| 摘要 |
FIELD: physics, computer engineering.SUBSTANCE: invention relates to computer engineering and specifically to a system, a method and nodes for managing shared keys. The technical result is more secure information transmission. In the method: between User Equipment (UE), an authentication node such as an SCF/NAF, and a service node such as a BM-SC or AS. The SCF/NAF allocates to each BM-SC, a different SCF/NAF identifier such as a fully qualified domain name (FQDN) from the FQDN space the SCF/NAF administers. The SCF/NAF then locally associates said allocated FQDN with the connected BM-SCs and with different services and, through the network, sends the correct FQDN to the UE in a service description for a desired service, and the UE is able to derive a security key using the FQDN. When the UE requests the desired service, the SCF/NAF is able to associate the service identifier with the correct FQDN and an associated BM-SC. The SCF/NAF uses the FQDN to obtain the security key from a bootstrapping server and sends it to the associated BM-SC.EFFECT: UE and the associated BM-SC share a specific security key.10 cl, 11 dwg |
