Key configuration method, security policy determining method, and apparatus

A system for determining a security policy, comprising:

• a mobility management network device;
• and
• a session management network device in communication with the mobility management network device;
• the mobility management network device configured to:
• send a session request to the session management network device, wherein the session request comprises a user equipment identity (UE ID) and a session identity (ID);
• the session management network device is configured to:
• receive the session request from the mobility management network device;
• determine a security policy based on a user security requirement of a user equipment having the UE ID in response to determining that a priority of the user security requirement is higher that a priority of a security requirement of an operator network, wherein the user security requirement is obtained from a subscriber repository and the security requirement of the operator network is stored in the session management network device;
• and
• send the security policy to a base station.

A method for determining a security policy, comprising:

• receiving, by a session management network element, a session request from a mobile management network device, wherein the session request comprises a user equipment identity (UE ID) and a session identity (ID);
• determining, by the session management network device, a security policy based on a user security requirement of a user equipment having the UE ID in response to determining that a priority of the user security requirement is higher that a priority of a security requirement of an operator network, wherein the user security requirement is obtained from a subscriber repository and the security requirement of the operator network is stored in the session management network device;
• and
• sending, by the session management network device, the security policy to a base station.

A session management network device, the session management network device comprising:

• at least one processor;
• and
• one or more memories coupled to the at least one processor and storing programming instructions for execution by the at least one processor to:
• receive a session request from a mobility management network device, wherein the session request comprises a user equipment identity (UE ID) and a session identity (ID);
• determine a security policy based on a user security requirement of a user equipment having the UE ID in response to determining that a priority of the user security requirement is higher that a priority of a security requirement of an operator network, wherein the user security requirement is obtained from a subscriber repository and the security requirement of the operator network is stored in the session management network device;
• and
• send the security policy to a base station.

A non-transitory computer readable storage medium, the non-transitory computer readable storage medium storing instructions for execution by at least one processor to:

• receive a session request from a mobile management network device, wherein the session request comprises a user equipment identity (UE ID) and a session identity (ID);
• determine a security policy based on a user security requirement of a user equipment having the UE ID in response to determining that a priority of the user security requirement is higher that a priority of a security requirement of an operator network, wherein the user security requirement is obtained from a subscriber repository and the security requirement of the operator network is stored in the session management network device;
• and
• send the security policy to a base station.