| 摘要 |
The present invention provides a communication security processing method and an apparatus. The communication security processing method includes: determining, by a base station, that user equipment UE needs to access an access point AP; acquiring, by the base station, a security parameter that is required for the UE to interact with the AP; after an air interface is securely activated, sending, by the base station, the security parameter to the UE, so that the UE performs, by using the security parameter, security processing on data exchanged between the UE and the AP. According to the communication security processing method and the apparatus that are provided in the present invention, a security air interface between UE and a base station is used to transfer a security-related parameter, which improves data communication security, and enhances network control performed by an operator. |
| 主权项 |
1. A communication security processing method, comprising:
determining, by a base station, that user equipment UE needs to access an access point AP; acquiring, by the base station, a security parameter that is required for the UE to interact with the AP; and after an air interface is securely activated, sending, by the base station, the security parameter to the UE, so that the UE performs, by using the security parameter, security processing on data exchanged between the UE and the AP wherein the acquiring, by the base station, a security parameter that is required for the UE to interact with the AP comprises: sending, by the base station, an access request to the AP; and receiving, by the base station, an access response that comprises the security parameter generated by the AP and is sent from the AP; or wherein the acquiring, by the base station, a security parameter that is required for the UE to interact with the AP comprises: sending, by the base station, an access information request that comprises an AP identifier to a mobility management entity MME; and receiving, by the base station, a response comprising the security parameter corresponding to the AP identifier and is sent from the MME. |
