| 摘要 |
<p>The present invention relates to a method, a system and a network node for pro-viding security in a radio access network, wherein an information conveyed in a signalling message of an application protocol of said radio access network is used to derive or create a security association to be used between communicating net-work nodes of said radio access network. The conveyed information may be an IP address or a UDP datagram used for deriving the security association from a re-spective database. Alternatively, the conveyed information may be a security pa-rameter index or a security association information conveyed in a new information element of the signalling message. This information is then used for creating a new Security Association between the communicating network nodes. Thereby, a separate connection or protocol is not required for the security procedures. More-over, the whole network control system does not have to be involved in the trans-fer, because the endpoints of encryption are in corresponding network elements of the radio access network.</p> |
