METHOD, SYSTEM AND APPARATUS FOR NEGOTIATING SECURITY CAPABILITIES DURING MOVEMENT OF UE

摘要

A method for negotiating security capabilities during movement of a User Equipment (UE) includes the following steps: a target network entity receives a Routing Area Update (RAU) Request from the UE; the entity obtains Authentication Vector (AV)-related keys deduced according to a root key, and sends the selected security algorithm to the UE; and the UE deduces the AV-related keys according to the root key of the UE. A system, SGSN, and MME for negotiating security capabilities during movement of a UE are also disclosed. The present invention is applicable to security capability negotiation between the UE and the network.

主权项

1. A system for negotiating security keys, comprising:
a serving GPRS support node (SGSN) in a second or third generation (2G/3G) network, configured to receive a routing area update (RAU) request from a user equipment (UE) when the UE is in an idle mode and moves from a long term evolution (LTE) network to the 2G/3G network, and to send a context request to a mobility management entity (MME) in the LTE network to request a mobility management context according to the RAU request; and the MME configured to receive the context request, deduce authentication vector (AV)-related keys according to a root key of the MME, and send the mobility management context to the SGSN, wherein the mobility management context comprises the authentication vector (AV)-related keys, and the AV-related keys comprise an Integrity Protection Key (IK) and a Ciphering Key (CK).