Key configuration method, security policy determining method, and apparatus

A session management network device, the session management network device comprising:

• a communications device configured to receive a session request from a mobility management network device;
• a hardware processor in communication with the communications device, the hardware processor configured to:
• determine a target security requirement based on a terminal device security requirement of a terminal device and an operator network security requirement of an operator network, the terminal device security requirement is obtained from a subscriber repository and the operator network security requirement is stored in the session management network device;
• the determining the target security requirement based on the terminal device security requirement and the operator network security requirement comprising:
• determine the target security requirement based on a security requirement of the terminal device when a terminal device security requirement priority of the terminal device is higher than an operator network security requirement priority of the operator network;
• determine a security policy based on the target security requirement, the security policy indicating whether integrity protection is required;
• and
• the communications device configured to send the security policy to a base station.

A method for determining a security policy, comprising:

• sending, by a mobility management network device, a session request to a session management network device;
• receiving, by the session management network device, the session request from the mobility management network device;
• determining, by the session management network device, a target security requirement based on a security requirement of a terminal device and a security requirement of an operator network, the security requirement of the terminal device is obtained from a subscriber repository and the security requirement of the operator network is stored in the session management network device;
• the determining the target security requirement based on a security requirement of a terminal device and a security requirement of an operator network comprising:
• determining the target security requirement based on a security requirement of the terminal device when the priority of the security requirement of the terminal device is higher than the priority of the security requirement of the operator network;
• determining, by the session management network device, a security policy based on the target security requirement, the security policy indicating whether integrity protection is required;
• and
• sending, by the session management network device, the security policy to a base station.

A system for determining a security policy, comprising:

• a mobility management network device;
• and
• a session management network device in communication with the mobility management network device;
• the mobility management network device configured to:
• send a session request to the session management network terminal device;
• the session management network device is configured to:
• receive the session request from the mobility management network device;
• determine a target security requirement based on a terminal device security requirement of a terminal device and an operator network security requirement of an operator network, the security requirement of the terminal device is obtained from a subscriber repository and the security requirement of the operator network is stored in the session management network device;
• the determining the target security requirement based on the terminal device security requirement and the operator network security requirement comprising:
• determine the target security requirement based on the terminal device security requirement when a terminal device security requirement priority of the terminal device is higher than an operator network security requirement priority of the operator network;
• determine a security policy based on the target security requirement, the security policy indicating whether integrity protection is required;
• and
• send the target security policy to a base station.