UE to the target base station of the CS domain.

Step 202: After switching the user equipment to the target base station in the circuit switched domain, the MSC initiates an update to the target base station to the SSD of the UE.

Here, the MSC initiates an update procedure for updating the SSD of the UE to the target base station to complete the SSD update of the UE.

Specifically, as shown in FIG. 4, the mobile switching center in this embodiment includes a switching module. And update modules; among them,

And an update module configured to initiate update of the shared encrypted data of the user equipment to the target base station.

In the foregoing step 201, the IWS may determine whether the UE initiates a voice call service in the CS domain on the LTE network by determining whether the voice start message sent by the UE is received (specifically, may be sent by the GXNA encapsulated 1X initialization message); if the IWS receives the UE The voice start message is sent, indicating that the UE currently initiates a voice call service on the LTE network, and needs to fall back to the CS domain (ie, the CDMA2000 network); if not, it indicates that the UE does not currently initiate a voice call service.

According to the existing protocol, the IWS detects that after the UE initiates the handover process to the MSC after the LTE network initiates the voice call service of the CS domain, the IWS further includes:

The IWS sends a corresponding CM (Connect Management) service request message to the MSC according to the received voice start message;

After receiving the CM service request message, the MSC authenticates the UE and records the result of the authentication failure.

It should be understood that the above steps may not perform this step when the protocol is changed, but directly perform the switching process.

After the UE is handed over to the target base station, the target base station sends a handover completion notification to the MSC. The update process of the MSC to update the SSD of the UE to the target base station in the foregoing step 202 includes:

After receiving the handover completion notification sent by the target base station, the MSC learns that the SSD of the UE needs to be updated according to the record of the previously saved authentication failure result, and the target base station sends an SSD update request including the new authentication data to the UE, and The new authentication data is calculated using a preset algorithm Calculate the first verification data. It should be understood that, after the handover completion notification sent by the target eNB receives the handover completion notification, the MSC may directly send the SSD update request including the new authentication data to the UE through the target base station, and does not care whether it has been previously The authentication and previous authentication results were successful or failed.

The UE calculates the second verification data by using the same preset algorithm as the MSC according to the new authentication data in the received SSD update request, and feeds back to the MSC through the target base station;

The MSC compares the first verification data and the second verification data to obtain a verification result, and feeds the verification result to the UE through the target base station.

When the verification result is that the first verification data and the second verification data are the same, the UE locally updates the first verification data, and feeds the update result to the MSC through the IWS. The update result at this time is that the update is successful; the user UE is in the verification result. When the first verification data and the second verification data are different, it indicates that the update failed.

For a better understanding of the present invention, the following is a further exemplary description of the process of the UE falling back from the LTE network to the CDMA2000 network, as shown in FIG. 3, including:

Step 301: The UE decides to initiate a CS voice call on the LTE network.

Step 302: The UE sends a GCSNA encapsulated 1X initialization message (including a voice start message) to the IWS;

Step 303: After receiving the 1X initialization message, the IWS creates a corresponding CM service request message and sends it to the MSC.

Step 304: The MSC sends an "Assignment Request" message to the IWS;

Step 305: The IWS sends an “Assignment Complete Message” to the MSC. At this time, it is determined that the UE accesses from the IWS, and does not trigger the SSD update process. It should be understood that the step and the foregoing step 304 are based on the steps of the existing protocol. When the protocol is changed, these two steps may not be performed;

Step 306: The IWS sends a handover request message to the MSC.

Step 307: The MSC sends a handover request message to the corresponding target base station.

Step 308: The target base station uses the radio resource specified in the allocation message, and the base station sends a handover request response message to the MSC.

Step 309: The MSC sends a handover command message to the IWS.

Step 310: The IWS sends a GCSNA encapsulated "Universal Handover Designation Message" to the UE to notify the UE to switch to the CDMA2000 system;

Step 311: The EUTRAN system releases the S1 user context, and the 4G bearer is suspended.

Step 312: The IWS sends a handover start message to the UE.

Step 313: The UE switches to the CDMA200 radio channel, and acquires the service channel of the UE in the CDMA2000 base station;

Step 314: The UE sends a handover complete message to the target base station in the CDMA2000.

Step 315: The target base station in the CDMA2000 sends a handover complete message to the MSC;

Step 316: The MSC sends a clear command message to the IWS.

