Method, system and apparatus for negotiating security capabilities during movement of UE

摘要

A method for negotiating security capabilities during movement of a User Equipment (UE) includes the following steps: a target network entity receives a Routing Area Update (RAU) Request from the UE; the entity obtains Authentication Vector (AV)-related keys deduced according to a root key, and sends the selected security algorithm to the UE; and the UE deduces the AV-related keys according to the root key of the UE. A system, SGSN, and MME for negotiating security capabilities during movement of a UE are also disclosed. The present invention is applicable to security capability negotiation between the UE and the network.

主权项

1. A system for transferring security keys, comprising:
a serving GPRS support node (SGSN) in a second or third generation (2G/3G) network that is configured to receive a routing area update (RAU) request from a user equipment (UE) in an idle mode that moves from a long term evolution (LTE) network to the 2G/3G network; and a mobility management entity (MME) in the LTE network that is configured to receive a context request from the serving GPRS support node, deduce authentication vector (AV)-related keys according to a root key of the MME, and send a mobility management context to the SGSN, wherein the mobility management context comprises the authentication vector (AV)-related keys, and the AV-related keys comprise an Integrity Protection Key (IK) and a Ciphering Key (CK).