Key distribution method, key receiving method, first key management system, and first network element

A method, comprising:

• generating, by a home subscriber server, a shared key of a first network element based on an integrity key (IK), and a cipher key (CK), and the CK and IK are obtained by performing Authentication and Key Agreement (AKA) authentication with the first network element;
• sending, by the home subscriber server, the shared key to a first key management system;
• obtaining, by the first key management system based on the shared key, a service key, wherein encryption or integrity protection is performed on communication data using the service key in a first service between the first network element and a second network element;
• and
• sending, by the first key management system, the service key to the second network element.

An apparatus, comprising:

• at least one processor;
• and
• a non-transitory memory coupled to the at least one processor and having instructions stored thereon which, when executed by the at least one processor, cause the apparatus to:
• obtain a shared key of a first network element, wherein the shared key of the first network element is generated according to a key parameter obtained after the first network element is authenticated;
• obtain a service key based on the shared key, wherein encryption or integrity protection is performed on communication data using the service key in a first service between the first network element and a second network element;
• and
• send the service key to the second network element.

A system, comprising a home subscriber server and a first key management system, wherein:

• the home subscriber server performs steps to:
• generate a shared key of a first network element based on an integrity key (IK), and a cipher key (CK), and the CK and IK are obtained by performing Authentication and Key Agreement (AKA) authentication with the first network element;
• and
• send the shared key to the first key management system;
• and
• the first key management system performs steps to:
• obtain a service key based on the shared key, wherein encryption or integrity protection is performed on communication data using the service key in a first service between the first network element and a second network element;
• and
• send the service key to the second network element.