Step 317: The IWS sends a clear complete command message to the MSC to notify the MSC that the clearing has been completed;

Step 318: After the handover is completed, the MSC determines that the previous authentication fails, does not update the SSD of the UE, and starts the SSD update process.

Step 319: The MSC sends a shared encrypted data update request to the target base station, where the shared encrypted data update request includes new authentication data, and the MSC uses the preset algorithm to calculate the new authentication data to obtain the first verification data.

Step 320: The target base station forwards the shared encrypted data update request to the UE, and the UE calculates the new authentication data included in the shared encrypted data update request by using a preset algorithm to obtain the second verification data and feeds back to the target base station, and the target base station passes the “ The base station challenge order message forwards the second verification data to the MSC;

Step 321: After receiving the second verification data, the MSC determines whether the first verification data and the second verification data are the same, and obtains the verification result, and signs the verification result by the authentication response. The message response should be sent to the target base station;

Step 322: The target base station forwards the verification result to the UE. When the verification result is the same as the first verification data and the second verification data, the UE forwards the “update response” message to the MSC through the target base station after performing the local SSD update. Complete the SSD update of the UE.

It can be seen that after the user equipment falls back to the CS domain (ie, the CDMA2000 network), the SSD update of the user equipment can be completed after the handover process is completed. The problem of conflicts caused by the SSD update process and the handover process when the UE falls back from the LTE network to the CS domain is avoided.

The embodiment of the present invention further provides a computer storage medium, where the computer storage medium stores a first set of computer executable instructions, and the first set of computer executable instructions are used to perform the foregoing returning from the LTE network to the CS domain. The SSD update method applied to the interoperation node and the MSC.

The embodiment of the present invention further provides a computer storage medium, where the computer storage medium stores a second set of computer executable instructions, and the second set of computer executable instructions are used to perform the foregoing returning from the LTE network to the CS domain. Applied to the SSD update method in the MSC.

The embodiment of the present invention further provides a mobile switching center. For the structural composition of the mobile switching center and its components, refer to the related description of FIG. 4. In practical applications, the switching module and the update module may be configured by a central processing unit (CPU), or a digital signal processor (DSP), or a microprocessor (MPU, Micro Processor Unit), or Field Programmable Gate Array (FPGA) is implemented.

An embodiment of the present invention further provides a communication system, where the system includes an interoperation node, a mobile switching center, and a base station (target base station);

The interoperation node is configured to detect, when the user equipment initiates a voice call service of the circuit switched domain in the long term evolution network, initiate a handover procedure to the mobile switching center to switch the user equipment to the base station of the circuit switched domain Upper

In the above solution, the interoperation node is configured to determine whether the user equipment initiates a voice call service in the circuit switched domain in the long term evolution network by determining whether the voice start message sent by the user equipment is received.

In the foregoing solution, the interoperation node is further configured to: after detecting, after the long-term evolution network initiates a voice call service of the circuit switched domain, before initiating a handover process to the mobile switching center, according to the voice start message The mobile switching center sends a CM service request message;

In the above solution, the base station is further configured to send a handover completion notification to the mobile switching center after the handover is completed; correspondingly,

The mobile switching center is further configured to: after receiving the handover completion notification sent by the base station, send, by using the base station, the shared encrypted data update including the new authentication data by using the base station according to the record of the authentication failure result. Requesting, and calculating, by using a preset algorithm, the first authentication data to obtain first verification data;

The user equipment is further configured to: when the verification result is that the first verification data and the second verification data are the same, update the shared encrypted data locally, and feed the update result to the mobile switching center through the base station.

The user equipment is further configured to: when the verification result is that the first verification data and the second verification data are the same, locally update the first verification data, and feed back the update result to the mobile station by using the target base station Exchange center.

It should be understood by those skilled in the art that the implementation functions of the network elements in the communication system provided by the embodiments of the present invention can be understood by referring to the foregoing description of the SSD update method when the LTE network is dropped back to the CS domain. Those skilled in the art should understand that the functions of the processing units in the mobile switching center shown in FIG. 4 can be implemented by a program running on a processor, or can be implemented by a specific logic circuit.

The above is a further detailed description of the present invention in connection with the specific embodiments, and the specific embodiments of the present invention are not limited to the description. It will be apparent to those skilled in the art that the present invention may be made without departing from the spirit and scope of the invention.

