| 摘要 |
The present invention relates to an end-to-end encryption and an encryption key management in mobile communications systems. An end-to-end encryption algorithm and an end-to-end encryption key or cipher key are provided in a removable end-to-end encryption module, such as a smart card, that can be removably inserted or placed inside a user terminal. In response to turning on the user terminal and/or logging into the infrastructure of the mobile communication system, the encryption module causes the user terminal to send to an encryption key management system (KCM) a notification message informing the unique key identifier (key ID) of the encryption module and the user or terminal identifier (ITSI) of the user terminal which the encryption module is attached to. The user terminal employs the user or terminal identifier as a source address in the notification message sent. In response to receiving the notification message the encryption key management system creates or updates association data which associates the unique key identifier of the encryption module and any related encryption data with the user or terminal identifier of the user terminal which the encryption module is currently attached to. <IMAGE> |