Those skilled in the art will appreciate that embodiments of the present invention can be provided as a method, system, or computer program product. Accordingly, the present invention can take the form of a hardware embodiment, a software embodiment, or a combination of software and hardware. Moreover, the invention may be employed in one or more of its A computer program product embodied on a computer usable storage medium (including but not limited to disk storage and optical storage, etc.) containing computer usable program code.

The present invention has been described with reference to flowchart illustrations and/or block diagrams of methods, apparatus (system), and computer program products according to embodiments of the invention. It will be understood that each flow and/or block of the flowchart illustrations and/or FIG. These computer program instructions can be provided to a processor of a general purpose computer, special purpose computer, embedded processor, or other programmable data processing device to produce a machine for the execution of instructions for execution by a processor of a computer or other programmable data processing device. Means for implementing the functions specified in one or more of the flow or in a block or blocks of the flow chart.

The computer program instructions can also be stored in a computer readable memory that can direct a computer or other programmable data processing device to operate in a particular manner, such that the instructions stored in the computer readable memory produce an article of manufacture comprising the instruction device. The apparatus implements the functions specified in one or more blocks of a flow or a flow and/or block diagram of the flowchart.

These computer program instructions can also be loaded onto a computer or other programmable data processing device such that a series of operational steps are performed on a computer or other programmable device to produce computer-implemented processing for execution on a computer or other programmable device. The instructions provide steps for implementing the functions specified in one or more of the flow or in a block or blocks of a flow diagram.

The above is only the preferred embodiment of the present invention and is not intended to limit the scope of the present invention.

Industrial applicability

The SSD update method, the mobile switching center, the communication system, and the computer storage medium when the LTE network falls back to the CS domain provided by the embodiment of the present invention, and the interoperation node detects that the user equipment initiates the voice call service of the circuit switched domain in the long term evolution network. , initiate a cut to the mobile switching center The switching process switches the user equipment to the target base station of the circuit switched domain; then the mobile switching center initiates an update process for updating the shared encrypted data of the user equipment to the target base station to complete the update of the shared encrypted data of the user equipment. That is, after the user equipment falls back to the CS domain, the handover process can be completed first, and then the SSD update process of the user equipment is completed, so as to avoid the conflict between the SSD update process and the handover process when the UE falls back from the LTE network to the CS domain. .

Claims

A method for updating encrypted data, the method comprising:

When the interoperation node detects that the user equipment initiates the voice call service of the circuit switched domain in the long term evolution network, initiates a handover procedure to the mobile switching center to switch the user equipment to the target base station of the circuit switched domain;

After the user equipment is handed over to the target base station, the mobile switching center initiates update of the shared encrypted data of the user equipment to the target base station.
The method of claim 1 wherein the method further comprises:

The interoperation node determines whether the user equipment initiates a voice call service of the circuit switched domain in the long term evolution network by determining whether the voice start message sent by the user equipment is received.
The method according to claim 2, wherein the interoperation node detects that the user equipment initiates a handover procedure to the mobile switching center after the long term evolution network initiates a voice call service of the circuit switched domain, the method further include:

Transmitting, by the interoperation node, a CM service request message to the mobile switching center according to the voice start message;

After receiving the CM service request message, the mobile switching center authenticates the user equipment and records the result of the authentication failure.
The method according to claim 3, wherein after the user equipment switches to the target base station, the target base station sends a handover completion notification to the mobile switching center; the mobile switching center initiates to the target base station The update process for updating the shared encrypted data of the user equipment includes:

After receiving the handover completion notification sent by the target base station, the mobile switching center sends a shared encrypted data update request including the new authentication data to the user equipment by using the target base station according to the record of the authentication failure result, and Calculating the first verification data by using a preset algorithm on the new authentication data;

The user equipment calculates, according to the new authentication data in the shared encrypted data update request, the second verification data by using the preset algorithm, and feeds back to the mobile switching center by using the target base station;

The mobile switching center performs the comparison verification on the first verification data and the second verification data, and the verification result is fed back to the user equipment by the target base station;

When the verification result is that the first verification data and the second verification data are the same, the user equipment locally updates the shared encrypted data, and feeds the update result to the mobile switching center through the target base station.
The method according to claim 1 or 2, wherein, after the user equipment switches to the target base station, the target base station sends a handover completion notification to the mobile switching center; the mobile switching center to the target base station An update process for initiating update of the shared encrypted data of the user equipment includes:

After receiving the handover completion notification sent by the target base station, the mobile switching center sends a shared encrypted data update request including new authentication data to the user equipment by using the target base station, and adopts a pre-preparation for the new authentication data. Setting an algorithm to calculate the first verification data;

The user equipment calculates, according to the new authentication data in the shared encrypted data update request, the second verification data by using the preset algorithm, and feeds back to the mobile switching center by using the target base station;

The mobile switching center performs the comparison verification on the first verification data and the second verification data, and the verification result is fed back to the user equipment by the target base station;

When the verification result is that the first verification data and the second verification data are the same, the user equipment locally updates the shared encrypted data, and feeds the update result to the mobile switching center through the target base station.
A method for updating encrypted data, the method comprising:

The mobile switching center receives the interoperation node and detects that the user equipment is initiated on the long term evolution network. Switching process initiated by the voice call service of the circuit switched domain, the user equipment is switched to the target base station of the circuit switched domain;

After the user equipment is switched to the target base station, the shared encrypted data of the user equipment is initiated to be updated to the target base station.
A communication system including an interoperation node, a mobile switching center, and a base station;

The interoperation node is configured to detect, when the user equipment initiates a voice call service of the circuit switched domain in the long term evolution network, initiate a handover procedure to the mobile switching center to switch the user equipment to the base station of the circuit switched domain on;

The mobile switching center is configured to initiate, after the user equipment is switched to the base station, update the shared encrypted data of the user equipment to the base station.
The communication system according to claim 7, wherein the interoperation node is configured to determine whether the user equipment initiates a voice of a circuit switched domain in a long term evolution network by determining whether a voice start message sent by the user equipment is received. Call business.
The communication system according to claim 8, wherein the interoperation node is further configured to detect that the user equipment initiates a handover procedure to the mobile switching center after the long term evolution network initiates a voice call service of the circuit switched domain Transmitting, according to the voice start message, a CM service request message to the mobile switching center;

The mobile switching center is further configured to: after receiving the CM service request message, perform authentication on the user equipment, and record an authentication failure result.
The communication system according to claim 9, wherein the base station is further configured to send a handover completion notification to the mobile switching center after the handover is completed; correspondingly,

The mobile switching center is further configured to: after receiving the handover completion notification sent by the base station, send, by using the base station, the shared encrypted data update including the new authentication data by using the base station according to the record of the authentication failure result. Requesting and using a preset algorithm for the new authentication data Calculating the first verification data;

The user equipment is further configured to calculate, according to the new authentication data in the shared encrypted data update request, the second verification data by using the preset algorithm, and feed back to the mobile switching center by using the base station;

The mobile switching center is further configured to perform the comparison verification on the first verification data and the second verification data, and the verification result is fed back to the user equipment by the base station;

The user equipment is further configured to: when the verification result is that the first verification data and the second verification data are the same, update the shared encrypted data locally, and feed the update result to the mobile switching center through the base station.
The communication system according to claim 7 or 8, wherein the base station is further configured to send a handover completion notification to the mobile switching center after the handover is completed; correspondingly,

The mobile switching center is further configured to: after receiving the handover completion notification sent by the base station, send, by the base station, a shared encrypted data update request that includes new authentication data, and the new authentication data is sent by the base station Calculating the first verification data by using a preset algorithm;

The user equipment is further configured to calculate, according to the new authentication data in the shared encrypted data update request, the second verification data by using the preset algorithm, and feed back to the mobile switching center by using the base station;

The mobile switching center is further configured to perform the comparison verification on the first verification data and the second verification data, and the verification result is fed back to the user equipment by the base station;

The user equipment is further configured to: when the verification result is that the first verification data and the second verification data are the same, locally update the first verification data, and feed back an update result to the mobile switching by using the base station center.
A mobile switching center, where the mobile switching center includes a switching module and an update module;

The switching module is configured to receive an interoperation node and detect that the user equipment is in long term evolution a handover procedure initiated when the network initiates a voice call service of the circuit switched domain, and the user equipment is switched to a target base station of the circuit switched domain;

The update module is configured to initiate update of the shared encrypted data of the user equipment to the target base station.
A computer storage medium having stored therein a first set of computer executable instructions, the first set of computer executable instructions for performing the method of any one of claims 1 to 5.
A computer storage medium having stored therein a second set of computer executable instructions, the second set of computer executable instructions for performing the method of claim 6.